Updated istio scripts

Signed-off-by: Lalith Kota <[email protected]>
OpenG2P · May 27, 2024 · 70a8be8 · 70a8be8
1 parent 128bcd6
commit 70a8be8
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 8 deletions.
diff --git a/kubernetes/istio/istio-ef-spdy-upgrade.yaml b/kubernetes/istio/istio-ef-spdy-upgrade.yaml
@@ -0,0 +1,19 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
+metadata:
+  name: spdy-upgrade-filter
+  namespace: istio-system
+spec:
+  configPatches:
+  - applyTo: NETWORK_FILTER
+    match:      
+      listener:
+        filterChain:
+          filter:
+            name: "envoy.filters.network.http_connection_manager"
+    patch:
+      operation: MERGE
+      value:
+        typed_config:
+          "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager"
+          "upgradeConfigs": [ { "upgradeType": "SPDY/3.1" } ]
diff --git a/kubernetes/istio/istio-gateway-tls.yaml b/kubernetes/istio/istio-gateway-tls.yaml
@@ -8,19 +8,19 @@ spec:
     istio: ingressgateway
   servers:
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: http2
       number: 8080
       protocol: HTTP2
     tls:
       httpsRedirect: true
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: https
       number: 8443
-      protocol: HTTP2
+      protocol: HTTPS
     tls:
-      credentialName: tls-openg2p-ingress
+      credentialName: tls-openg2p-${NS}-ingress
       mode: SIMPLE
diff --git a/kubernetes/istio/istio-gateway.yaml b/kubernetes/istio/istio-gateway.yaml
@@ -8,15 +8,15 @@ spec:
     istio: ingressgateway
   servers:
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: http2-redirect-https
       number: 8081
       protocol: HTTP2
     tls:
       httpsRedirect: true
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: http2
       number: 8080
@@ -32,15 +32,15 @@ spec:
     istio: ingressgateway-public
   servers:
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: http2-redirect-https
       number: 8081
       protocol: HTTP2
     tls:
       httpsRedirect: true
   - hosts:
-    - ${WILDCARD_HOSTNAME}
+    - "${WILDCARD_HOSTNAME}"
     port:
       name: http2
       number: 8080