Skip to content
GitLab
Menu
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
Open Subsurface Data Universe Software
Platform
Deployment and Operations
infra-azure-provisioning
Commits
c15baff4
Commit
c15baff4
authored
Aug 04, 2021
by
MANISH KUMAR
Browse files
Merge branch 'update_cert_variable' into 'master'
Change variable for istio appgw cert See merge request
!433
parents
b2c0de7f
a35fa0a0
Pipeline
#56524
passed with stages
in 1 minute and 34 seconds
Changes
5
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
charts/helm-config.yaml
View file @
c15baff4
...
...
@@ -40,7 +40,8 @@ global:
username
:
#{istio-username}#
password
:
#{istio-password}#
loadBalancerIP
:
#{istio-int-load-balancer-ip}#
dns_host
:
#{DNS_HOST}#
dns_host
:
#{ISTIO_DNS_HOST}#
enableIstioKeyvaultCert
:
#{ENABLE_ISTIO_KEYVAULT_CERT}#
################################################################################
# Specify the resource limits
#
...
...
charts/osdu-istio/templates/cert-checker-cronjob.yaml
View file @
c15baff4
...
...
@@ -111,7 +111,7 @@ spec:
# Log In in Azure
az login --service-principal -u ${client_id} -p ${client_secret} --tenant ${tenant_id}
{{
- if .Values.global.i
ngress
.enableKeyvaultCert
}}
{{
- if .Values.global.i
stio
.enable
Istio
KeyvaultCert
}}
K8S_CERT_SECRET=appgw-ssl-cert
K8S_NAMESPACE_NAME=istio-system
...
...
charts/osdu-istio/templates/cert-init-job.yaml
View file @
c15baff4
...
...
@@ -82,7 +82,7 @@ spec:
az login --service-principal -u ${client_id} -p ${client_secret} --tenant ${tenant_id}
az aks get-credentials --resource-group ${ENV_SR_GROUP_NAME} --name ${ENV_CLUSTER_NAME}
{{
- if .Values.global.i
ngress
.enableKeyvaultCert
}}
{{
- if .Values.global.i
stio
.enable
Istio
KeyvaultCert
}}
K8S_CERT_SECRET=appgw-ssl-cert
K8S_NAMESPACE_NAME=istio-system
...
...
charts/osdu-istio/templates/istio-gateway.yaml
View file @
c15baff4
...
...
@@ -16,7 +16,7 @@ spec:
-
"
{{
.Values.global.istio.dns_host
}}"
tls
:
mode
:
SIMPLE
{{
- if .Values.
global
.ingress.enableKeyvaultCert
}}
{{
- if .Values.
istio
.ingress.enable
Istio
KeyvaultCert
}}
credentialName
:
appgw-ssl-cert
{{
else
}}
credentialName
:
osdu-certificate
...
...
docs/autoscaling.md
View file @
c15baff4
...
...
@@ -64,7 +64,7 @@ In this approach, we use certificate uploaded by customer to Keyvault.
### Use uploaded certificate
1.
Once upload is complete, Go to Azure Devops Project that you have set up for code mirroring.
2.
Setup library variable
`ENABLE_KEYVAULT_CERT`
in Variable group
**Azure - OSDU**
2.
Setup library variable
`ENABLE_
ISTIO_
KEYVAULT_CERT`
in Variable group
**Azure - OSDU**
to
`true`
.
3.
Run the pipeline following pipeline manually for master branch:
-
`osdu-istio`
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment