istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/gateways/istio-ingress/files/profile-openshift-ambient.yaml (about)

     1  # WARNING: DO NOT EDIT, THIS FILE IS A COPY.
     2  # The original version of this file is located at /manifests/helm-profiles directory.
     3  # If you want to make a change in this file, edit the original one and run "make gen".
     4  
     5  meshConfig:
     6    defaultConfig:
     7      proxyMetadata:
     8        ISTIO_META_ENABLE_HBONE: "true"
     9  global:
    10    platform: openshift
    11  cni:
    12    ambient:
    13      enabled: true
    14    cniBinDir: /var/lib/cni/bin
    15    cniConfDir: /etc/cni/multus/net.d
    16    chained: false
    17    cniConfFileName: "istio-cni.conf"
    18    logLevel: info
    19    provider: "multus"
    20  pilot:
    21    cni:
    22      enabled: true
    23      provider: "multus"
    24    variant: distroless
    25    env:
    26      PILOT_ENABLE_AMBIENT: "true"
    27      # Allow sidecars/ingress to send/receive HBONE. This is required for interop.
    28      PILOT_ENABLE_SENDING_HBONE: "true"
    29      PILOT_ENABLE_SIDECAR_LISTENING_HBONE: "true"
    30      CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel"
    31  platform: openshift
    32  variant: distroless
    33  seLinuxOptions:
    34    type: spc_t