fix: add missing standard labels to custom Istio resources
This commit is contained in:
parent
6e173070a8
commit
1133902b5d
@ -6,6 +6,8 @@ kind: ConfigMap
|
|||||||
metadata:
|
metadata:
|
||||||
name: istio-gateway-bootstrap-config
|
name: istio-gateway-bootstrap-config
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||||
data:
|
data:
|
||||||
custom_bootstrap.json: |
|
custom_bootstrap.json: |
|
||||||
{
|
{
|
||||||
|
@ -4,6 +4,8 @@ kind: EnvoyFilter
|
|||||||
metadata:
|
metadata:
|
||||||
name: ingressgateway-hardening
|
name: ingressgateway-hardening
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||||
spec:
|
spec:
|
||||||
configPatches:
|
configPatches:
|
||||||
- applyTo: CLUSTER
|
- applyTo: CLUSTER
|
||||||
|
@ -4,6 +4,8 @@ kind: EnvoyFilter
|
|||||||
metadata:
|
metadata:
|
||||||
name: ingressgateway-listener-tcp-keepalive
|
name: ingressgateway-listener-tcp-keepalive
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||||
spec:
|
spec:
|
||||||
configPatches:
|
configPatches:
|
||||||
- applyTo: LISTENER
|
- applyTo: LISTENER
|
||||||
|
@ -1,3 +1,6 @@
|
|||||||
|
### TODO
|
||||||
|
- https://istio.io/latest/docs/ops/configuration/security/harden-docker-images/
|
||||||
|
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
set -ex
|
set -ex
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user