sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add istio-mtls-check deployments

Browse Source
This commit is contained in:
emelinda 2026-11-05 08:50:25 +03:00
parent ad28069436
commit 919253808b
3 changed files with 108 additions and 108 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

92
infrastructure/istio-mtls-check/base/10-mtls-b.yaml
View File

@ -29,52 +29,52 @@ spec:
- name: http - name: http
port: 8080 port: 8080
targetPort: 8080 targetPort: 8080
#--- ---
#apiVersion: apps/v1 apiVersion: apps/v1
#kind: Deployment kind: Deployment
#metadata: metadata:
# name: nginx name: nginx
# namespace: mtls-b namespace: mtls-b
#spec: spec:
# replicas: 1 replicas: 1
# selector: selector:
# matchLabels: matchLabels:
# app: nginx app: nginx
# template: template:
# metadata: metadata:
# labels: labels:
# app: nginx app: nginx
# annotations: annotations:
# proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\ proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
# \ SECRET_TTL: \"10m\"\n" \ SECRET_TTL: \"10m\"\n"
# spec: spec:
# serviceAccountName: nginx serviceAccountName: nginx
# containers: containers:
# - name: nginx - name: nginx
# image: nginx:demo-placeholder image: cr.yandex/crp3ccidau046kdj8g9q/nginx:1.27-alpine
# ports: ports:
# - containerPort: 8080 - containerPort: 8080
# readinessProbe: readinessProbe:
# httpGet: httpGet:
# path: /health path: /health
# port: 8080 port: 8080
# initialDelaySeconds: 2 initialDelaySeconds: 2
# periodSeconds: 3 periodSeconds: 3
# volumeMounts: volumeMounts:
# - name: config - name: config
# mountPath: /etc/nginx/conf.d mountPath: /etc/nginx/conf.d
# readOnly: true readOnly: true
# - name: curl - name: curl
# image: curlimages/curl:demo-placeholder image: cr.yandex/crp3ccidau046kdj8g9q/curl
# command: command:
# - /bin/sh - /bin/sh
# - -c - -c
# args: args:
# - while true; do sleep 3600; done - while true; do sleep 3600; done
# volumes: volumes:
# - name: config - name: config
# configMap: configMap:
# name: nginx-config name: nginx-config
--- ---

92
infrastructure/istio-mtls-check/base/20-mtls-a.yaml
View File

@ -27,52 +27,52 @@ spec:
- name: http - name: http
port: 8080 port: 8080
targetPort: 8080 targetPort: 8080
#--- ---
#apiVersion: apps/v1 apiVersion: apps/v1
#kind: Deployment kind: Deployment
#metadata: metadata:
# name: nginx name: nginx
# namespace: mtls-a namespace: mtls-a
#spec: spec:
# replicas: 1 replicas: 1
# selector: selector:
# matchLabels: matchLabels:
# app: nginx app: nginx
# template: template:
# metadata: metadata:
# labels: labels:
# app: nginx app: nginx
# annotations: annotations:
# proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\ proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
# \ SECRET_TTL: \"10m\"\n" \ SECRET_TTL: \"10m\"\n"
# spec: spec:
# serviceAccountName: nginx serviceAccountName: nginx
# containers: containers:
# - name: nginx - name: nginx
# image: nginx:demo-placeholder image: cr.yandex/crp3ccidau046kdj8g9q/nginx:1.27-alpine
# ports: ports:
# - containerPort: 8080 - containerPort: 8080
# readinessProbe: readinessProbe:
# httpGet: httpGet:
# path: /health path: /health
# port: 8080 port: 8080
# initialDelaySeconds: 2 initialDelaySeconds: 2
# periodSeconds: 3 periodSeconds: 3
# volumeMounts: volumeMounts:
# - name: config - name: config
# mountPath: /etc/nginx/conf.d mountPath: /etc/nginx/conf.d
# readOnly: true readOnly: true
# - name: curl - name: curl
# image: curlimages/curl:demo-placeholder image: cr.yandex/crp3ccidau046kdj8g9q/curl
# command: command:
# - /bin/sh - /bin/sh
# - -c - -c
# args: args:
# - while true; do sleep 3600; done - while true; do sleep 3600; done
# volumes: volumes:
# - name: config - name: config
# configMap: configMap:
# name: nginx-config name: nginx-config
--- ---

32
infrastructure/istio-mtls-check/base/30-plain-client.yaml
View File

@ -1,16 +1,16 @@
#apiVersion: v1 apiVersion: v1
#kind: Pod kind: Pod
#metadata: metadata:
# name: plain-client name: plain-client
# namespace: mtls-a namespace: mtls-a
# labels: labels:
# sidecar.istio.io/inject: 'false' sidecar.istio.io/inject: 'false'
#spec: spec:
# containers: containers:
# - name: curl - name: curl
# image: curlimages/curl:demo-placeholder image: cr.yandex/crp3ccidau046kdj8g9q/curl
# command: command:
# - /bin/sh - /bin/sh
# - -c - -c
# args: args:
# - while true; do sleep 3600; done - while true; do sleep 3600; done