Skip to content

Instantly share code, notes, and snippets.

@bleggett

bleggett/istio-destinationrule-hax.org

Created February 2, 2023 16:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bleggett/c4bdb2ee532426bd4c13cb4dc5c5f66a to your computer and use it in GitHub Desktop.
Save bleggett/c4bdb2ee532426bd4c13cb4dc5c5f66a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
istio-destinationrule-hax.org

Istio DestinationRule hax

#

{{- range .Values.spireIdentities }} — apiVersion: networking.istio.io/v1beta1 kind: DestinationRule metadata: name: {{ .serviceName }}-custom-spire-destrule spec: host: {{ .serviceName }} trafficPolicy: tls: mode: ISTIO_MUTUAL subjectAltNames:

  • spiffe://example.org/ns/{{ $.Release.Namespace }}/sa/{{ .serviceName }}/wl/foo

{{- end }}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment