remove istio ref
This commit is contained in:
@@ -55,10 +55,6 @@ This is a **Kubernetes cluster bootstrapping and GitOps configuration repository
|
|||||||
- Only secrets labeled `allowedToBeCloned: "true"` are cloned
|
- Only secrets labeled `allowedToBeCloned: "true"` are cloned
|
||||||
- Syncing happens automatically via `synchronize: true` in the policy
|
- Syncing happens automatically via `synchronize: true` in the policy
|
||||||
|
|
||||||
### Istio Integration
|
|
||||||
- Cert-Manager and webhooks disable Istio sidecar injection (`sidecar.istio.io/inject: "false"`) to avoid mTLS conflicts
|
|
||||||
- Indicates the cluster likely has Istio installed for service mesh capabilities
|
|
||||||
|
|
||||||
### Network Configuration
|
### Network Configuration
|
||||||
- ArgoCD UI: `argocd.127.0.0.1.nip.io` (local development)
|
- ArgoCD UI: `argocd.127.0.0.1.nip.io` (local development)
|
||||||
- Server runs in insecure mode (`--insecure`, `--disable-auth`) - suitable for local/dev clusters
|
- Server runs in insecure mode (`--insecure`, `--disable-auth`) - suitable for local/dev clusters
|
||||||
|
|||||||
@@ -32,21 +32,11 @@ spec:
|
|||||||
enabled: true
|
enabled: true
|
||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
timeoutSeconds: 10
|
timeoutSeconds: 10
|
||||||
# Disable Istio sidecar injection for webhook to avoid mTLS issues
|
|
||||||
podAnnotations:
|
|
||||||
sidecar.istio.io/inject: "false"
|
|
||||||
|
|
||||||
# CA Injector
|
# CA Injector
|
||||||
caInjector:
|
caInjector:
|
||||||
enabled: true
|
enabled: true
|
||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
# Disable Istio sidecar injection for CA injector
|
|
||||||
podAnnotations:
|
|
||||||
sidecar.istio.io/inject: "false"
|
|
||||||
|
|
||||||
# Disable Istio sidecar for main controller pods
|
|
||||||
podAnnotations:
|
|
||||||
sidecar.istio.io/inject: "false"
|
|
||||||
|
|
||||||
# Security context
|
# Security context
|
||||||
podSecurityPolicy:
|
podSecurityPolicy:
|
||||||
|
|||||||
Reference in New Issue
Block a user