sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update yc-ecp Istio configuration: add main-gateway and TLS settings for aero.invest.sarex.io

Browse Source
This commit is contained in:
emelinda 2026-08-05 01:05:11 +03:00
parent 638da92688
commit d46ba48d22
1 changed files with 219 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

219
infrastructure/istio-config/yc-ecp/istio-config.yaml
View File

@ -64,6 +64,13 @@ spec:
issuerRef: issuerRef:
name: letsencrypt-prod name: letsencrypt-prod
kind: ClusterIssuer kind: ClusterIssuer
aero-invest-tls-secret:
namespace: istio-system
dnsNames:
- aero.invest.sarex.io
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
istio: istio:
gateways: gateways:
gitea: gitea:
@ -86,6 +93,16 @@ spec:
httpsPortName: https httpsPortName: https
tls: tls:
credentialName: vault-tls credentialName: vault-tls
main:
name: main-gateway
namespace: gateway
servers:
- hosts:
- aero.invest.sarex.io
httpPortName: http
httpsPortName: https
tls:
credentialName: aero-invest-tls-secret
dashboard: dashboard:
name: dashboard-gateway name: dashboard-gateway
namespace: gateway namespace: gateway
@ -138,3 +155,205 @@ spec:
prefix: / prefix: /
service: dashboard-kong-proxy.kubernetes-dashboard.svc.cluster.local service: dashboard-kong-proxy.kubernetes-dashboard.svc.cluster.local
port: 80 port: 80
# # --- aero.invest.sarex.io / main-gateway ---
# backend-service-virt-service:
# namespace: django
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /admin/
# service: backend-service
# port: 8000
# - path:
# prefix: /api
# service: backend-service
# port: 8000
#
# s3-proxy-virt-service:
# namespace: django
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /s3/
# rewrite: /
# service: s3-bim-service
# port: 80
# - path:
# prefix: /media/
# rewrite: /
# service: s3-service
# port: 80
#
# frontend-vs:
# namespace: django
# noCors: true
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# routes:
# # без path — маршрут без match, catch-all, как в кластере;
# # он должен оставаться последним по порядку сопоставления
# - service: frontend-service.django.svc.cluster.local
# port: 80
#
# bim-api-gazpromcps-api-virt-service:
# namespace: bim
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /bim-gazpromcps/api/
# rewrite: /api/
# service: bim-api-gazpromcps-service
# port: 80
# - path:
# prefix: /bim-gazpromcps/files/
# rewrite: /files/
# service: bim-api-gazpromcps-service
# port: 80
#
# bim-backend-v2-api-virt-service:
# namespace: bim
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /bim2-gazpromcps/api/
# rewrite: /api/
# service: bim-backend-v2-service
# port: 80
#
# eav-virt-service:
# namespace: eav
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - POST
# - GET
# - PATCH
# - DELETE
# - HEAD
# - PUT
# - OPTIONS
# routes:
# - path:
# prefix: /eav/api/
# rewrite: /api/
# service: eav-service
# port: 8000
# noCors: true
# - path:
# prefix: /eav/admin/
# rewrite: /eav/admin/
# service: eav-service
# port: 8000
#
# api-virt-service:
# namespace: processing
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /workflows/api/
# rewrite: /api/
# service: workflows-backend-service
# port: 80
#
# projects-frontend-static-virt-service:
# namespace: projects
# hosts:
# - aero.invest.sarex.io
# gateways:
# - gateway/main-gateway
# cors:
# allowHeaders:
# - Authorization
# - Content-Type
# allowMethods:
# - GET
# - POST
# - PUT
# - PATCH
# - HEAD
# - DELETE
# routes:
# - path:
# prefix: /projects/static/
# rewrite: /
# service: projects-frontend-static-service
# port: 80