From: Andreas Geissler <andreas-geissler@telekom.de>
Date: Wed, 13 Jul 2022 09:51:58 +0000 (+0200)
Subject: [COMMON][CASSANDRA] Cassandra ServiceMesh Improvements
X-Git-Tag: 11.0.0~100
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=oom.git;a=commitdiff_plain;h=904b8911706aa930c12dd0ac38f0f212378ae9e9

[COMMON][CASSANDRA] Cassandra ServiceMesh Improvements

Disable inter-cluster ports from the Sidecar communication

Issue-ID: OOM-2820

Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
Change-Id: Ie9b523e881a6dd5bef62debdf208994d03a08f29
---

diff --git a/kubernetes/common/cassandra/values.yaml b/kubernetes/common/cassandra/values.yaml
index 597174ee0a..7d017f266b 100644
--- a/kubernetes/common/cassandra/values.yaml
+++ b/kubernetes/common/cassandra/values.yaml
@@ -99,7 +99,11 @@ service:
   - name: tcp-agent
     port: 61621
 
-podAnnotations: {}
+podAnnotations:
+  #  sidecar.istio.io/inject: "false"
+  traffic.sidecar.istio.io/excludeInboundPorts: "7000,7001"
+  traffic.sidecar.istio.io/includeInboundPorts: '*'
+  traffic.sidecar.istio.io/excludeOutboundPorts: "7000,7001"
 podManagementPolicy: OrderedReady
 updateStrategy:
   type: RollingUpdate