Commit Graph

134 Commits

Author SHA1 Message Date
1133902b5d fix: add missing standard labels to custom Istio resources 2021-04-22 12:00:13 +02:00
401f024be6 feat: introduce ingress proxy recommended hardening/uning settings 2021-04-20 16:33:45 +02:00
64dd6160cb feat: improved update strategy and timing to reduce 5XX during istio ingress deployments 2021-04-20 12:49:29 +02:00
33133f359c refactor: Move Istio config to new place 2021-04-16 12:38:57 +02:00
321c2fe58b fix: Upgrade Istio to 1.9.3 due to various security issues upstream 2021-04-16 11:41:13 +02:00
1a1f5e7cd6 chore: Bump Istio version from 1.9.1 to 1.9.2 2021-03-26 17:34:43 +01:00
4d015cc4c6 Update chart READMEs 2021-03-25 16:32:49 +01:00
948764eca7 Version bump charts 2021-03-02 11:28:13 +01:00
cbeb7b9704 Istio version bump due to security release 2021-03-02 10:33:12 +01:00
b6e92ceba2 Upgrade Istio to 1.9 2021-02-25 23:44:33 +01:00
fc45e7fd0b Istio minor version bump 2021-01-26 12:54:56 +00:00
521bb2a5c1 Istio version bump, ingress terminationgraceperiod patch, aws-ebs version bump 2020-12-16 03:40:14 -08:00
2a56489273 ECK fixes for Kube 1.18, Redis cluster support incl. Enyoy proxy 2020-12-04 06:05:35 -08:00
a510dd06d9 More fixes and upgrade docs 2020-12-01 07:46:04 -08:00
2be387b87b ArgoCd naming fixes 2020-11-30 09:30:06 -08:00
0e7a2e70d6 More fixes 2020-11-30 04:13:52 -08:00
e27692430e More bugfixes, ingress certs 2020-11-28 15:01:20 -08:00
10db0f09d0 Add missing .helmignore 2020-11-26 15:31:40 -08:00
c8a903110f More fixes now adding ArgoCD 2020-11-26 05:21:10 -08:00
32ed7cf3a0 Revert Kube version check to make argo work 2020-11-24 06:51:48 -08:00
cd24b9fa1a First try adding argoCD day 2 2020-11-24 06:44:57 -08:00
35b1570d18 Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
c556df65ff Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
1aba6fcbe6 Fix the warning due to double CRDs 2020-10-02 10:44:15 -07:00
cd5b38bb6c Istio version bump, make http10 support optional, enable redis,mysql protocol support 2020-10-02 10:38:09 -07:00
df20d07d10 Add EnvoyFilter to enable tcp keepalive for all Ingress Envoys 2020-09-17 22:25:09 +01:00
ec18529956 TCP keepalive tuning for Istio 2020-09-17 17:54:57 +01:00
a0873631c4 Set global meshpolicy to prevent upgrade to http2 by default 2020-09-16 16:50:48 +01:00
189899c296 Disable default poddisruptionbudgets, replace with individual todo 2020-09-11 18:21:00 +01:00
94a0db6a80 Still double CRDs 2020-09-11 16:03:22 +01:00
8460310eb8 Istio is really picky 2020-09-11 16:01:15 +01:00
efdcbe741e Move ports > 1024 as we run non-root 2020-09-11 15:45:04 +01:00
47c96ba6c5 Set JSON for access logs 2020-09-11 15:39:47 +01:00
812da69ae3 Remove xp settings 2020-09-11 15:32:14 +01:00
990bf89eab Re-enable JSON access logs 2020-09-11 15:28:51 +01:00
b873f1389e Re-enable access logs 2020-09-11 15:22:34 +01:00
3c79677715 Remove deprecated fields for 1.7 2020-09-11 15:20:51 +01:00
a83f87ad15 Remove deprecated fields for 1.7 2020-09-11 15:18:30 +01:00
6c90669fd8 Remove deprecated fields for 1.7 2020-09-11 15:15:53 +01:00
3c7f1a8f74 Version bump Istio to 1.7.1 2020-09-11 15:06:38 +01:00
bf4deda82e Remove double CRD for Istio 2020-09-11 14:42:25 +01:00
428fa56b17 more istio cleanup 2020-09-11 12:37:22 +01:00
5cd030d0db more istio cleanup 2020-09-11 12:32:46 +01:00
90a5038d31 more istio cleanup 2020-09-11 12:23:08 +01:00
6015b4ee9b Minot istio tweaks 2020-09-11 12:08:58 +01:00
a3a1f0bb8f Istio version bump to 1.6.9 2020-09-10 16:44:49 +01:00
88725c33be Move scrape username to its own secret as eck operator cleans up otherwise 2020-09-04 01:13:39 +01:00
8b82972d06 fluentd / ES fixes 2020-08-26 18:13:21 +01:00
b376544424 Fix default value 2020-08-25 14:46:22 +01:00
982685aa4b Make Istio Ingress hosts specific matching the cert 2020-08-25 14:45:56 +01:00
7310235fa2 Add fluent-bit support to kuberzero-logging, istio fixes 2020-08-22 18:27:18 +01:00
715e1d6c69 Switch istio ingress to http healthchecks, more tuning 2020-08-21 14:17:47 +01:00
f30df54c73 Also apply improved healthcehck handling and draining to public ingress 2020-08-20 18:32:01 +01:00
2f258a3194 Apply graceful shutdown fixes interim like Contour 2020-08-20 17:38:18 +01:00
be013b67ce Add graceful shutdown to Ingress gateway, might need istio 1.7 to actually work though 2020-08-20 16:55:47 +01:00
233e53c928 Set Istio idle timeout to 1h 2020-08-20 16:12:41 +01:00
96a6132a43 Set Istio idle timeout 2020-08-20 15:55:49 +01:00
afe2e4a34c Bugfix release for Calico, README updates 2020-08-14 17:05:25 +01:00
8880b983ac Add rabbitmq ingress gateway def 2020-08-11 15:09:48 +01:00
74599ddf1b Make sure nodeselector is a string 2020-08-10 13:28:45 +01:00
665fc68f7e make nodeselector for private ingress configurable 2020-08-10 13:20:36 +01:00
ede6d6513f Update all charts to use latest lib 2020-08-07 17:02:22 +01:00
24ebdf360f Various deps updates, Istio to 1.6.7 2020-08-06 18:43:59 +01:00
bbc60e778f Tweaks for aws-ebs-csi-driver, added initial aws-efs-csi-driver 2020-07-24 15:40:24 +01:00
47809b452f Remove duplicate CRD 2020-07-24 12:31:22 +01:00
84b7be318d Add LoadBalancer support to private ingress 2020-07-24 10:31:01 +00:00
0906fed564 Make private Ingress optional but enabled by default 2020-07-23 15:01:34 +00:00
40164dd02b Make kubezero work on baremetal 2020-07-23 14:52:11 +00:00
16cb90730e Another round of Istio fixes 2020-07-22 20:25:18 +01:00
9aff2d271a More istio bootstrap tweaks 2020-07-22 20:11:34 +01:00
60fd7b33d0 Bugfix, move CRDs into plain manifest to help bootstrapping 2020-07-22 16:01:36 +01:00
3b1eb3a014 Fix private ingress gateways affinity 2020-07-22 00:11:38 +01:00
4430207673 More Istio 1.6 tuning 2020-07-22 00:08:19 +01:00
0c88f62889 Add KubeZero default Istio config 2020-07-21 18:30:21 +01:00
55eace6924 More minor fixed for new Istio integration 2020-07-15 18:13:23 +01:00
bb90238623 Set proper istio-operator values 2020-07-15 16:17:47 +01:00
5eca427e36 We skip Istio 1.5, hook into deploy flow 2020-07-15 15:21:49 +01:00
ca110d6245 Make IPPool optional to fix bootstrap issues, doc fixes 2020-07-15 11:44:43 +01:00
de862c7a7e Update docs 2020-07-14 20:49:20 +01:00
5340daf3a0 Revert istio-operator to 1.5 as we cannot skip versions during upgrades 2020-07-14 18:17:08 +01:00
b35358b0d2 Istio-operator to 1.6 2020-07-14 18:01:13 +01:00
d7d4047bfe Add Istio into kubezero, disabled by default 2020-07-14 17:39:12 +01:00
5661a5d7c3 Fix local-path-provisioner, map istio-operator to control plane 2020-07-14 17:30:43 +01:00
74ce5cc45c Kiam minor version bump, first draft of istio chart 2020-07-14 16:58:14 +01:00