linkerd
/
linkerd2
mirror of https://github.com/linkerd/linkerd2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Support loadBalancerSourceRanges in gateway service #10154 (#10155) 

This is usually propagated to underlying cloud providers as a firewall rule, when it is needed to further control access to Gateway LB service.

Source: https://github.com/kubernetes/kubernetes/blob/master/pkg/apis/core/types.go#L3999

Configuration is optional, and can be set via gateway.loadBalancerSourceRanges value.

Validated via helm template, with and without value set.

Fixes https://github.com/linkerd/linkerd2/issues/10154

Signed-off-by: Ivan Ivic <tyrion85@gmail.com>
This commit is contained in:
Ivan Ivic 2023-01-25 00:15:11 +01:00 committed by GitHub
parent 5e47964f68
commit 0cd97339b6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
multicluster/charts/linkerd-multicluster/README.md
View File

@ -77,6 +77,7 @@ Kubernetes: `>=1.21.0-0`
| gateway.deploymentAnnotations | object | `{}` | Annotations to add to the gateway deployment | | gateway.deploymentAnnotations | object | `{}` | Annotations to add to the gateway deployment |
| gateway.enabled | bool | `true` | If the gateway component should be installed | | gateway.enabled | bool | `true` | If the gateway component should be installed |
| gateway.loadBalancerIP | string | `""` | Set loadBalancerIP on gateway service | | gateway.loadBalancerIP | string | `""` | Set loadBalancerIP on gateway service |
| gateway.loadBalancerSourceRanges | list | `[]` | Set loadBalancerSourceRanges on gateway service |
| gateway.name | string | `"linkerd-gateway"` | The name of the gateway that will be installed | | gateway.name | string | `"linkerd-gateway"` | The name of the gateway that will be installed |
| gateway.pauseImage | string | `"gcr.io/google_containers/pause:3.2"` | The pause container to use | | gateway.pauseImage | string | `"gcr.io/google_containers/pause:3.2"` | The pause container to use |
| gateway.port | int | `4143` | The port on which all the gateway will accept incoming traffic | | gateway.port | int | `4143` | The port on which all the gateway will accept incoming traffic |

6
multicluster/charts/linkerd-multicluster/templates/gateway.yaml
View File

@ -115,6 +115,12 @@ spec:
{{- if .Values.gateway.loadBalancerIP }} {{- if .Values.gateway.loadBalancerIP }}
loadBalancerIP: {{ .Values.gateway.loadBalancerIP }} loadBalancerIP: {{ .Values.gateway.loadBalancerIP }}
{{- end }} {{- end }}
{{- if .Values.gateway.loadBalancerSourceRanges }}
loadBalancerSourceRanges:
{{- range .Values.gateway.loadBalancerSourceRanges }}
- {{ . }}
{{- end }}
{{- end }}
--- ---
kind: ServiceAccount kind: ServiceAccount
apiVersion: v1 apiVersion: v1

2
multicluster/charts/linkerd-multicluster/values.yaml
View File

@ -27,6 +27,8 @@ gateway:
deploymentAnnotations: {} deploymentAnnotations: {}
# -- Set loadBalancerIP on gateway service # -- Set loadBalancerIP on gateway service
loadBalancerIP: "" loadBalancerIP: ""
# -- Set loadBalancerSourceRanges on gateway service
loadBalancerSourceRanges: []
# -- Set terminationGracePeriodSeconds on gateway deployment # -- Set terminationGracePeriodSeconds on gateway deployment
terminationGracePeriodSeconds: "" terminationGracePeriodSeconds: ""