+directResponse, faultInjection, egressAuthorization (#377)

tetratelabs · Apr 12, 2024 · 4407aeb · 4407aeb
1 parent 1a82a4f
commit 4407aeb
Show file tree

Hide file tree

Showing 2 changed files with 41 additions and 0 deletions.
diff --git a/gitops/bookinfo/tsb-bookinfo-application-gateway.yaml b/gitops/bookinfo/tsb-bookinfo-application-gateway.yaml
@@ -28,6 +28,15 @@ items:
         labels:
           app: app-gw
       http:
+        - name: health
+          port: 80
+          hostname: 'health.tetrate.io'
+          routing:
+            rules:
+              - directResponse:
+                  status: 200
+                  body:
+                    string: "OK"
         - name: productpage
           port: 80
           hostname: "internal-bookinfo.tetrate.io"
@@ -59,6 +68,30 @@ items:
       - name: v3
         labels:
           version: v3
+  - apiVersion: traffic.tsb.tetrate.io/v2
+    kind: ServiceRoute
+    metadata:
+      name: ratings-sr
+      namespace: bookinfo
+      annotations:
+        tsb.tetrate.io/organization: tetrate
+        tsb.tetrate.io/tenant: dev
+        tsb.tetrate.io/workspace: bookinfo-ws
+        tsb.tetrate.io/trafficGroup: bookinfo-tg
+    spec:
+      service: bookinfo/ratings.bookinfo.svc.cluster.local
+      httpRoutes:
+      - name: ratings-faultinjections
+        destination:
+          - destinationHost: "bookinfo/ratings.bookinfo.svc.cluster.local"
+            port: 9080
+        fault:
+          delay:
+            percentage: 10
+            fixedDelay: 500ms
+          abort:
+            percentage: 10
+            httpStatus: 418
   - apiVersion: traffic.tsb.tetrate.io/v2
     kind: TrafficSetting
     metadata:

diff --git a/gitops/bookinfo/tsb-bookinfo-egress-gateway.yaml b/gitops/bookinfo/tsb-bookinfo-egress-gateway.yaml
@@ -60,6 +60,14 @@ items:
                       mode: SIMPLE
                       files:
                         caCertificates: "/etc/ssl/certs/ca-certificates.crt"
+      egressAuthorization:
+      - from:
+          mode: SERVICE_ACCOUNT
+          serviceAccounts:
+            - "bookinfo/bookinfo-details"
+        to:
+        - host:
+            exact: "www.googleapis.com"
   - apiVersion: networking.istio.io/v1beta1
     kind: ServiceEntry
     metadata: