fix: add missing standard labels to custom Istio resources
This commit is contained in:
parent
92d7a56004
commit
6b2e248f5d
|
@ -6,6 +6,8 @@ kind: ConfigMap
|
|||
metadata:
|
||||
name: istio-gateway-bootstrap-config
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||
data:
|
||||
custom_bootstrap.json: |
|
||||
{
|
||||
|
|
|
@ -4,6 +4,8 @@ kind: EnvoyFilter
|
|||
metadata:
|
||||
name: ingressgateway-hardening
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||
spec:
|
||||
configPatches:
|
||||
- applyTo: CLUSTER
|
||||
|
|
|
@ -4,6 +4,8 @@ kind: EnvoyFilter
|
|||
metadata:
|
||||
name: ingressgateway-listener-tcp-keepalive
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
{{ include "kubezero-lib.labels" . | indent 4 }}
|
||||
spec:
|
||||
configPatches:
|
||||
- applyTo: LISTENER
|
||||
|
|
|
@ -1,3 +1,6 @@
|
|||
### TODO
|
||||
- https://istio.io/latest/docs/ops/configuration/security/harden-docker-images/
|
||||
|
||||
#!/bin/bash
|
||||
set -ex
|
||||
|
||||
|
|
Loading…
Reference in New Issue