apigw-multiple-policys

consul_values.yaml

# Contains values that affect multiple components of the chart.
global:
  imageK8S: hashicorp/consul-k8s-control-plane:1.3
  image: hashicorp/consul-enterprise:1.18-ent
  logLevel: debug
  tls:
    enabled: true
  acls:
    manageSystemACLs: true
  enterpriseLicense:
    secretName: "license"
    secretKey: "key"
server:
  enabled: true
  # The number of server agents to run. This determines the fault tolerance of the cluster.
  replicas: 1
# Contains values that configure the Consul UI.
ui:
  enabled: true
connectInject:
  #this needs to be true for newly created services to be added to the service mesh
  #so they will display a topology tab. They won't if they're not explicitly in the service mesh
  enabled: true

gw.yaml

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: api-gateway
spec:
  gatewayClassName: consul
  listeners:
    - protocol: HTTP
      port: 9001
      name: listener-one

gw2.yaml

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: api-gateway-2
spec:
  gatewayClassName: consul
  listeners:
    - protocol: HTTP
      port: 9002
      name: listener-two

proxy-defaults.yaml

apiVersion: consul.hashicorp.com/v1alpha1
kind: ProxyDefaults
metadata:
  name: global
spec:
  config:
    protocol: http

start.sh

#!/bin/bash

set -e

if [ -z "$(kind get clusters | rg "basic")" ]; then
	kind create cluster --config cluster.yaml
fi

kind load docker-image consul-k8s-control-plane:local -n basic
kubectl create namespace consul
kubectl create secret generic license -n consul --from-literal="key=$CONSUL_LICENSE"
# The following line assumes that you have compiled the image locally using `make docker/dev` from the consul-k8s repo
kind load docker-image consul-k8s-control-plane:local -n basic
echo "helm installing"
helm upgrade --install consul hashicorp/consul -f ./consul_values.yaml -n consul --create-namespace --wait
echo "helm is done"
kubectl wait --timeout=180s --for=condition=Available=True deployments/consul-consul-connect-injector -n consul
kubectl apply -f ./proxy-defaults.yaml
kubectl apply -f ./gw.yaml
kubectl apply -f ./gw2.yaml
while ! kubectl get deployments api-gateway; do sleep 1; done
kubectl wait --timeout=180s --for=condition=Available=True deployments/api-gateway || true
kubectl get svc -n consul
kubectl port-forward service/consul-consul-ui 8501:443 -n consul &