istio: allow to change tls cipher suites and headers

Signed-off-by: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com>
This commit is contained in:
Pascal Sthamer
2025-02-20 15:16:49 +01:00
parent f09d8b6751
commit 53a7d2f2c4
5 changed files with 46 additions and 2 deletions
+12
View File
@@ -1632,18 +1632,30 @@ istio:
httpsRedirect: false
## @param istio.gateway.https.enabled Enable HTTPS server on port 443
## @param istio.gateway.https.tlsCredentialName The name of the secret that holds the TLS certs including the CA certificates.
## @param istio.gateway.https.tlsCipherSuites If specified, only support the specified cipher list.
## NOTE: The secret must exist in the namespace of the istio gateway pod
##
https:
enabled: false
tlsCredentialName: ""
tlsCipherSuites: []
## @param istio.gateway.extraServers Additional servers for the Gateway resource
## ref: https://istio.io/latest/docs/reference/config/networking/gateway/#Server
##
extraServers: []
virtualService:
## @param istio.virtualService.annotations Additional annotations for the VirtualService resource.
##
annotations: {}
## @param istio.virtualService.backendHeaders Header manipulation rules for backend traffic
## ref: https://istio.io/latest/docs/reference/config/networking/virtual-service/#Headers
##
backendHeaders: {}
## @param istio.virtualService.frontendHeaders Header manipulation rules for frontend traffic
## ref: https://istio.io/latest/docs/reference/config/networking/virtual-service/#Headers
##
frontendHeaders: {}
## @section Persistence Parameters
##