Prepare helmfile for the service cluster

service/values/cert-mangager.yaml

@@ -0,0 +1 @@
+installCRDs: true

service/values/cilium.yaml

@@ -0,0 +1,12 @@
+
+operator:
+  replicas: 1
+endpointRoutes:
+  # -- Enable use of per endpoint routes instead of routing via
+  # the cilium_host interface.
+  enabled: true
+ipam:
+  ciliumNodeUpdateRate: "15s"
+  operator:
+    clusterPoolIPv4PodCIDRList:
+      - 10.244.0.0/16

service/values/coredns.yaml

@@ -0,0 +1,2 @@
+service:
+  clusterIP: 10.43.0.10

service/values/metrics-server.yaml

@@ -0,0 +1,4 @@
+apiService:
+  insecureSkipTLSVerify: true
+args:
+  - --kubelet-insecure-tls

service/values/namespaces.yaml

@@ -0,0 +1,9 @@
+namespaces:
+  - name: tekton-system
+  - name: metallb-system
+  - name: istio-system
+  - name: cert-manager
+  - name: softplayer-backend
+    labels:
+      istio-injection: enabled
+  - name: softplayer-accounts

service/values/values.istio-ingressgateway.yaml

@@ -0,0 +1,25 @@
+service:
+  type: LoadBalancer
+  externalTrafficPolicy: Local
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: 80
+    - name: https
+      port: 443
+      protocol: TCP
+      targetPort: 443
+    - name: grpc-web
+      port: 8080
+      protocol: TCP
+      targetPort: 8080
+podAnnotations:
+  proxy.istio.io/config: '{"gatewayTopology" : { "numTrustedProxies": 0, "forwardClientCertDetails": SANITIZE } }'
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 200m
+    memory: 1024Mi

service/values/values.istiod.yaml

@@ -0,0 +1,14 @@
+---
+pilot:
+  resources:
+    requests:
+      cpu: 50m
+      memory: 2048Mi
+global:
+  proxy:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 128Mi
+      limits:
+        memory: 128Mi