k8s/helm/apps/sudoscientist-go-backend/istio-ingress.yaml

58 lines
1 KiB
YAML

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: sudoscientist-cert
namespace: istio-system
spec:
secretName: sudoscientist-cert
commonName: api.sudoscientist.com
dnsNames:
- api.sudoscientist.com
issuerRef:
name: route53-issuer
kind: ClusterIssuer
group: cert-manager.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
name: sudoscientist-gateway
namespace: sudoscientist
spec:
selector:
istio: ingressgateway
servers:
- port:
number: 443
name: https
protocol: HTTPS
tls:
mode: SIMPLE
credentialName: sudoscientist-cert
hosts:
- api.sudoscientist.com
...
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: sudoscientist-gateway
namespace: sudoscientist
spec:
hosts:
- api.sudoscientist.com
gateways:
- sudoscientist-gateway
http:
- match:
- uri:
prefix: /
route:
- destination:
port:
number: 80
host: sudoscientist-sudoscientist-go-backend
...