-
Notifications
You must be signed in to change notification settings - Fork 3
Sef implementation #41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| apiVersion: v1 | ||
| kind: ConfigMap | ||
| metadata: | ||
| name: {{ include "eric-oss-hello-world-python-app.name" . }}-envoy-template |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
name: {{ include "eric-oss-hello-world-python-app.name" . }}-envoy-template
change to
name: {{ include "eric-oss-hello-world-python-app.name" . }}-envoy-configmap
to conform with rApp naming convention for k8s resources
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we may also consider renaming envoy to a generic proxy to signal the intent of the configmap better
| secret: | ||
| secretName: {{ include "eric-oss-hello-world-python-app.clientSecret" . | quote }} | ||
| defaultMode: 420 | ||
| - name: envoy-platform-cacerts |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should we mention envoy at all regarding secrets? certs are not locked to a specific proxy vendor, other rApp developers may choose to use alternatives like Nginx and these certs would still work fine for that
| ports: | ||
| - port: {{ .Values.service.port }} | ||
| targetPort: 8050 | ||
| - port: {{ .Values.service.httpport }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
http-port
| protocol: TCP | ||
| name: http | ||
| name: envoy-http | ||
| - port: {{ .Values.service.httpsport }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
https-port
| clientCredsMountPath: "/etc/client-creds/" | ||
| envoyPlatformCaCertMountPath: "/etc/certs/ca" | ||
| envoyAppCertMountPath: "/etc/certs/app" | ||
| #envoyPlatformCaCertFileName: "dummy1.crt" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
leftover comments? should these be deleted?
No description provided.