Blog Archive for July 4, 2023

Kubernetes Istio Pod Security

July 4, 2023

We implemented security between the pods to allow only named pods to be able to talk to each other. This was done using both an AuthorisationPolicy and a NetworkPolicy.

Here's the AuthorisationPolicy:

{{ $env := }}
{{ $ns := .Release.Namespace }}
{{- if .Values.allowedServices }}
kind: AuthorizationPolicy …

Kubernetes ConfigMap

July 4, 2023

You can define a ConfigMap in the Helm chart which will provide a file to the Kubernetes Deployment docker image. An example of this is apache config:

{{ $env := }}
apiVersion: v1
kind: ConfigMap
  name: "{{ $env }}-{{ .Chart.Name }}-apache-config"
  my-app-apache.conf: |
    <VirtualHost *:80>
        ServerName my-app …

Kubernetes Deployment

July 4, 2023

I wanted to document the approach taken to to various bits of the Helm charts that I've authored. This is the Helm chart for deployment of a pod which includes Istio, Apache and PHP-FPM in separate docker containers.

{{ $env := }}
apiVersion: apps/v1
kind: Deployment
  name: {{ …