Merge branch...

Merge branch '90-allow-passing-value-of-jwksresolverextrarootca-to-istiooperator-template' into 'main'

Add ability to pass pilot values to IstioOperator resource definition

Closes #90

See merge request !146

CHANGELOG.md

@@ -3,6 +3,11 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+
+## [1.17.1-bb.1] - 2023-04-07
+### Changed
+- Added ability to pass pilot values to IstioOperator resource definition
+
 ## [1.17.1-bb.0] - 2023-03-01
 ### Changed
 - ironbank/opensource/istio/install-cni updated from 1.16.2 to 1.17.1

README.md

 # istio
 
-![Version: 1.17.1-bb.0](https://img.shields.io/badge/Version-1.17.1--bb.0-informational?style=flat-square) ![AppVersion: 1.17.1](https://img.shields.io/badge/AppVersion-1.17.1-informational?style=flat-square)
+![Version: 1.17.1-bb.1](https://img.shields.io/badge/Version-1.17.1--bb.1-informational?style=flat-square) ![AppVersion: 1.17.1](https://img.shields.io/badge/AppVersion-1.17.1-informational?style=flat-square)
 
 Configurable Deployment of Istio Custom Resources Wrapped Inside a Helm Chart.
 
@@ -88,6 +88,7 @@ helm install istio chart/
 | meshConfig.meshMTLS.minProtocolVersion | string | `"TLSV1_2"` |  |
 | values.global | object | `{"proxy":{"resources":{"limits":{"cpu":"100m","memory":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}},"proxy_init":{"resources":{"limits":{"cpu":"100m","memory":"256Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}}}` | Global IstioOperator values |
 | values.defaultRevision | string | `"default"` | Set defaultRevision name, must be non-empty to deploy validating webhook |
+| values.pilot | object | `{}` | Istio pilot values. https://github.com/istio/istio/blob/master/manifests/charts/istio-control/istio-discovery/values.yaml |
 | networkPolicies | object | `{"controlPlaneCidr":"0.0.0.0/0","enabled":false}` | Big Bang NetworkPolicy controls |
 | networkPolicies.enabled | bool | `false` | Toggle ALL NetworkPolicies on/off |
 | networkPolicies.controlPlaneCidr | string | `"0.0.0.0/0"` | See `kubectl cluster-info` and then resolve to IP |

chart/Chart.yaml

 apiVersion: v2
 name: istio
-version: 1.17.1-bb.0
+version: 1.17.1-bb.1
 appVersion: 1.17.1
 description: Configurable Deployment of Istio Custom Resources Wrapped Inside a Helm Chart.
 annotations:

chart/templates/controlplane.yaml

@@ -113,6 +113,10 @@ spec:
     {{- end }}
 
   values:
+    {{- if .Values.values.pilot }}
+    pilot:
+      {{- toYaml .Values.values.pilot | nindent 6 }}
+    {{- end }}
     {{- if .Values.openshift }}
     cni:
       repair:

chart/values.yaml

@@ -233,6 +233,14 @@ values:
           memory: 256Mi
   # -- Set defaultRevision name, must be non-empty to deploy validating webhook
   defaultRevision: "default"
+  # -- Istio pilot values. https://github.com/istio/istio/blob/master/manifests/charts/istio-control/istio-discovery/values.yaml
+  pilot: {}
+    # # For example, include a custom CA certificate for the JWKS URI resolver
+    # jwksResolverExtraRootCA: |
+    #   -----BEGIN CERTIFICATE-----
+    #   ...
+    #   -----END CERTIFICATE-----
+
 
 # -- Big Bang NetworkPolicy controls
 networkPolicies: