Skip to content

Instantly share code, notes, and snippets.

@adrafiq
Created November 2, 2020 02:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save adrafiq/f345dc54e2a50071c0556e6eb89443b4 to your computer and use it in GitHub Desktop.
Save adrafiq/f345dc54e2a50071c0556e6eb89443b4 to your computer and use it in GitHub Desktop.
Service Mesh Hands On Istio
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
name: istiocontrolplane
spec:
addonComponents:
# Provides dns resolution for service entries of form
# name.namespace.global
istiocoredns:
enabled: true
components:
## Istio v2 control plane. Galley, citadel, sidecarInjector are unified in istiod.
citadel:
enabled: false
galley:
enabled: false
sidecarInjector:
enabled: false
#
# Gateways Configuration
#
egressGateways:
- enabled: true
k8s:
# Needed to route traffic via egress gateway if desired.
env:
- name: ISTIO_META_REQUESTED_NETWORK_VIEW
value: external
resources:
limits:
cpu: 100m
memory: 512Mi
requests:
cpu: 50m
memory: 256Mi
name: istio-egressgateway
ingressGateways:
- enabled: true
k8s:
resources:
limits:
cpu: 100m
memory: 512Mi
requests:
cpu: 50m
memory: 256Mi
name: istio-ingressgateway
#
# pilot configuration
#
pilot:
enabled: true
k8s:
resources:
limits:
cpu: 200m
memory: 1024Mi
requests:
cpu: 100m
memory: 512Mi
policy:
enabled: true
tag: 1.5.3
values:
global:
# Provides dns resolution for global services
podDNSSearchNamespaces:
- global
## Istio v2 control plane
istiod:
enabled: true
controlPlaneSecurityEnabled: true
defaultResources:
requests:
cpu: 50m
logging:
level: default:info
meshID: my-first-cluster
multiCluster:
enabled: false
outboundTrafficPolicy:
mode: ALLOW_ANY
# Resources for the sidecar.
proxy:
logLevel: info
resources:
limits:
cpu: 128m
memory: 256Mi
requests:
cpu: 64m
memory: 128Mi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment