istio-gateway values.yaml¶
mtls.mode¶
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
networkPolicies.enabled¶
Type: bool
true
networkPolicies.prependReleaseName¶
Type: bool
true
classificationBanner¶
Type: object
addFooter: false
classificationLevel: unclassified
enabled: false
enabledHosts: []
text: ''
Description: Gateway-scoped classification banner configuration. This injects the banner at this gateway for matching HTML hosts.
gateway.servers[0].hosts[0]¶
Type: string
"*.dev.bigbang.mil"
gateway.servers[0].port.name¶
Type: string
"http"
gateway.servers[0].port.number¶
Type: int
8080
gateway.servers[0].port.protocol¶
Type: string
"HTTP"
gateway.servers[0].tls.httpsRedirect¶
Type: bool
true
gateway.servers[1].hosts[0]¶
Type: string
"*.dev.bigbang.mil"
gateway.servers[1].port.name¶
Type: string
"https"
gateway.servers[1].port.number¶
Type: int
8443
gateway.servers[1].port.protocol¶
Type: string
"HTTPS"
gateway.servers[1].tls.credentialName¶
Type: string
"public-cert"
gateway.servers[1].tls.mode¶
Type: string
"SIMPLE"
waitJob.enabled¶
Type: bool
true
waitJob.permissions.apiGroups[0]¶
Type: string
""
waitJob.permissions.apiGroups[1]¶
Type: string
"apps"
waitJob.permissions.resources[0]¶
Type: string
"pods"
waitJob.permissions.resources[1]¶
Type: string
"deployments"
waitJob.permissions.verbs[0]¶
Type: string
"patch"
waitJob.permissions.verbs[1]¶
Type: string
"list"
waitJob.permissions.verbs[2]¶
Type: string
"get"
waitJob.permissions.verbs[3]¶
Type: string
"watch"
upstream¶
Type: object
labels:
istio: ingressgateway
service:
ports:
- name: tcp-status-port
port: 15021
protocol: TCP
targetPort: 15021
- name: http2
port: 80
protocol: TCP
targetPort: 8080
- name: https
port: 443
protocol: TCP
targetPort: 8443
type: LoadBalancer
Description: Values passed to the upstream istio gateway chart. See the upstream chart’s values.yaml for configuration options.
upstream.labels.istio¶
Type: string
"ingressgateway"
Description: We set this label by default to more easily integrate with other Big Bang components.