configure istio gateway svc type

kahirokunn · Aug 14, 2022 · d5476c1 · d5476c1
1 parent a4b5e67
commit d5476c1
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/default-knative-operator/istio-gateways.app.yaml b/default-knative-operator/istio-gateways.app.yaml
@@ -8,7 +8,26 @@ spec:
   source:
     repoURL: 'https://istio-release.storage.googleapis.com/charts'
     targetRevision: 1.15.0-beta.0
-    chart: gateways
+    chart: gateway
+    helm:
+      values: |
+        service:
+          annotations:
+            # service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval: "60"
+            # service.beta.kubernetes.io/aws-load-balancer-access-log-enabled: "true"
+            # service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name: TODO-Bucket
+            # service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix: my-http-istio-gateway-access-log
+            service.beta.kubernetes.io/aws-load-balancer-type: external
+            service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
+            service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "Automation=ArgoCD,Backend=Gateway"
+            service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
+            service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
+            service.beta.kubernetes.io/aws-load-balancer-name: my-http-istio-gateway
+            # service.beta.kubernetes.io/aws-load-balancer-ssl-cert: TODO.arn
+            # service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
+            # service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
+            service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
+            # external-dns.alpha.kubernetes.io/hostname: TODO.example.com
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: istio-system