This repository has been archived by the owner on Jul 11, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 278
/
preset-mesh-config.yaml
60 lines (60 loc) · 3.18 KB
/
preset-mesh-config.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
apiVersion: v1
kind: ConfigMap
metadata:
name: preset-mesh-config
namespace: {{ include "osm.namespace" . }}
data:
preset-mesh-config.json: |
{
"sidecar": {
"enablePrivilegedInitContainer": {{.Values.osm.enablePrivilegedInitContainer | mustToJson}},
"logLevel": {{.Values.osm.envoyLogLevel | mustToJson}},
"maxDataPlaneConnections": {{.Values.osm.maxDataPlaneConnections | mustToJson}},
"configResyncInterval": {{.Values.osm.configResyncInterval | mustToJson}},
"localProxyMode": {{.Values.osm.localProxyMode | mustToJson}}
},
"traffic": {
"enableEgress": {{.Values.osm.enableEgress | mustToJson}},
"enablePermissiveTrafficPolicyMode": {{.Values.osm.enablePermissiveTrafficPolicy | mustToJson}},
"outboundPortExclusionList": {{.Values.osm.outboundPortExclusionList | mustToJson}},
"inboundPortExclusionList": {{.Values.osm.inboundPortExclusionList | mustToJson}},
"outboundIPRangeExclusionList": {{.Values.osm.outboundIPRangeExclusionList | mustToJson}},
"outboundIPRangeInclusionList": {{.Values.osm.outboundIPRangeInclusionList | mustToJson}},
"networkInterfaceExclusionList": {{.Values.osm.networkInterfaceExclusionList | mustToJson}}
},
"observability": {
"enableDebugServer": {{.Values.osm.enableDebugServer | mustToJson}},
"osmLogLevel": {{.Values.osm.controllerLogLevel | mustToJson}},
"tracing": {
"enable": {{.Values.osm.tracing.enable | mustToJson}}{{- if .Values.osm.tracing.enable }},{{- end }}
{{- if .Values.osm.tracing.enable }}
"port": {{.Values.osm.tracing.port | mustToJson}},
"address": {{include "osm.tracingAddress" . | mustToJson}},
"endpoint": {{.Values.osm.tracing.endpoint | mustToJson}}
{{- end }}
}
},
"certificate": {
"serviceCertValidityDuration": {{.Values.osm.certificateProvider.serviceCertValidityDuration | mustToJson}},
{{- if .Values.contour.enabled }}
"ingressGateway": {
"subjectAltNames": ["osm-contour-envoy.{{include "osm.namespace" .}}.{{.Values.osm.trustDomain}}"],
"validityDuration": "24h",
"secret": {
"name": "osm-contour-envoy-client-cert",
"namespace": "{{include "osm.namespace" .}}"
}
},
{{- end }}
"certKeyBitSize": {{.Values.osm.certificateProvider.certKeyBitSize | mustToJson}}
},
"featureFlags": {
"enableWASMStats": {{.Values.osm.featureFlags.enableWASMStats | mustToJson}},
"enableSnapshotCacheMode": {{.Values.osm.featureFlags.enableSnapshotCacheMode | mustToJson}},
"enableAsyncProxyServiceMapping": {{.Values.osm.featureFlags.enableAsyncProxyServiceMapping | mustToJson}},
"enableIngressBackendPolicy": {{.Values.osm.featureFlags.enableIngressBackendPolicy | mustToJson}},
"enableEnvoyActiveHealthChecks": {{.Values.osm.featureFlags.enableEnvoyActiveHealthChecks | mustToJson}},
"enableRetryPolicy": {{.Values.osm.featureFlags.enableRetryPolicy | mustToJson}},
"enableMeshRootCertificate": {{.Values.osm.featureFlags.enableMeshRootCertificate | mustToJson }}
}
}