fix: add missing standard labels to custom Istio resources

This commit is contained in:
Stefan Reimer 2021-04-22 12:00:13 +02:00
parent 6e173070a8
commit 1133902b5d
4 changed files with 9 additions and 0 deletions

View File

@ -6,6 +6,8 @@ kind: ConfigMap
metadata: metadata:
name: istio-gateway-bootstrap-config name: istio-gateway-bootstrap-config
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels:
{{ include "kubezero-lib.labels" . | indent 4 }}
data: data:
custom_bootstrap.json: | custom_bootstrap.json: |
{ {

View File

@ -4,6 +4,8 @@ kind: EnvoyFilter
metadata: metadata:
name: ingressgateway-hardening name: ingressgateway-hardening
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels:
{{ include "kubezero-lib.labels" . | indent 4 }}
spec: spec:
configPatches: configPatches:
- applyTo: CLUSTER - applyTo: CLUSTER

View File

@ -4,6 +4,8 @@ kind: EnvoyFilter
metadata: metadata:
name: ingressgateway-listener-tcp-keepalive name: ingressgateway-listener-tcp-keepalive
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels:
{{ include "kubezero-lib.labels" . | indent 4 }}
spec: spec:
configPatches: configPatches:
- applyTo: LISTENER - applyTo: LISTENER

View File

@ -1,3 +1,6 @@
### TODO
- https://istio.io/latest/docs/ops/configuration/security/harden-docker-images/
#!/bin/bash #!/bin/bash
set -ex set -ex