diff --git a/charts/kubezero-istio-gateway/Chart.yaml b/charts/kubezero-istio-gateway/Chart.yaml index 210c4f8b..8be5b214 100644 --- a/charts/kubezero-istio-gateway/Chart.yaml +++ b/charts/kubezero-istio-gateway/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: kubezero-istio-gateway description: KubeZero Umbrella Chart for Istio gateways type: application -version: 0.24.3 +version: 0.24.6 home: https://kubezero.com icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png keywords: @@ -17,6 +17,6 @@ dependencies: version: 0.2.1 repository: https://cdn.zero-downtime.net/charts/ - name: gateway - version: 1.24.3 + version: 1.24.6 repository: https://istio-release.storage.googleapis.com/charts kubeVersion: ">= 1.30.0-0" diff --git a/charts/kubezero-istio-gateway/README.md b/charts/kubezero-istio-gateway/README.md index 4515c52c..c6a35f61 100644 --- a/charts/kubezero-istio-gateway/README.md +++ b/charts/kubezero-istio-gateway/README.md @@ -1,6 +1,6 @@ # kubezero-istio-gateway -![Version: 0.24.3](https://img.shields.io/badge/Version-0.24.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.24.6](https://img.shields.io/badge/Version-0.24.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) KubeZero Umbrella Chart for Istio gateways @@ -21,7 +21,7 @@ Kubernetes: `>= 1.30.0-0` | Repository | Name | Version | |------------|------|---------| | https://cdn.zero-downtime.net/charts/ | kubezero-lib | 0.2.1 | -| https://istio-release.storage.googleapis.com/charts | gateway | 1.24.3 | +| https://istio-release.storage.googleapis.com/charts | gateway | 1.24.6 | ## Values diff --git a/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml b/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml index 0238a789..3ea40df2 100644 --- a/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml +++ b/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.24.3 +appVersion: 1.24.6 description: Helm chart for deploying Istio gateways icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -9,4 +9,4 @@ name: gateway sources: - https://github.com/istio/istio type: application -version: 1.24.3 +version: 1.24.6 diff --git a/charts/kubezero-istio-gateway/templates/envoyfilter-listener.yaml b/charts/kubezero-istio-gateway/templates/envoyfilter-listener.yaml index d38b0e53..0dc61c73 100644 --- a/charts/kubezero-istio-gateway/templates/envoyfilter-listener.yaml +++ b/charts/kubezero-istio-gateway/templates/envoyfilter-listener.yaml @@ -1,7 +1,7 @@ apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: - name: {{ include "gatewayName" . | trimPrefix "istio-" }}-proxy-protocol + name: {{ include "gatewayName" . | trimPrefix "istio-" }}-listener namespace: {{ .Release.Namespace }} labels: {{ include "kubezero-lib.labels" . | nindent 4 }} @@ -10,24 +10,20 @@ spec: labels: {{- include "gatewaySelectorLabels" . | nindent 6 }} configPatches: - - applyTo: LISTENER + - applyTo: LISTENER_FILTER + match: + context: GATEWAY + listener: + portNumber: 8443 + listenerFilter: "envoy.filters.listener.tls_inspector" patch: - operation: MERGE + operation: REPLACE value: - listener_filters: - {{- if .Values.proxyProtocol }} - - name: envoy.filters.listener.proxy_protocol - typed_config: - "@type": type.googleapis.com/envoy.extensions.filters.listener.proxy_protocol.v3.ProxyProtocol - filter_disabled: - destination_port_range: - start: 1025 - end: 1026 - {{- end }} - - name: envoy.filters.listener.tls_inspector - typed_config: - "@type": type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector - filter_disabled: - destination_port_range: - start: 1025 - end: 1026 + name: envoy.filters.listener.tls_inspector + typed_config: + "@type": type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector + "initialReadBufferSize": 512 + filter_disabled: + destination_port_range: + start: 1025 + end: 1026 diff --git a/charts/kubezero-istio-gateway/templates/envoyfilter-proxyprotocol.yaml b/charts/kubezero-istio-gateway/templates/envoyfilter-proxyprotocol.yaml new file mode 100644 index 00000000..5e59cdc3 --- /dev/null +++ b/charts/kubezero-istio-gateway/templates/envoyfilter-proxyprotocol.yaml @@ -0,0 +1,27 @@ +{{- if .Values.proxyProtocol }} +apiVersion: networking.istio.io/v1alpha3 +kind: EnvoyFilter +metadata: + name: {{ include "gatewayName" . | trimPrefix "istio-" }}-proxy-protocol + namespace: {{ .Release.Namespace }} + labels: + {{ include "kubezero-lib.labels" . | nindent 4 }} +spec: + workloadSelector: + labels: + {{- include "gatewaySelectorLabels" . | nindent 6 }} + configPatches: + - applyTo: LISTENER_FILTER + match: + context: GATEWAY + patch: + operation: INSERT_FIRST + value: + name: envoy.filters.listener.proxy_protocol + typed_config: + "@type": type.googleapis.com/envoy.extensions.filters.listener.proxy_protocol.v3.ProxyProtocol + filter_disabled: + destination_port_range: + start: 1025 + end: 1026 +{{- end }} diff --git a/charts/kubezero-istio/Chart.yaml b/charts/kubezero-istio/Chart.yaml index 6125a065..daf8b66d 100644 --- a/charts/kubezero-istio/Chart.yaml +++ b/charts/kubezero-istio/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: kubezero-istio description: KubeZero Umbrella Chart for Istio type: application -version: 0.24.3 +version: 0.24.6 home: https://kubezero.com icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png keywords: @@ -20,10 +20,10 @@ dependencies: repository: https://cdn.zero-downtime.net/charts/ condition: envoy-ratelimit.enabled - name: base - version: 1.24.3 + version: 1.24.6 repository: https://istio-release.storage.googleapis.com/charts - name: istiod - version: 1.24.3 + version: 1.24.6 repository: https://istio-release.storage.googleapis.com/charts - name: kiali-server version: "2.6.0" diff --git a/charts/kubezero-istio/README.md b/charts/kubezero-istio/README.md index e5865aa7..ec4f230c 100644 --- a/charts/kubezero-istio/README.md +++ b/charts/kubezero-istio/README.md @@ -1,6 +1,6 @@ # kubezero-istio -![Version: 0.24.3](https://img.shields.io/badge/Version-0.24.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.24.6](https://img.shields.io/badge/Version-0.24.6-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) KubeZero Umbrella Chart for Istio @@ -22,8 +22,8 @@ Kubernetes: `>= 1.30.0-0` |------------|------|---------| | https://cdn.zero-downtime.net/charts/ | envoy-ratelimit | 0.1.2 | | https://cdn.zero-downtime.net/charts/ | kubezero-lib | 0.2.1 | -| https://istio-release.storage.googleapis.com/charts | base | 1.24.3 | -| https://istio-release.storage.googleapis.com/charts | istiod | 1.24.3 | +| https://istio-release.storage.googleapis.com/charts | base | 1.24.6 | +| https://istio-release.storage.googleapis.com/charts | istiod | 1.24.6 | | https://kiali.org/helm-charts | kiali-server | 2.6.0 | ## Values