113 lines
4.9 KiB
YAML
113 lines
4.9 KiB
YAML
|
{{- define "mesh" }}
|
||
|
|
# The trust domain corresponds to the trust root of a system.
|
||
|
|
# Refer to https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md#21-trust-domain
|
||
|
|
trustDomain: "cluster.local"
|
||
|
|
|
||
|
|
# The namespace to treat as the administrative root namespace for Istio configuration.
|
||
|
|
# When processing a leaf namespace Istio will search for declarations in that namespace first
|
||
|
|
# and if none are found it will search in the root namespace. Any matching declaration found in the root namespace
|
||
|
|
# is processed as if it were declared in the leaf namespace.
|
||
|
|
rootNamespace: {{ .Values.meshConfig.rootNamespace | default .Values.global.istioNamespace }}
|
||
|
|
|
||
|
|
{{ $prom := include "default-prometheus" . | eq "true" }}
|
||
|
|
{{ $sdMetrics := include "default-sd-metrics" . | eq "true" }}
|
||
|
|
{{ $sdLogs := include "default-sd-logs" . | eq "true" }}
|
||
|
|
{{- if or $prom $sdMetrics $sdLogs }}
|
||
|
|
defaultProviders:
|
||
|
|
{{- if or $prom $sdMetrics }}
|
||
|
|
metrics:
|
||
|
|
{{ if $prom }}- prometheus{{ end }}
|
||
|
|
{{ if and $sdMetrics $sdLogs }}- stackdriver{{ end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if and $sdMetrics $sdLogs }}
|
||
|
|
accessLogging:
|
||
|
|
- stackdriver
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
|
||
|
|
defaultConfig:
|
||
|
|
{{- if .Values.global.meshID }}
|
||
|
|
meshId: "{{ .Values.global.meshID }}"
|
||
|
|
{{- end }}
|
||
|
|
{{- with (.Values.global.proxy.variant | default .Values.global.variant) }}
|
||
|
|
image:
|
||
|
|
imageType: {{. | quote}}
|
||
|
|
{{- end }}
|
||
|
|
{{- if not (eq .Values.global.proxy.tracer "none") }}
|
||
|
|
tracing:
|
||
|
|
{{- if eq .Values.global.proxy.tracer "lightstep" }}
|
||
|
|
lightstep:
|
||
|
|
# Address of the LightStep Satellite pool
|
||
|
|
address: {{ .Values.global.tracer.lightstep.address }}
|
||
|
|
# Access Token used to communicate with the Satellite pool
|
||
|
|
accessToken: {{ .Values.global.tracer.lightstep.accessToken }}
|
||
|
|
{{- else if eq .Values.global.proxy.tracer "zipkin" }}
|
||
|
|
zipkin:
|
||
|
|
# Address of the Zipkin collector
|
||
|
|
address: {{ ((.Values.global.tracer).zipkin).address | default (print "zipkin." .Values.global.istioNamespace ":9411") }}
|
||
|
|
{{- else if eq .Values.global.proxy.tracer "datadog" }}
|
||
|
|
datadog:
|
||
|
|
# Address of the Datadog Agent
|
||
|
|
address: {{ ((.Values.global.tracer).datadog).address | default "$(HOST_IP):8126" }}
|
||
|
|
{{- else if eq .Values.global.proxy.tracer "stackdriver" }}
|
||
|
|
stackdriver:
|
||
|
|
# enables trace output to stdout.
|
||
|
|
debug: {{ (($.Values.global.tracer).stackdriver).debug | default "false" }}
|
||
|
|
# The global default max number of attributes per span.
|
||
|
|
maxNumberOfAttributes: {{ (($.Values.global.tracer).stackdriver).maxNumberOfAttributes | default "200" }}
|
||
|
|
# The global default max number of annotation events per span.
|
||
|
|
maxNumberOfAnnotations: {{ (($.Values.global.tracer).stackdriver).maxNumberOfAnnotations | default "200" }}
|
||
|
|
# The global default max number of message events per span.
|
||
|
|
maxNumberOfMessageEvents: {{ (($.Values.global.tracer).stackdriver).maxNumberOfMessageEvents | default "200" }}
|
||
|
|
{{- else if eq .Values.global.proxy.tracer "openCensusAgent" }}
|
||
|
|
{{/* Fill in openCensusAgent configuration from meshConfig so it isn't overwritten below */}}
|
||
|
|
{{ toYaml $.Values.meshConfig.defaultConfig.tracing | indent 8 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.global.remotePilotAddress }}
|
||
|
|
{{- if .Values.pilot.enabled }}
|
||
|
|
discoveryAddress: {{ printf "istiod-remote.%s.svc" .Release.Namespace }}:15012
|
||
|
|
{{- else }}
|
||
|
|
discoveryAddress: {{ printf "istiod.%s.svc" .Release.Namespace }}:15012
|
||
|
|
{{- end }}
|
||
|
|
{{- else }}
|
||
|
|
discoveryAddress: istiod{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}.{{.Release.Namespace}}.svc:15012
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
|
||
|
|
{{/* We take the mesh config above, defined with individual values.yaml, and merge with .Values.meshConfig */}}
|
||
|
|
{{/* The intent here is that meshConfig.foo becomes the API, rather than re-inventing the API in values.yaml */}}
|
||
|
|
{{- $originalMesh := include "mesh" . | fromYaml }}
|
||
|
|
{{- $mesh := mergeOverwrite $originalMesh .Values.meshConfig }}
|
||
|
|
|
||
|
|
{{- if .Values.pilot.configMap }}
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ConfigMap
|
||
|
|
metadata:
|
||
|
|
name: istio{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
|
||
|
|
namespace: {{ .Release.Namespace }}
|
||
|
|
labels:
|
||
|
|
istio.io/rev: {{ .Values.revision | default "default" | quote }}
|
||
|
|
install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
|
||
|
|
operator.istio.io/component: "Pilot"
|
||
|
|
release: {{ .Release.Name }}
|
||
|
|
data:
|
||
|
|
|
||
|
|
# Configuration file for the mesh networks to be used by the Split Horizon EDS.
|
||
|
|
meshNetworks: |-
|
||
|
|
{{- if .Values.global.meshNetworks }}
|
||
|
|
networks:
|
||
|
|
{{ toYaml .Values.global.meshNetworks | trim | indent 6 }}
|
||
|
|
{{- else }}
|
||
|
|
networks: {}
|
||
|
|
{{- end }}
|
||
|
|
|
||
|
|
mesh: |-
|
||
|
|
{{- if .Values.meshConfig }}
|
||
|
|
{{ $mesh | toYaml | indent 4 }}
|
||
|
|
{{- else }}
|
||
|
|
{{- include "mesh" . }}
|
||
|
|
{{- end }}
|
||
|
|
---
|
||
|
|
{{- end }}
|