fix: configure oxia istio defaults

Author: mattisonchao

charts/sn-platform-slim/templates/oxia/oxia-cluster.yaml

@@ -5,6 +5,8 @@
 {{- if include "pulsar.metadata.isOxia" . }}
 {{- $oxia := default dict .Values.oxia }}
 {{- $dataserver := default dict $oxia.dataserver }}
+{{- $oxiaIstio := default dict $oxia.istio }}
+{{- $istioRevision := index (default dict .Values.istio.labels) "istio.io/rev" }}
 apiVersion: k8s.streamnative.io/v1alpha1
 kind: OxiaCluster
 metadata:
@@ -47,12 +49,28 @@ spec:
   {{- if .Values.istio.enabled }}
   istio:
     enabled: true
+    {{- with $istioRevision }}
+    revision: {{ . | quote }}
+    {{- end }}
     {{- if .Values.istio.dataplaneMode }}
     dataplaneMode: {{ .Values.istio.dataplaneMode }}
     {{- end }}
     {{- if .Values.istio.migration }}
     mtls:
       mode: permissive
     {{- end }}
+    {{- if $oxiaIstio.authRules }}
+    authRules:
+{{ toYaml $oxiaIstio.authRules | indent 4 }}
+    {{- else }}
+    authRules:
+    - toOperation:
+      - ports:
+        - "6648"
+        - "6649"
+        - "8080"
+        - "6650"
+        - "8081"
+    {{- end }}
   {{- end }}
 {{- end }}

charts/sn-platform-slim/values.yaml

@@ -1159,6 +1159,15 @@ pulsar_metadata:
   #     limits:
   #       cpu: "1"
   #       memory: "1Gi"
+  # istio:
+  #   authRules:
+  #   - toOperation:
+  #     - ports:
+  #       - "6648"
+  #       - "6649"
+  #       - "8080"
+  #       - "6650"
+  #       - "8081"
 
 ## deprecated: move to broker.kop
 # kop:

charts/sn-platform/templates/oxia/oxia-cluster.yaml

@@ -5,6 +5,8 @@
 {{- if include "pulsar.metadata.isOxia" . }}
 {{- $oxia := default dict .Values.oxia }}
 {{- $dataserver := default dict $oxia.dataserver }}
+{{- $oxiaIstio := default dict $oxia.istio }}
+{{- $istioRevision := index (default dict .Values.istio.labels) "istio.io/rev" }}
 apiVersion: k8s.streamnative.io/v1alpha1
 kind: OxiaCluster
 metadata:
@@ -47,9 +49,25 @@ spec:
   {{- if .Values.istio.enabled }}
   istio:
     enabled: true
+    {{- with $istioRevision }}
+    revision: {{ . | quote }}
+    {{- end }}
     {{- if .Values.istio.migration }}
     mtls:
       mode: permissive
     {{- end }}
+    {{- if $oxiaIstio.authRules }}
+    authRules:
+{{ toYaml $oxiaIstio.authRules | indent 4 }}
+    {{- else }}
+    authRules:
+    - toOperation:
+      - ports:
+        - "6648"
+        - "6649"
+        - "8080"
+        - "6650"
+        - "8081"
+    {{- end }}
   {{- end }}
 {{- end }}

charts/sn-platform/values.yaml

@@ -1234,6 +1234,15 @@ pulsar_metadata:
   #     limits:
   #       cpu: "1"
   #       memory: "1Gi"
+  # istio:
+  #   authRules:
+  #   - toOperation:
+  #     - ports:
+  #       - "6648"
+  #       - "6649"
+  #       - "8080"
+  #       - "6650"
+  #       - "8081"
 
 ## deprecated: move to broker.kop
 # kop: