This blueprint builds a data-path that consists of the following Kubernetes resources:
- A 'child'
Gatewayusing the istioGatewayClass. This creates an Istio ingress gateway. - An
Ingressresource, which serves to 'simulate' a load-balancer. TheIngressresource use the ingress-classcontourand forwards traffic to the Istio ingress gateway. - A
Certificateresource (a cert-manager CRD) to allow termination of HTTPS through the ingress.
This definition is provided in the following files:
gatewayclassblueprint-contour-istio-cert.yaml
(with attached TLS certificate).
gatewayclassblueprint-contour-istio.yaml
(without attached TLS certificate) and in
gatewayclassblueprint-contour-istio-values.yaml
(RBAC for bifrost-gateway-controller Helm deployment suited for the contour-istio blueprint).