Resolve "Egress Whitelist - Metrics Server"
General MR
Summary
As part of big-bang&160, we will want to enable users to configure setting REGISTRY_ONLY
traffic policy on a per-package basis, in addition to allowing for it to be set globally in the meshConfig (see #1886).
Relevant logs/screenshots
(Include any relevant logs/screenshots)
Linked Issue
Upgrade Notices
N/A
Overrides File
networkPolicies:
# -- Toggle all package NetworkPolicies, can disable specific packages with `package.values.networkPolicies.enabled`
enabled: false
kyvernoPolicies:
# -- Toggle deployment of Kyverno policies
enabled: false
values:
excludeContainers:
- netshoot
addons:
metricsServer:
enabled: true
git:
tag: null
branch: "33-egress-whitelist-metrics-server"
values:
podAnnotations:
sidecar.istio.io/logLevel: debug
istio:
enabled: true
hardened:
enabled: true
customServiceEntries: []
# customServiceEntries:
# - name: "google-com-test"
# enabled: true
# spec:
# hosts:
# - google.com
# - www.google.com
# location: MESH_EXTERNAL
# ports:
# - number: 443
# protocol: TLS
# name: https
# resolution: DNS
Closes #33 (closed)
Edited by Steven Donald