Don't expose the status port of istio ingress gateway. (gardener#7027)

It only needed as kubernetes readiness probe.
nickytd · Nov 18, 2022 · 034ba10 · 034ba10
1 parent 2c800d1
commit 034ba10
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 10 deletions.
diff --git a/pkg/operation/botanist/component/istio/charts/istio/istio-ingress/templates/deployment.yaml b/pkg/operation/botanist/component/istio/charts/istio/istio-ingress/templates/deployment.yaml
@@ -53,7 +53,6 @@ spec:
           runAsGroup: 1337
           runAsNonRoot: true
         ports:
-        - containerPort: 15021
         {{- range .Values.ports }}
         - containerPort: {{ .targetPort }}
           protocol: TCP

diff --git a/pkg/operation/botanist/component/istio/charts/istio/istio-ingress/templates/service.yaml b/pkg/operation/botanist/component/istio/charts/istio/istio-ingress/templates/service.yaml
@@ -17,10 +17,6 @@ spec:
   selector:
 {{ .Values.labels  | toYaml | indent 4 }}
   ports:
-  - name: {{ .Values.portsNames.status }}
-    port: 15021
-    targetPort: 15021
-    protocol: TCP
 {{- if .Values.ports }}
 {{ toYaml .Values.ports | indent 2 }}
 {{- end }}

diff --git a/pkg/operation/botanist/component/istio/istiod_test.go b/pkg/operation/botanist/component/istio/istiod_test.go
@@ -1498,10 +1498,6 @@ spec:
     foo: bar
     
   ports:
-  - name: status-port
-    port: 15021
-    targetPort: 15021
-    protocol: TCP
   - name: foo
     port: 999
     targetPort: 999
@@ -1576,7 +1572,6 @@ spec:
           runAsGroup: 1337
           runAsNonRoot: true
         ports:
-        - containerPort: 15021
         - containerPort: 999
           protocol: TCP
         args: