Skip to content
Snippets Groups Projects
Commit 9410420d authored by Kalin Canov's avatar Kalin Canov :fishing_pole_and_fish:
Browse files

Merge branch 'argo-istio-integration' into 'main'

Add Istio and ArgoCD templates to helm

See merge request eclipse/xfsc/tsa/policy!45
parents 9a6dc104 bb4adc60
No related branches found
No related tags found
No related merge requests found
# ArgoCD Application Definition
source:
repoURL: "{{ .RepoURL }}"
path: "{{ .Path }}"
targetRevision: "{{ .TargetRevision }}"
applications:
- name: apps-of-apps
namespace: argocd
enabled: true
k8sAPI: https://kubernetes.default.svc
project: my-project
sourcePath: "."
sourceRef: "main"
chartName: "my-name"
ignoreDifferences:
- group: admissionregistration.k8s.io
kind: ValidatingWebhookConfiguration
name: cert-manager-webhook
jsonPointers:
- /webhooks/0/namespaceSelector/matchExpressions/2
helmValues:
- my_chart/values.yaml # Include values from the Helm chart
- name: example-app
enabled: true
sourcePath: "."
helmValues:
- my_chart/values.yaml # Include values from the Helm chart
- my_chart/example-values.yaml # Include additional example-specific values
# templates/istio/authorization-rules.yaml
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: { { include "my_chart.fullname" . } }
spec:
selector:
matchLabels:
app.kubernetes.io/name: { { include "my_chart.name" . } }
app.kubernetes.io/instance: { { .Release.Name } }
action: ALLOW
rules:
- from:
- source:
principals: ["cluster.local/ns/default/sa/default"]
to:
- operation:
methods: ["GET"]
# templates/istio/gateway.yaml
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
name: my-chart-gateway
spec:
selector:
istio: ingressgateway
servers:
- port:
number: 80
name: http
protocol: HTTP
hosts:
- "*"
# templates/istio/virtual-service.yaml
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: { { include "my_chart.fullname" . } }
spec:
hosts:
- "*"
gateways:
- my-chart-gateway
http:
- route:
- destination:
host: { { include "my_chart.fullname" . } }
port:
number: 80
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment