69 lines
1.3 KiB
YAML
69 lines
1.3 KiB
YAML
|
apiVersion: networking.istio.io/v1alpha3
|
||
|
|
kind: Gateway
|
||
|
|
metadata:
|
||
|
|
name: ingressgateway
|
||
|
|
namespace: istio-system
|
||
|
|
annotations:
|
||
|
|
argocd.argoproj.io/sync-wave: "10"
|
||
|
|
spec:
|
||
|
|
selector:
|
||
|
|
istio: ingressgateway
|
||
|
|
servers:
|
||
|
|
- port:
|
||
|
|
number: 80
|
||
|
|
name: http
|
||
|
|
protocol: HTTP2
|
||
|
|
hosts:
|
||
|
|
- "*"
|
||
|
|
tls:
|
||
|
|
httpsRedirect: true
|
||
|
|
- port:
|
||
|
|
number: 443
|
||
|
|
name: https
|
||
|
|
protocol: HTTPS
|
||
|
|
hosts:
|
||
|
|
- "*"
|
||
|
|
tls:
|
||
|
|
mode: SIMPLE
|
||
|
|
privateKey: /etc/istio/ingressgateway-certs/tls.key
|
||
|
|
serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
|
||
|
|
credentialName: public-ingress-cert
|
||
|
|
|
||
|
|
---
|
||
|
|
apiVersion: networking.istio.io/v1alpha3
|
||
|
|
kind: Gateway
|
||
|
|
metadata:
|
||
|
|
name: private-ingressgateway
|
||
|
|
namespace: istio-system
|
||
|
|
annotations:
|
||
|
|
argocd.argoproj.io/sync-wave: "10"
|
||
|
|
spec:
|
||
|
|
selector:
|
||
|
|
istio: private-ingressgateway
|
||
|
|
servers:
|
||
|
|
- port:
|
||
|
|
number: 80
|
||
|
|
name: http
|
||
|
|
protocol: HTTP2
|
||
|
|
hosts:
|
||
|
|
- "*"
|
||
|
|
tls:
|
||
|
|
httpsRedirect: true
|
||
|
|
- port:
|
||
|
|
number: 443
|
||
|
|
name: https
|
||
|
|
protocol: HTTPS
|
||
|
|
hosts:
|
||
|
|
- "*"
|
||
|
|
tls:
|
||
|
|
mode: SIMPLE
|
||
|
|
privateKey: /etc/istio/ingressgateway-certs/tls.key
|
||
|
|
serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
|
||
|
|
credentialName: public-ingress-cert
|
||
|
|
- port:
|
||
|
|
number: 24224
|
||
|
|
name: fluentd-forward
|
||
|
|
protocol: TCP
|
||
|
|
hosts:
|
||
|
|
- "*"
|