From 272af351e027e2a9fdf8577d3afb0d656d7c9cff Mon Sep 17 00:00:00 2001 From: Eguzki Astiz Lezaun Date: Mon, 11 Dec 2023 15:05:14 +0100 Subject: [PATCH] fix istioctl deployment --- config/dependencies/istio/istio-operator.yaml | 27 +------------------ .../authenticated-rl-for-app-developers.md | 8 ------ ...uthenticated-rl-with-jwt-and-k8s-authnz.md | 8 ------ .../simple-rl-for-app-developers.md | 6 ----- 4 files changed, 1 insertion(+), 48 deletions(-) diff --git a/config/dependencies/istio/istio-operator.yaml b/config/dependencies/istio/istio-operator.yaml index 0424558d5..f95685e03 100644 --- a/config/dependencies/istio/istio-operator.yaml +++ b/config/dependencies/istio/istio-operator.yaml @@ -16,29 +16,8 @@ spec: - enabled: false name: istio-egressgateway ingressGateways: - - enabled: true + - enabled: false name: istio-ingressgateway - k8s: - service: - type: NodePort - ports: - - name: status-port - port: 15021 - protocol: TCP - targetPort: 15021 - - name: http2 - port: 80 - protocol: TCP - targetPort: 8080 - nodePort: 30950 - - name: https - port: 443 - protocol: TCP - targetPort: 8443 - nodePort: 30951 - resources: - requests: - cpu: "0" pilot: enabled: true k8s: @@ -48,9 +27,5 @@ spec: values: pilot: autoscaleEnabled: false - gateways: - istio-ingressgateway: - type: ClusterIP - autoscaleEnabled: false global: istioNamespace: istio-system diff --git a/doc/user-guides/authenticated-rl-for-app-developers.md b/doc/user-guides/authenticated-rl-for-app-developers.md index 252b1e398..edf4619a3 100644 --- a/doc/user-guides/authenticated-rl-for-app-developers.md +++ b/doc/user-guides/authenticated-rl-for-app-developers.md @@ -101,14 +101,6 @@ curl -H 'Host: api.toystore.com' http://$GATEWAY_URL/toy -i # HTTP/1.1 200 OK ``` -> **Note**: If the command above fails to hit the Toy Store API on your environment, try forwarding requests to the service and accessing over localhost: -> -> ```sh -> kubectl port-forward -n istio-system service/istio-ingressgateway 9080:80 2>&1 >/dev/null & -> curl -H 'Host: api.toystore.com' http://localhost:9080/toy -i -> # HTTP/1.1 200 OK -> ``` - ### ③ Enforce authentication on requests to the Toy Store API Create a Kuadrant `AuthPolicy` to configure the authentication: diff --git a/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md b/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md index fe263c26d..6e687ce66 100644 --- a/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md +++ b/doc/user-guides/authenticated-rl-with-jwt-and-k8s-authnz.md @@ -97,14 +97,6 @@ curl -H 'Host: api.toystore.com' http://$GATEWAY_URL/toy -i It should return `200 OK`. -> **Note**: If the command above fails to hit the Toy Store API on your environment, try forwarding requests to the service and accessing over localhost: -> -> ```sh -> kubectl port-forward -n istio-system service/istio-ingressgateway 9080:80 2>&1 >/dev/null & -> curl -H 'Host: api.toystore.com' http://localhost:9080/toy -i -> # HTTP/1.1 200 OK -> ``` - ### ③ Deploy Keycloak Create the namesapce: diff --git a/doc/user-guides/simple-rl-for-app-developers.md b/doc/user-guides/simple-rl-for-app-developers.md index c2bf7c59f..0f146bc65 100644 --- a/doc/user-guides/simple-rl-for-app-developers.md +++ b/doc/user-guides/simple-rl-for-app-developers.md @@ -102,12 +102,6 @@ curl -H 'Host: api.toystore.com' http://$GATEWAY_URL/toys -i # HTTP/1.1 200 OK ``` -> **Note**: If the command above fails to hit the Toy Store API on your environment, try forwarding requests to the service: -> -> ```sh -> kubectl port-forward -n istio-system service/istio-ingressgateway 9080:80 2>&1 >/dev/null & -> ``` - ### ③ Enforce rate limiting on requests to the Toy Store API Create a Kuadrant `RateLimitPolicy` to configure rate limiting: