X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=kubernetes%2Fcommon%2Fmariadb-galera%2Ftemplates%2Fservice.yaml;h=2dea4e9ac11ec6d33626566dabb71c44d097c644;hb=5faef933c24e27e439bd109c29a0278f43e95968;hp=69d8999f67ca11e19aec057b0c5ca63769a49235;hpb=78897562ad9be5b7743f0eded39459a0a725bddf;p=oom.git diff --git a/kubernetes/common/mariadb-galera/templates/service.yaml b/kubernetes/common/mariadb-galera/templates/service.yaml index 69d8999f67..2dea4e9ac1 100644 --- a/kubernetes/common/mariadb-galera/templates/service.yaml +++ b/kubernetes/common/mariadb-galera/templates/service.yaml @@ -1,5 +1,6 @@ {{/* # Copyright © 2018 Amdocs, Bell Canada +# Copyright © 2020 Orange # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -14,23 +15,25 @@ # limitations under the License. */}} -apiVersion: v1 -kind: Service +{{- if not .Values.global.mariadbGalera.useOperator }} +{{ include "common.service" . }} +--- +{{ include "common.headlessService" . }} +{{- end }} +{{- if (include "common.onServiceMesh" .) }} +{{- if eq (default "istio" .Values.global.serviceMesh.engine) "istio" }} +--- +apiVersion: security.istio.io/v1beta1 +kind: PeerAuthentication metadata: - annotations: - service.alpha.kubernetes.io/tolerate-unready-endpoints: "true" -# name: {{ include "common.servicename" . }} - name: {{ .Values.service.name }} + name: {{ include "common.servicename" . }} namespace: {{ include "common.namespace" . }} - labels: - app: {{ include "common.fullname" . }} - chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" - release: "{{ include "common.release" . }}" - heritage: "{{ .Release.Service }}" spec: - ports: - - name: {{ .Values.service.portName }} - port: {{ .Values.service.internalPort }} - clusterIP: None selector: - app: {{ include "common.fullname" . }} + matchLabels: + app: {{ include "common.servicename" . }} + portLevelMtls: + '{{ .Values.service.internalPort }}': + mode: STRICT +{{- end }} +{{- end }}