-
Notifications
You must be signed in to change notification settings - Fork 110
/
values-istio-gateway.yaml
executable file
·492 lines (481 loc) · 9.75 KB
/
values-istio-gateway.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
# Declare variables to be passed into your templates.
global:
hs256key:
secretName: bluecompute-hs256key
secret: E6526VJkKYhyTFRFMC0pTECpHcZ7TGcq8pKsVVgz9KtESVpheEO284qKzfzg8HpWNBPeHOxNGlyudUHi6i8tFQJXC8PiI48RUpMh23vPDLGD35pCM0417gf58z5xlmRNii56fwRCmIhhV7hDsm3KO2jRv4EBVz7HrYbzFeqI45CaStkMYNipzSm2duuer7zRdMjEKIdqsby0JfpQpykHmC5L6hxkX0BT7XWqztTr6xHCwqst26O0g8r7bXSYjp4a
cluster:
name: "my-cluster"
region: us-south
istio:
enabled: true
gateway:
enabled: true
name: bluecompute-gateway
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
privateKey: /etc/istio/ingressgateway-certs/tls.key
caCertificates: /etc/istio/ingressgateway-ca-certs/ca-chain.cert.pem
ingress:
enabled: false
hostnames:
app: #app.bluecompute.com
api: #api.bluecompute.com
annotations:
ingress.bluemix.net/redirect-to-https: "True"
enableTLS: false
TLS:
- secretName: bluecompute.com
hosts:
- bluecompute.com
auth:
enabled: true
fullnameOverride: auth
replicaCount: 1
image:
repository: ibmcase/bluecompute-auth
tag: 0.6.0
pullPolicy: Always
service:
type: ClusterIP
externalPort: 8083
nodePort: 32383
resources:
limits:
memory: 384Mi
requests:
memory: 64Mi
bash:
image:
repository: ibmcase/bluecompute-bash-curl-ssl
tag: latest
pullPolicy: IfNotPresent
hs256key:
secretName:
secret:
customer:
url: http://customer:8082
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
catalog:
enabled: true
fullnameOverride: catalog
replicaCount: 1
image:
repository: ibmcase/bluecompute-catalog
tag: 0.6.0
pullPolicy: Always
service:
type: ClusterIP
externalPort: 8081
nodePort: 32381
resources:
limits:
memory: 384Mi
requests:
memory: 64Mi
inventory:
url: http://inventory:8080
curl:
image: alexeiled/curl
imageTag: latest
imagePullPolicy: IfNotPresent
elasticsearch:
protocol: http
host: catalog-elasticsearch-client
port: 9200
username:
password:
healthcheck: "_cat/health"
cacertificatebase64:
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
elasticsearch:
enabled: true
fullnameOverride: catalog-elasticsearch
protocol: http
port: 9200
username:
password:
healthcheck: "_cat/health"
cacertificatebase64:
appVersion: 6.6.1
image:
repository: docker.elastic.co/elasticsearch/elasticsearch-oss
tag: 6.6.1
pullPolicy: IfNotPresent
#pullSecrets:
#- sa-default
serviceAccounts:
client:
create: false
name:
master:
create: false
name:
data:
create: false
name:
initImage:
repository: "busybox"
tag: "latest"
pullPolicy: "Always"
cluster:
env:
MINIMUM_MASTER_NODES: "2"
client:
replicas: 1
serviceType: ClusterIP
podAnnotations:
sidecar.istio.io/inject: "false"
master:
replicas: 2
persistence:
enabled: false
size: 4Gi
storageClass:
accessMode: ReadWriteOnce
podAnnotations:
sidecar.istio.io/inject: "false"
data:
replicas: 1
persistence:
enabled: false
size: 30Gi
storageClass:
accessMode: ReadWriteOnce
podAnnotations:
sidecar.istio.io/inject: "false"
sysctlInitContainer:
enabled: true
customer:
enabled: true
fullnameOverride: customer
replicaCount: 1
image:
repository: ibmcase/bluecompute-customer
tag: 0.6.0
pullPolicy: Always
service:
type: ClusterIP
externalPort: 8082
nodePort: 32382
resources:
limits:
memory: 384Mi
requests:
memory: 64Mi
testUser:
createUser: true
username: user
password: passw0rd
bash:
image:
repository: ibmcase/bluecompute-bash-curl-ssl
tag: latest
pullPolicy: IfNotPresent
hs256key:
secretName:
secret:
couchdb:
host: customer-couchdb-svc-couchdb
protocol: http
port: 5985
existingSecret:
adminUsername: user
adminPassword: passw0rd
database: customers
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
couchdb:
enabled: true
image:
repository: "couchdb"
tag: "2.3.0"
pullPolicy: IfNotPresent
fullnameOverride: customer-couchdb
protocol: http
createAdminSecret: true
adminUsername: user
adminPassword: passw0rd
service:
externalPort: 5985
clusterSize: 1
persistentVolume:
enabled: false
size: 10Gi
accessModes:
- ReadWriteOnce
storageClass:
helperImage:
repository: kocolosk/couchdb-statefulset-assembler
tag: 1.2.0
pullPolicy: IfNotPresent
initImage:
repository: "busybox"
tag: "latest"
pullPolicy: "Always"
podAnnotations:
sidecar.istio.io/inject: "false"
inventory:
enabled: true
fullnameOverride: inventory
replicaCount: 1
image:
repository: ibmcase/bluecompute-inventory
tag: 0.6.0
pullPolicy: Always
service:
type: ClusterIP
externalPort: 8080
nodePort: 32380
resources:
limits:
memory: 384Mi
requests:
memory: 64Mi
mysql:
host: inventory-mysql
port: 3306
existingSecret:
user: dbuser
password: password
database: inventorydb
# For mysql init container
image: "mysql"
imageTag: "5.7.14"
imagePullPolicy: IfNotPresent
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
mysql:
enabled: true
image: "mysql"
imageTag: "5.7.14"
imagePullPolicy: IfNotPresent
fullnameOverride: inventory-mysql
mysqlRootPassword: admin123
mysqlUser: dbuser
mysqlPassword: password
mysqlDatabase: inventorydb
service:
port: 3306
persistence:
enabled: false
size: 8Gi
storageClass:
accessMode: ReadWriteOnce
existingClaim:
subPath:
annotations: {}
istio:
mTLS: ISTIO_MUTUAL
loadBalancer: LEAST_CONN
busybox:
image: "busybox"
tag: "latest"
orders:
enabled: true
fullnameOverride: orders
replicaCount: 1
image:
repository: ibmcase/bluecompute-orders
tag: 0.6.0
pullPolicy: Always
service:
type: ClusterIP
externalPort: 8084
nodePort: 32384
resources:
limits:
memory: 384Mi
requests:
memory: 64Mi
mysql:
image: "mysql"
imageTag: "5.7.14"
imagePullPolicy: IfNotPresent
hs256key:
secretName:
secret:
mariadb:
# Leaving empty so it gets name form release name and nameOverride
host:
port: 3307
existingSecret:
user: dbuser
password: password
database: ordersdb
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false
mariadb:
enabled: true
image:
registry: docker.io
repository: bitnami/mariadb
tag: 10.1.38
pullPolicy: IfNotPresent
service:
port: 3307
rootUser:
password: admin123
nameOverride: orders-mariadb
db:
user: dbuser
password: password
name: ordersdb
replication:
enabled: false
master:
persistence:
enabled: false
existingClaim:
#mountPath: ""
annotations: {}
storageClass:
accessMode: ReadWriteOnce
size: 8Gi
annotations:
- key: sidecar.istio.io/inject
value: "false"
slave:
replicas: 1
persistence:
enabled: false
annotations: {}
storageClass:
accessMode: ReadWriteOnce
size: 8Gi
annotations:
- key: sidecar.istio.io/inject
value: "false"
web:
enabled: true
fullnameOverride: web
replicaCount: 1
image:
repository: ibmcase/bluecompute-web
tag: 0.6.0
pullPolicy: Always
service:
type: NodePort
externalPort: 80
nodePort: 31337
resources:
limits:
cpu: 100m
memory: 128Mi
requests:
cpu: 100m
memory: 128Mi
services:
auth:
protocol: http
host: auth
port: 8083
catalog:
protocol: http
host: catalog
port: 8081
customer:
protocol: http
host: customer
port: 8082
orders:
protocol: http
host: orders
port: 8084
reviews:
protocol: http
host:
port:
istio:
enabled: false
# ISTIO_MUTUAL, SIMPLE, DISABLE
mTLS: ISTIO_MUTUAL
# LEAST_CONN, ROUND_ROBIN
loadBalancer: LEAST_CONN
gateway:
enabled: false
name:
hosts:
- "*"
TLS:
enabled: false
# SIMPLE, MUTUAL
mode: SIMPLE
httpsRedirect: false