trevorbox

topologySpreadConstraints:
  - maxSkew: 1
    topologyKey: node
    whenUnsatisfiable: DoNotSchedule
    labelSelector:
      matchExpressions:
        - key: app
          operator: In
          values:
            - db2ucluster-roarprds-primary

trevorbox

# tested in OSSM v2.1
# see https://github.com/istio/istio/wiki/EnvoyFilter-Samples for example this was based off of
---
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: http-header-count-size-control
spec:
  configPatches:
  - applyTo: CLUSTER

trevorbox

---
apiVersion: operator.gatekeeper.sh/v1alpha1
kind: Gatekeeper
metadata:
  name: gatekeeper
spec:
  audit:
    logLevel: INFO
    replicas: 1
  image:

trevorbox

---
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: custom-header-span-x-forwarded-user
  namespace: istio-system
spec:
  configPatches:
    - applyTo: NETWORK_FILTER
      match:

trevorbox

---
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: elasticsearch-operator
spec:
  channel: "4.3"
  installPlanApproval: Automatic
  name: elasticsearch-operator
  source: redhat-operators

trevorbox

---
apiVersion: maistra.io/v1
kind: ServiceMeshControlPlane
metadata:
  name: production-install
spec:
  version: v1.1
  istio:
    gateways:
      istio-egressgateway:

trevorbox

#!/bin/bash

echo "Starting job at $(date)..."

OUT=$(oc get projects -o go-template=$'{{range .items}}{{with .metadata}}{{if .labels}}{{ $kiali:=("" | or (index .labels "kiali.io/member-of")) }}{{ $maistra:=("" | or (index .labels "maistra.io/member-of")) }}{{if ne $kiali $maistra}}Mismatch => project:{{.name}} kiali.io/member-of:{{$kiali}} maistra.io/member-of:{{$maistra}}\n{{end}}{{end}}{{end}}{{end}}')

echo "$OUT"

if [ -z "$OUT" ]; then echo "No mismatches found."; fi