ston1th/kube
1
0
Fork 0
Code Releases Activity

istio improvements

Browse source
This commit is contained in:
ston1th 2019-08-07 00:42:25 +02:00
commit 97addda5f4
13 changed files with 388 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

62
testapp/istio/mtls.yaml Normal file
View file

@ -0,0 +1,62 @@
apiVersion: authentication.istio.io/v1alpha1
kind: MeshPolicy
metadata:
name: default
spec:
peers:
- mtls: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: default
namespace: istio-system
spec:
host: "*.local"
trafficPolicy:
tls:
mode: ISTIO_MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: api-server
namespace: istio-system
spec:
host: "kubernetes.default.svc.cluster.local"
trafficPolicy:
tls:
mode: DISABLE
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: rook
namespace: istio-system
spec:
host: "*.rook-ceph.svc.cluster.local"
trafficPolicy:
tls:
mode: DISABLE
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: kiali
namespace: istio-system
spec:
host: "kiali.istio-system.svc.cluster.local"
trafficPolicy:
tls:
mode: DISABLE
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: k8s-testapp-cert
namespace: istio-system
spec:
host: "k8s-testapp-cert.istio-system.svc.cluster.local"
trafficPolicy:
tls:
mode: DISABLE