istiod values.yaml¶
bb-common.networkPolicies.enabled¶
Type: bool
Default value
false
Description: Enable or disable the bundled network policies
bb-common.networkPolicies.prependReleaseName¶
Type: bool
Default value
true
bb-common.networkPolicies.egress¶
Type: object
Default value
defaults:
allowInNamespace:
enabled: false
allowIstiod:
enabled: false
from:
istiod:
to:
definition:
kubeAPI: true
Description: A list of additional network policies to create in the release namespace
bb-common.networkPolicies.ingress.defaults.allowInNamespace.enabled¶
Type: bool
Default value
false
bb-common.networkPolicies.ingress.to.istiod:15014.from.k8s.kiali/kiali¶
Type: bool
Default value
true
bb-common.networkPolicies.ingress.to.istiod:15014.from.k8s.monitoring/prometheus¶
Type: bool
Default value
true
bb-common.networkPolicies.ingress.to.istiod:[443,15017].from.cidr.”0.0.0.0/0”¶
Type: bool
Default value
true
bb-common.networkPolicies.ingress.to.istiod:[15010,15012].from.k8s.*¶
Type: bool
Default value
true
bb-common.networkPolicies.additionalPolicies¶
Type: list
Default value
[]
bb-common.istio.enabled¶
Type: bool
Default value
true
bb-common.istio.prependReleaseName¶
Type: bool
Default value
true
bb-common.istio.sidecar.enabled¶
Type: bool
Default value
true
bb-common.istio.sidecar.outboundTrafficPolicyMode¶
Type: string
Default value
"REGISTRY_ONLY"
bb-common.istio.mtls.mode¶
Type: string
Default value
"STRICT"
bb-common.istio.serviceEntries.custom¶
Type: list
Default value
[]
bb-common.istio.authorizationPolicies.enabled¶
Type: bool
Default value
true
bb-common.istio.authorizationPolicies.generateFromNetpol¶
Type: bool
Default value
true
bb-common.istio.authorizationPolicies.custom¶
Type: list
Default value
[]
additionalEnvoyFilters¶
Type: list
Default value
[]
Description: A list of additional EnvoyFilters to create in the release namespace. Gateway-scoped classification banner configuration is managed by the istio-gateway package.
monitoring.enabled¶
Type: bool
Default value
true
Description: Enable or disable the bundled monitoring components and network policies
defaultSecurityHeaders.enabled¶
Type: bool
Default value
true
Description: Enable or disable the default security headers