Code Review
/
oom.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
[MARIADB] Set mTLS mode to STRICT to solve mysql connection issues
[oom.git]
/
kubernetes
/
common
/
mariadb-galera
/
templates
/
service.yaml
diff --git
a/kubernetes/common/mariadb-galera/templates/service.yaml
b/kubernetes/common/mariadb-galera/templates/service.yaml
index
6af9135
..
2dea4e9
100644
(file)
--- a/
kubernetes/common/mariadb-galera/templates/service.yaml
+++ b/
kubernetes/common/mariadb-galera/templates/service.yaml
@@
-15,11
+15,13
@@
# limitations under the License.
*/}}
# limitations under the License.
*/}}
+{{- if not .Values.global.mariadbGalera.useOperator }}
{{ include "common.service" . }}
---
{{ include "common.headlessService" . }}
{{ include "common.service" . }}
---
{{ include "common.headlessService" . }}
+{{- end }}
{{- if (include "common.onServiceMesh" .) }}
{{- if (include "common.onServiceMesh" .) }}
-{{- if eq (default "istio" .Values.global.serviceMesh.engine) "istio" }}
+{{-
if eq (default "istio" .Values.global.serviceMesh.engine) "istio" }}
---
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
---
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
@@
-29,9
+31,9
@@
metadata:
spec:
selector:
matchLabels:
spec:
selector:
matchLabels:
- app
.kubernetes.io/name
: {{ include "common.servicename" . }}
+ app: {{ include "common.servicename" . }}
portLevelMtls:
'{{ .Values.service.internalPort }}':
portLevelMtls:
'{{ .Values.service.internalPort }}':
- mode:
DISABLE
-{{-
end
}}
-{{- end}}
+ mode:
STRICT
+{{-
end
}}
+{{- end
}}