istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pkg/config/analysis/analyzers/testdata/sidecar-default-selector.yaml (about)

     1  apiVersion: networking.istio.io/v1alpha3
     2  kind: Sidecar
     3  metadata:
     4    name: no-selector # Since this is the only Sidecar in the namespace without a workload selector, no conflict
     5    namespace: ns1
     6  spec:
     7    egress:
     8    - hosts:
     9      - "./*"
    10  ---
    11  apiVersion: networking.istio.io/v1alpha3
    12  kind: Sidecar
    13  metadata:
    14    name: has-selector
    15    namespace: ns1
    16  spec:
    17    workloadSelector: # Since this has a workload selector, it shouldn't conflict with the other Sidecar in the namespace
    18      labels:
    19        app: foo
    20    egress:
    21    - hosts:
    22      - "./*"
    23  ---
    24  apiVersion: networking.istio.io/v1alpha3
    25  kind: Sidecar
    26  metadata:
    27    name: has-conflict-1 # Both Sidecars in this namespace omit workload selector, so they are in conflict
    28    namespace: ns2
    29  spec:
    30    egress:
    31    - hosts:
    32      - "./*"
    33  ---
    34  apiVersion: networking.istio.io/v1alpha3
    35  kind: Sidecar
    36  metadata:
    37    name: has-conflict-2 # Both Sidecars in this namespace omit workload selector, so they are in conflict
    38    namespace: ns2
    39  spec:
    40    egress:
    41    - hosts:
    42      - "./*"
    43  ---
    44  apiVersion: v1
    45  kind: Namespace
    46  metadata:
    47    name: ns1
    48  ---
    49  apiVersion: v1
    50  kind: Namespace
    51  metadata:
    52    name: ns2
    53  ---
    54  apiVersion: v1
    55  kind: Pod
    56  metadata:
    57    name: random-pod
    58    namespace: ns1
    59    labels:
    60      app: foo
    61  spec:
    62    containers:
    63    - image: proxyv2
    64  ---
    65  # some tests for ambient
    66  # pod in ambient mode should throw error for sidecar resource
    67  apiVersion: v1
    68  kind: Namespace
    69  metadata:
    70    name: ns-ambient
    71    labels:
    72      istio.io/dataplane-mode: ambient
    73  ---
    74  apiVersion: v1
    75  kind: Pod
    76  metadata:
    77    name: random-pod-ambient
    78    namespace: ns-ambient
    79    labels:
    80      app: ambient
    81    annotations:
    82      ambient.istio.io/redirection: enabled
    83  ---
    84  apiVersion: networking.istio.io/v1alpha3
    85  kind: Sidecar
    86  metadata:
    87    name: namespace-scoped
    88    namespace: ns-ambient
    89  ---
    90  apiVersion: networking.istio.io/v1alpha3
    91  kind: Sidecar
    92  metadata:
    93    name: pod-scoped
    94    namespace: ns-ambient
    95  spec:
    96    workloadSelector:
    97      labels:
    98        app: ambient
    99  ---
   100  apiVersion: v1
   101  kind: Namespace
   102  metadata:
   103    name: ns-not-ambient
   104    labels:
   105      istio.io/dataplane-mode: ambient
   106      istio-injection: enabled
   107  ---
   108  apiVersion: v1
   109  kind: Namespace
   110  metadata:
   111    name: ns-not-ambient-rev
   112    labels:
   113      istio.io/dataplane-mode: ambient
   114      istio.io/rev: canary
   115  ---
   116  apiVersion: networking.istio.io/v1alpha3
   117  kind: Sidecar
   118  metadata:
   119    name: namespace-not-ambient
   120    namespace: ns-not-ambient
   121  ---
   122  apiVersion: networking.istio.io/v1alpha3
   123  kind: Sidecar
   124  metadata:
   125    name: namespace-not-ambient
   126    namespace: ns-not-ambient-rev