{{/* This provides a minimal gateway, ready to be injected.
     Any settings from values.gateways should be here - these are options specific to the gateway.
     Global settings, like the image, various env vars and volumes, etc will be injected.
     The normal Deployment is not suitable for this, as the original pod spec will override the injection template. */}}
apiVersion: apps/v1
kind: Deployment
metadata:

{{/* This provides a minimal gateway, ready to be injected.
     Any settings from values.gateways should be here - these are options specific to the gateway.
     Global settings, like the image, various env vars and volumes, etc will be injected.
     The normal Deployment is not suitable for this, as the original pod spec will override the injection template. */}}
apiVersion: apps/v1
kind: Deployment
metadata:

fieldPath: spec.nodeName volumeMounts: - name: workload-socket mountPath: /var/run/secrets/workload-spiffe-uds - name: credential-socket mountPath: /var/run/secrets/credential-uds - name: workload-certs mountPath: /var/run/secrets/workload-spiffe-credentials - name: istio-envoy mountPath: /etc/istio/proxy - name: config-volume mountPath: /etc/istio/config {{- if eq .Values.global.pilotCertProvider "istiod" }} - mountPath: /var/run/secrets/istio name: istiod-ca-cert {{- end }} {{- if eq .Values.global.jwtPolicy...

end }} {{- define "podAntiAffinityRequi" }} {{- range $index, $item := .podAntiAffinityLabel }} - labelSelector: matchExpressions: - key: {{ $item.key }} operator: {{ $item.operator }} {{- if $item.values }} values: {{- $vals := split "," $item.values }} {{- range $i, $v := $vals }} - {{ $v | quote }} {{- end }} {{- end }} topologyKey: {{ $item.topologyKey }} {{- if $item.namespaces }} namespaces: {{- $ns := split "," $item.namespaces }} {{- range $i, $n := $ns }} - {{ $n | quote }} {{- end }} {{-...

end }} {{- define "podAntiAffinityRequi" }} {{- range $index, $item := .podAntiAffinityLabel }} - labelSelector: matchExpressions: - key: {{ $item.key }} operator: {{ $item.operator }} {{- if $item.values }} values: {{- $vals := split "," $item.values }} {{- range $i, $v := $vals }} - {{ $v | quote }} {{- end }} {{- end }} topologyKey: {{ $item.topologyKey }} {{- if $item.namespaces }} namespaces: {{- $ns := split "," $item.namespaces }} {{- range $i, $n := $ns }} - {{ $n | quote }} {{- end }} {{-...

data:
{{/* Scope the values to just top level fields used in the template, to reduce the size. */}}
  values: |-
{{ $vals := pick .Values "global" "istio_cni" "sidecarInjectorWebhook" "revision" -}}
{{ $pilotVals := pick .Values.pilot "cni" -}}
{{ $vals = set $vals "pilot" $pilotVals -}}
{{ $vals | toPrettyJson | indent 4 }}

  # To disable injection: use omitSidecarInjectorConfigMap, which disables the webhook patching

data:
{{/* Scope the values to just top level fields used in the template, to reduce the size. */}}
  values: |-
{{ $vals := pick .Values "global" "istio_cni" "sidecarInjectorWebhook" "revision" -}}
{{ $pilotVals := pick .Values.pilot "cni" -}}
{{ $vals = set $vals "pilot" $pilotVals -}}
{{ $vals | toPrettyJson | indent 4 }}

  # To disable injection: use omitSidecarInjectorConfigMap, which disables the webhook patching