Skip to content

Add Istio mTLS injection to Hub #352

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 55 commits into
base: main
Choose a base branch
from
Open
Changes from 1 commit
Commits
Show all changes
55 commits
Select commit Hold shift + click to select a range
7b2d8af
add istio-injection label to ml resources
aaronreynoza Aug 29, 2024
d30b337
fix labels
aaronreynoza Aug 29, 2024
f56d29d
revert unneded changes
aaronreynoza Aug 29, 2024
6f1d2df
change
aaronreynoza Aug 29, 2024
e669d4f
enable istio injection without validation
aaronreynoza Aug 29, 2024
353920f
start istio segmentation
aaronreynoza Aug 29, 2024
d4b78c6
add istio-injection label to statefulset resources
aaronreynoza Sep 2, 2024
8beb77a
make istio injection default variable as true
aaronreynoza Sep 2, 2024
deafa42
test
aaronreynoza Sep 2, 2024
f79ffcc
add ref to istio files from ml templates
aaronreynoza Sep 2, 2024
a6886a2
revert moja istio changes
aaronreynoza Sep 2, 2024
86f55db
add more labels
aaronreynoza Sep 4, 2024
c8bc2f9
add namespace wide injection test
aaronreynoza Sep 6, 2024
b608aa6
enable mTLS peerAuthentication for hub
aaronreynoza Sep 6, 2024
36f27ce
fix EOF
aaronreynoza Sep 6, 2024
b165dca
remove EOF
aaronreynoza Sep 6, 2024
d8ece6c
change to v1beta1
aaronreynoza Sep 9, 2024
93308fd
fix to correct namespace
aaronreynoza Sep 9, 2024
bab425f
hardcode mcm ns name
aaronreynoza Sep 9, 2024
486ef6b
add authorization policies for namespaces
aaronreynoza Sep 10, 2024
da060c8
fix authorization policy
aaronreynoza Sep 10, 2024
3709562
switch to permissive AP and disable istio in mysql kafka
aaronreynoza Sep 10, 2024
1b085af
fix lint
aaronreynoza Sep 10, 2024
38ffcf3
add istio-injection disabled to mysql
aaronreynoza Sep 10, 2024
060e10c
add mysql label to disable istio-injection
aaronreynoza Sep 10, 2024
e5db345
fix boolean
aaronreynoza Sep 10, 2024
8a0b3bc
add more labels
aaronreynoza Sep 10, 2024
b14c01d
disable istio injection
aaronreynoza Sep 10, 2024
cab2142
only inject istio in mojaloop and mcm
aaronreynoza Sep 10, 2024
60948bd
fix label
aaronreynoza Sep 10, 2024
5d76f4d
if statement label
aaronreynoza Sep 10, 2024
1fb62b9
go monkey
aaronreynoza Sep 10, 2024
96116c1
learning tpl, one commit at a time
aaronreynoza Sep 10, 2024
399de79
indenting
aaronreynoza Sep 10, 2024
e74f3c3
change labels
aaronreynoza Sep 10, 2024
860d317
change labels
aaronreynoza Sep 10, 2024
8942064
remove failed spec
aaronreynoza Sep 10, 2024
1a0feed
remove istio from mongo and redis
aaronreynoza Sep 11, 2024
e3c6326
fix labels
aaronreynoza Sep 11, 2024
c1667b2
fix typo again
aaronreynoza Sep 11, 2024
49588f7
remove label
aaronreynoza Sep 12, 2024
eb0b0d4
remove more labels
aaronreynoza Sep 12, 2024
a7a84bb
fix labels
aaronreynoza Sep 12, 2024
00f25f8
labels should be strings aparently
aaronreynoza Sep 12, 2024
e612460
disable sim injection
aaronreynoza Sep 12, 2024
146a033
add cacheLabels to mojaSims
aaronreynoza Sep 12, 2024
db6e7cd
remove authorizationpolicies
aaronreynoza Sep 12, 2024
11c5e12
disable vault init in connection manager
aaronreynoza Sep 13, 2024
e92b1f4
remove duplicate
aaronreynoza Sep 13, 2024
57c623f
clean leftover code
aaronreynoza Sep 13, 2024
a77b954
readd missing AP
aaronreynoza Sep 13, 2024
dde2f6e
restore missing labels
aaronreynoza Sep 13, 2024
943ee4d
Merge branch 'main' of github.com:mojaloop/iac-modules into cto-18
aaronreynoza Dec 16, 2024
2be322c
add logical operator validation
aaronreynoza Dec 16, 2024
0462eb6
Refactor namespace handling for mTLS-enabled namespaces
KhaledSaiidi Dec 16, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix labels
  • Loading branch information
aaronreynoza committed Sep 12, 2024
commit a7a84bb11c98b4eac08c0f03086a4e0ffa912f9f
Original file line number Diff line number Diff line change
Expand Up @@ -501,8 +501,6 @@ secondary:
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
## Allowed values: soft, hard
##
labels:
sidecar.istio.io/inject: false
podAntiAffinityPreset: soft
## MySQL Secondary node affinity preset
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
Expand All @@ -527,8 +525,6 @@ secondary:
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
## Note: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
##
labels:
sidecar.istio.io/inject: false
%{ if resource.local_helm_config.mysql_data.affinity_definition != null ~}
affinity:
${indent(4, yamlencode(resource.local_helm_config.mysql_data.affinity_definition))}
Expand Down Expand Up @@ -810,8 +806,8 @@ secondary:
maxUnavailable: ""
## @param secondary.podLabels Additional pod labels for MySQL secondary pods
##
podLabels:
sidecar.istio.io/inject: false
podLabels:
sidecar.istio.io/inject: false

## @section RBAC parameters
##
Expand Down Expand Up @@ -1100,8 +1096,7 @@ metrics:
## @param metrics.serviceMonitor.labels Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
##
labels:
sidecar.istio.io/inject: false
labels: {}
## @param metrics.serviceMonitor.annotations ServiceMonitor annotations
##
annotations: {}
Expand Down