[COMMON][CASSANDRA] Cassandra ServiceMesh Improvements 02/129902/2
authorAndreas Geissler <andreas-geissler@telekom.de>
Wed, 13 Jul 2022 09:51:58 +0000 (11:51 +0200)
committerFiachra Corcoran <fiachra.corcoran@est.tech>
Fri, 29 Jul 2022 06:35:33 +0000 (06:35 +0000)
Disable inter-cluster ports from the Sidecar communication

Issue-ID: OOM-2820

Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
Change-Id: Ie9b523e881a6dd5bef62debdf208994d03a08f29

kubernetes/common/cassandra/values.yaml

index 597174e..7d017f2 100644 (file)
@@ -99,7 +99,11 @@ service:
   - name: tcp-agent
     port: 61621
 
-podAnnotations: {}
+podAnnotations:
+  #  sidecar.istio.io/inject: "false"
+  traffic.sidecar.istio.io/excludeInboundPorts: "7000,7001"
+  traffic.sidecar.istio.io/includeInboundPorts: '*'
+  traffic.sidecar.istio.io/excludeOutboundPorts: "7000,7001"
 podManagementPolicy: OrderedReady
 updateStrategy:
   type: RollingUpdate