Make Istio Ingress hosts specific matching the cert

charts/kubezero-istio/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-istio
 description: KubeZero Umbrella Chart for Istio
 type: application
-version: 0.2.3
+version: 0.2.4
 appVersion: 1.6.7
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png

charts/kubezero-istio/templates/ingress-gateway.yaml

@@ -14,7 +14,7 @@ spec:
       name: http
       protocol: HTTP2
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
     tls:
       httpsRedirect: true
   - port:
@@ -22,7 +22,7 @@ spec:
       name: https
       protocol: HTTPS
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
     tls:
       mode: SIMPLE
       privateKey: /etc/istio/ingressgateway-certs/tls.key
@@ -47,7 +47,7 @@ spec:
       name: http
       protocol: HTTP2
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
     tls:
       httpsRedirect: true
   - port:
@@ -55,7 +55,7 @@ spec:
       name: https
       protocol: HTTPS
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
     tls:
       mode: SIMPLE
       privateKey: /etc/istio/ingressgateway-certs/tls.key
@@ -66,17 +66,17 @@ spec:
       name: amqp
       protocol: TCP
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
   - port:
       number: 5671
       name: amqps
       protocol: TCP
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
   - port:
       number: 24224
       name: fluentd-forward
       protocol: TCP
     hosts:
-    - "*"
+    {{- toYaml .Values.ingress.dnsNames | nindent 4 }}
 {{- end }}

charts/kubezero-istio/values.yaml

@@ -9,8 +9,9 @@ ingress:
   private:
     enabled: true
     nodeSelector: "31080_31443_30671_30672_31224"
-  #dnsNames:
-  #- "*.example.com"
+  dnsNames:
+    - "*.example.com"
+    - "fck.me"
 
 istio-operator:
   hub: docker.io/istio