Skip to content
Snippets Groups Projects
Commit 89d08232 authored by Kalin Daskalov's avatar Kalin Daskalov
Browse files

Add Istio and ArgoCD templates to helm

parent 4f233024
No related branches found
No related tags found
No related merge requests found
# ArgoCD Application Definition
source:
repoURL: "{{ .RepoURL }}"
path: "{{ .Path }}"
targetRevision: "{{ .TargetRevision }}"
applications:
- name: apps-of-apps
namespace: argocd
enabled: true
k8sAPI: https://kubernetes.default.svc
project: my-project
sourcePath: "."
sourceRef: "main"
chartName: "my-name"
ignoreDifferences:
- group: admissionregistration.k8s.io
kind: ValidatingWebhookConfiguration
name: cert-manager-webhook
jsonPointers:
- /webhooks/0/namespaceSelector/matchExpressions/2
helmValues:
- my_chart/values.yaml # Include values from the Helm chart
- name: example-app
enabled: true
sourcePath: "."
helmValues:
- my_chart/values.yaml # Include values from the Helm chart
- my_chart/example-values.yaml # Include additional example-specific values
# templates/istio/authorization-rules.yaml
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: { { include "my_chart.fullname" . } }
spec:
selector:
matchLabels:
app.kubernetes.io/name: { { include "my_chart.name" . } }
app.kubernetes.io/instance: { { .Release.Name } }
action: ALLOW
rules:
- from:
- source:
principals: ["cluster.local/ns/default/sa/default"]
to:
- operation:
methods: ["GET"]
# templates/istio/gateway.yaml
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
name: my-chart-gateway
spec:
selector:
istio: ingressgateway
servers:
- port:
number: 80
name: http
protocol: HTTP
hosts:
- "*"
# templates/istio/virtual-service.yaml
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: { { include "my_chart.fullname" . } }
spec:
hosts:
- "*"
gateways:
- my-chart-gateway
http:
- route:
- destination:
host: { { include "my_chart.fullname" . } }
port:
number: 80
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment