Update ServiceEntries for Istio 1.1 (#183)
This commit is contained in:
parent
a0a9852afe
commit
11e282824e
2 changed files with 34 additions and 6 deletions
|
@ -18,9 +18,6 @@ metadata:
|
||||||
name: whitelist-egress-googleapis
|
name: whitelist-egress-googleapis
|
||||||
spec:
|
spec:
|
||||||
hosts:
|
hosts:
|
||||||
- "169.254.169.254" # GCE metadata server
|
|
||||||
- "metadata.google" # GCE metadata server
|
|
||||||
- "metadata.google.internal" # GCE metadata server
|
|
||||||
- "accounts.google.com" # Used to get token
|
- "accounts.google.com" # Used to get token
|
||||||
- "*.googleapis.com"
|
- "*.googleapis.com"
|
||||||
ports:
|
ports:
|
||||||
|
@ -30,3 +27,20 @@ spec:
|
||||||
- number: 443
|
- number: 443
|
||||||
protocol: HTTPS
|
protocol: HTTPS
|
||||||
name: https
|
name: https
|
||||||
|
---
|
||||||
|
apiVersion: networking.istio.io/v1alpha3
|
||||||
|
kind: ServiceEntry
|
||||||
|
metadata:
|
||||||
|
name: whitelist-egress-google-metadata
|
||||||
|
spec:
|
||||||
|
hosts:
|
||||||
|
- metadata.google.internal
|
||||||
|
addresses:
|
||||||
|
- 169.254.169.254 # GCE metadata server
|
||||||
|
ports:
|
||||||
|
- number: 80
|
||||||
|
name: http
|
||||||
|
protocol: HTTP
|
||||||
|
- number: 443
|
||||||
|
name: https
|
||||||
|
protocol: HTTPS
|
||||||
|
|
|
@ -82,9 +82,6 @@ metadata:
|
||||||
name: whitelist-egress-googleapis
|
name: whitelist-egress-googleapis
|
||||||
spec:
|
spec:
|
||||||
hosts:
|
hosts:
|
||||||
- "169.254.169.254" # GCE metadata server
|
|
||||||
- "metadata.google" # GCE metadata server
|
|
||||||
- "metadata.google.internal" # GCE metadata server
|
|
||||||
- "accounts.google.com" # Used to get token
|
- "accounts.google.com" # Used to get token
|
||||||
- "*.googleapis.com"
|
- "*.googleapis.com"
|
||||||
ports:
|
ports:
|
||||||
|
@ -95,3 +92,20 @@ spec:
|
||||||
protocol: HTTPS
|
protocol: HTTPS
|
||||||
name: https
|
name: https
|
||||||
---
|
---
|
||||||
|
apiVersion: networking.istio.io/v1alpha3
|
||||||
|
kind: ServiceEntry
|
||||||
|
metadata:
|
||||||
|
name: whitelist-egress-google-metadata
|
||||||
|
spec:
|
||||||
|
hosts:
|
||||||
|
- metadata.google.internal
|
||||||
|
addresses:
|
||||||
|
- 169.254.169.254 # GCE metadata server
|
||||||
|
ports:
|
||||||
|
- number: 80
|
||||||
|
name: http
|
||||||
|
protocol: HTTP
|
||||||
|
- number: 443
|
||||||
|
name: https
|
||||||
|
protocol: HTTPS
|
||||||
|
---
|
||||||
|
|
Loading…
Reference in a new issue