Patch gateway hosts

Package Merge Request

Package Changes

Updates the istio global values, secret-tls.yaml template, gateway.yaml template, and values.yaml template files in chart/templates/istio/controlplane/ to support using two different TLS certificate secrets for the same Gateway resource.

Package MR

N/A

For Issue

Closes #1068 (closed)

BB Processes

Add labels for affected packages so that they are deployed in CI as well as a status label:

Be sure to assign to yourself:

Once it is ready for review switch the status and assign reviewers:

chart/templates/istio/controlplane/secret-tls.yaml

@@ -6,7 +6,29 @@ For backwards compatibility, get key/cert from .Values.istio.ingress
 {{- $default := .Values.istio.ingress | default dict -}}
 
 {{- range $name, $values := .Values.istio.gateways }}
-{{- if or (and (dig "tls" "cert" "" $values) (dig "tls" "key" "" $values)) (and $default.cert $default.key) }}
+{{- if $values.servers }}
+{{- range $index, $servervalues := $values.servers }}
+{{- if or (and (dig "tls" "cert" "" $servervalues) (dig "tls" "key" "" $servervalues)) (and $default.cert $default.key) }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ printf "%d-%s-cert" $index $name }}
+  namespace: istio-system
+  labels:
+    app.kubernetes.io/name: istio-controlplane
+    app.kubernetes.io/component: "core"
+    {{- include "commonLabels" $ | nindent 4}}
+type: kubernetes.io/tls
+data:
+  tls.crt: {{ default $default.cert $servervalues.tls.cert | b64enc }}
+  tls.key: {{ default $default.key $servervalues.tls.key | b64enc }}
+---
+{{- end }}
+{{- end }}
+{{/*
+For backwards compatibility, get certificate and key from .Values.istio.gateways.<gateway>.tls
+*/}}
+{{- else if or (and (dig "tls" "cert" "" $values) (dig "tls" "key" "" $values)) (and $default.cert $default.key) }}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -24,4 +46,4 @@ data:
 {{- end }}
 {{- end }}
 
-{{- end }}
\ No newline at end of file
+{{- end }}