Helm chart for istio control plane
- Kubernetes Cluster deployed
- Kubernetes config installed in
~/.kube/config - Helm installed
Install Helm
https://helm.sh/docs/intro/install/
- Clone down the repository
- cd into directory
helm install istiod chart/| Key | Type | Default | Description |
|---|---|---|---|
| networkPolicies.enabled | bool | false |
Enable or disable the bundled network policies |
| networkPolicies.controlPlaneCIDRs | list | [] |
Configure which CIDRs istiod will be allowed to connect to when accessing the kube-apiserver; if none are specified, the chart will look up the default kubernetes EndpointSlice and use the addresses found there |
| networkPolicies.additionalPolicies | list | [] |
A list of additional network policies to create in the release namespace |
| additionalEnvoyFilters | list | [] |
A list of additional EnvoyFilters to create in the release namespace |
| monitoring.enabled | bool | true |
Enable or disable the bundled monitoring components and network policies |
| mtls.mode | string | "STRICT" |
Set the mTLS mode for the istio-system namespace |
| defaultSecurityHeaders.enabled | bool | true |
Enable or disable the default security headers |
| upstream | object | Upstream chart values | Values to pass to the upstream istiod chart |
Please see the contributing guide if you are interested in contributing.
This file is programatically generated using helm-docs and some BigBang-specific templates. The gluon repository has instructions for regenerating package READMEs.