Skip to content

istio-egress-gateway values.yaml

waypoint

Type: object

Default value
annotations: {}
config:
  deployment:
    spec:
      template:
        spec:
          containers:
          - name: istio-proxy
            resources:
              limits:
                cpu: 100m
                memory: 128Mi
              requests:
                cpu: 100m
                memory: 128Mi
gatewayClassName: istio-waypoint
labels: {}
listeners:
  allowedRoutesNamespacesFrom: All
  port: 15008
name: egress-waypoint

Description: Egress waypoint Gateway configuration

waypoint.name

Type: string

Default value
"egress-waypoint"

Description: Name of the waypoint Gateway. ServiceEntries bind to it via the istio.io/use-waypoint and istio.io/use-waypoint-namespace labels.

waypoint.gatewayClassName

Type: string

Default value
"istio-waypoint"

Description: GatewayClass for the waypoint

waypoint.listeners.port

Type: int

Default value
15008

Description: HBONE listener port

waypoint.listeners.allowedRoutesNamespacesFrom

Type: string

Default value
"All"

Description: Which namespaces may attach routes. “All” is required for ServiceEntries in other namespaces to bind to this waypoint (the Gateway API default is Same-namespace only).

waypoint.labels

Type: object

Default value
{}

Description: Additional labels for the waypoint Gateway

waypoint.annotations

Type: object

Default value
{}

Description: Additional annotations for the waypoint Gateway

waypoint.config

Type: object

Default value
deployment:
  spec:
    template:
      spec:
        containers:
        - name: istio-proxy
          resources:
            limits:
              cpu: 100m
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 128Mi

Description: Strategic-merge-patch overrides for the resources istiod generates for the waypoint, referenced from the Gateway via infrastructure.parametersRef. Supported keys: deployment, service, serviceAccount, horizontalPodAutoscaler, podDisruptionBudget. HPA and PDB are only created when their key is set. Set a key to null to drop it from the ConfigMap.

defaultDeny.enabled

Type: bool

Default value
true

Description: Enforce a default-deny baseline at the waypoint. Traffic is denied unless admitted by a route-attached ALLOW AuthorizationPolicy.

bbtests

Type: object

Default value
enabled: false
scripts:
  envs:
    WAYPOINT_NAME: '{{ .Values.waypoint.name }}'
  image: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.35
  permissions:
    apiGroups:
    - gateway.networking.k8s.io
    resources:
    - gateways
    verbs:
    - get
    - list
    - watch

Description: Big Bang gluon helm tests, run in CI via helm test

bbtests.scripts.image

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.35"

Description: Test runner image