diff --git a/devops/gc/deploy/README.md b/devops/gc/deploy/README.md index eca88b9b059252c218980123b147d5bd137ec915..40a0e4a4e51a4eb82d0bb659046fc782f1aa527b 100644 --- a/devops/gc/deploy/README.md +++ b/devops/gc/deploy/README.md @@ -79,6 +79,7 @@ First you need to set variables in **values.yaml** file using any code editor. S **istio.proxyCPULimit** | CPU limit for Envoy sidecars | string | 200m | yes **istio.proxyMemory** | memory request for Envoy sidecars | string | 100Mi | yes **istio.proxyMemoryLimit** | memory limit for Envoy sidecars | string | 256Mi | yes +**istio.sidecarInject** | whether Istio sidecar will be injected. Setting to "false" reduces security, because disables authorization policy. | boolean | true | yes ### Install the helm chart diff --git a/devops/gc/deploy/templates/deployment.yaml b/devops/gc/deploy/templates/deployment.yaml index 06855a6c7b586f3bdb1b9b75d68488d4dce2c456..54df76f61d38457796aaf926bec43e0d4330bdfc 100644 --- a/devops/gc/deploy/templates/deployment.yaml +++ b/devops/gc/deploy/templates/deployment.yaml @@ -14,6 +14,7 @@ spec: metadata: labels: app: {{ .Values.conf.appName | quote }} + sidecar.istio.io/inject: {{ .Values.istio.sidecarInject | quote }} annotations: rollme: {{ randAlphaNum 5 | quote }} sidecar.istio.io/proxyCPU: {{ .Values.istio.proxyCPU | quote }} diff --git a/devops/gc/deploy/values.yaml b/devops/gc/deploy/values.yaml index 96f0648927b09fdf48f165b4ce272180f4882862..a5e0dd84cf454af10a67f9d29a73281d1da99315 100644 --- a/devops/gc/deploy/values.yaml +++ b/devops/gc/deploy/values.yaml @@ -43,3 +43,4 @@ istio: proxyCPULimit: "200m" proxyMemory: "100Mi" proxyMemoryLimit: "256Mi" + sidecarInject: true