-
Notifications
You must be signed in to change notification settings - Fork 325
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ingress Gateways integration with Agentless and Consul Dataplane #1544
Conversation
21ac5b9
to
0464dfd
Compare
338d120
to
f557b64
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Beautiful!! I had some comments, but won't block assuming they're addressed before merging! Amazing work!
if !c.secure { | ||
logger.Logf(t, "creating the %s namespace in Consul", testNamespace) | ||
_, _, err := consulClient.Namespaces().Create(&api.Namespace{ | ||
Name: testNamespace, | ||
}, nil) | ||
require.NoError(t, err) | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh nice! because endpoints controller will create the ns now, right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
exactly!!
{{- if (and $root.Values.global.tls.enabled $root.Values.global.tls.enableAutoEncrypt) }} | ||
{{- include "consul.getAutoEncryptClientCA" $root | nindent 8 }} | ||
volumeMounts: | ||
{{- if $root.Values.global.tls.enabled }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this doesn't need to be mounted if external servers with use system roots is set
{{- if $root.Values.global.tls.enabled }} | ||
{{- if not (and $root.Values.externalServers.enabled $root.Values.externalServers.useSystemRoots) }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we still need the this if
condition
-envoy-ready-bind-address=$POD_IP \ | ||
-envoy-ready-bind-port=21000 \ | ||
{{- if $root.Values.externalServers.enabled }} | ||
-addresses={{ $root.Values.externalServers.hosts | first }} \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we need to quote it so that command like -addresses="exec=..."
works
-addresses={{ $root.Values.externalServers.hosts | first }} \ | |
-addresses={{ $root.Values.externalServers.hosts | first | quote }} \ |
f557b64
to
453199c
Compare
- Use consul-dataplane instead of envoy.
453199c
to
57dfafc
Compare
- Use consul-dataplane instead of envoy.
Changes proposed in this PR:
How I've tested this PR:
How I expect reviewers to test this PR:
Checklist: