added istio ingress proxy

nginx-ingress-proxy.yaml

@@ -1,46 +1,46 @@
-# config/100-serviceaccount.yaml
+# config/nginx/100-serviceaccount.yaml
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: nginx-ingress-proxy
+  name: ingress-proxy
   namespace: ingress-nginx
-# config/200-rolebinding.yaml
+# config/nginx/200-rolebinding.yaml
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: nginx-ingress-proxy
+  name: ingress-proxy
   namespace: ingress-nginx
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: nginx-ingress-proxy
+  name: ingress-proxy
 subjects:
 - kind: ServiceAccount
-  name: nginx-ingress-proxy
-# config/200-role.yaml
+  name: ingress-proxy
+# config/nginx/200-role.yaml
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: nginx-ingress-proxy
+  name: ingress-proxy
   namespace: ingress-nginx
 rules:
 - apiGroups: [""]
   resources: ["configmaps"]
-  resourceNames: ["nginx-ingress-proxy-config"]
+  resourceNames: ["ingress-proxy-config"]
   verbs: ["get"]
 - apiGroups: ["policy"]
   resources: ["podsecuritypolicies"]
-  resourceNames: ["nginx-ingress-proxy"]
+  resourceNames: ["ingress-proxy"]
   verbs: ["use"]
-# config/300-psp.yaml
+# config/nginx/300-psp.yaml
 ---
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
-  name: nginx-ingress-proxy
+  name: ingress-proxy
   annotations:
     seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
     apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
@@ -72,26 +72,26 @@ spec:
   hostPorts:
   - min: 80
     max: 443
-# config/deployment.yaml
+# config/nginx/deployment.yaml
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nginx-ingress-proxy
+  name: ingress-proxy
   namespace: ingress-nginx
   labels:
-    app: nginx-ingress-proxy
+    app: ingress-proxy
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app: nginx-ingress-proxy
+      app: ingress-proxy
   template:
     metadata:
       labels:
-        app: nginx-ingress-proxy
+        app: ingress-proxy
     spec:
-      serviceAccountName: nginx-ingress-proxy
+      serviceAccountName: ingress-proxy
       nodeSelector:
         kubernetes.io/hostname: MASTERNODE
       tolerations:
@@ -101,7 +101,7 @@ spec:
       - name: nginx
         image: nginx@sha256:2911ad2d54f4cf4dc7ad21af122c1eefce16836a34be751c63351ca1fb452d57 # nginx:mainline-alpine
         volumeMounts:
-        - name: nginx-ingress-proxy-config
+        - name: ingress-proxy-config
           mountPath: /etc/nginx
         securityContext:
           allowPrivilegeEscalation: false
@@ -121,15 +121,15 @@ spec:
           hostPort: 443
           protocol: TCP
       volumes:
-      - name: nginx-ingress-proxy-config
+      - name: ingress-proxy-config
         configMap:
-          name: nginx-ingress-proxy-config
-# config/nginx-configmap.yaml
+          name: ingress-proxy-config
+# config/nginx/ingress-proxy-configmap.yaml
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: nginx-ingress-proxy-config
+  name: ingress-proxy
   namespace: ingress-nginx
 data:
   nginx.conf: |
@@ -156,7 +156,7 @@ data:
         proxy_protocol on;
       }
     }
-# config/nginx-configuration.yaml
+# config/nginx/nginx-configuration.yaml
 ---
 apiVersion: v1
 kind: ConfigMap