iac/clusters/wb/infrastructure/patches/istio-config.yaml

109 lines
3.1 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: istio-config
namespace: default
spec:
interval: 5m
timeout: 10m
dependsOn: []
values:
global:
env: wb
environments:
wb:
namespaces: []
certManager:
clusterIssuers: {}
certificates: {}
istio:
envoyFilters: {}
authorizationPolicies: {}
requestAuthentications: {}
gateways:
gitea:
name: gitea-gw
namespace: gateway
selector:
istio: ingressgateway
servers:
- hosts:
- gitea-srx.wb.ru
tls:
credentialName: istio-gateway-wildcard-cert
grafana:
name: grafana-gw
namespace: gateway
selector:
istio: ingressgateway
servers:
- hosts:
- grafana-srx.wb.ru
tls:
credentialName: istio-gateway-wildcard-cert
openobserve:
name: openobserve-gw
namespace: gateway
selector:
istio: ingressgateway
servers:
- hosts:
- openobserve-srx.wb.ru
tls:
credentialName: istio-gateway-wildcard-cert
vmalert:
name: vmalert-gw
namespace: gateway
selector:
istio: ingressgateway
servers:
- hosts:
- vmalert-srx.wb.ru
tls:
credentialName: istio-gateway-wildcard-cert
virtualServices:
gitea-vs:
namespace: gitea
hosts:
- gitea-srx.wb.ru
gateways:
- gateway/gitea-gw
routes:
- path:
prefix: /
service: gitea.gitea.svc.cluster.local
port: 3000
grafana-vs:
namespace: prometheus-stack
hosts:
- grafana-srx.wb.ru
gateways:
- gateway/grafana-gw
routes:
- path:
prefix: /
service: prometheus-stack-grafana.prometheus-stack.svc.cluster.local
port: 80
openobserve-vs:
namespace: openobserve
hosts:
- openobserve-srx.wb.ru
gateways:
- gateway/openobserve-gw
routes:
- path:
prefix: /
service: openobserve-web.openobserve.svc.cluster.local
port: 5080
vmalert-vs:
namespace: goalert
hosts:
- vmalert-srx.wb.ru
gateways:
- gateway/vmalert-gw
routes:
- path:
prefix: /
service: goalert.goalert.svc.cluster.local
port: 8081