Last active
March 5, 2025 14:45
-
-
Save unclebean/37126d8188fd20771ae567c5b337b2c4 to your computer and use it in GitHub Desktop.
k8s
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| az network nsg rule create --resource-group <your-resource-group> --nsg-name <your-nsg-name> --name AllowHTTPHTTPS --priority 100 --direction Inbound --access Allow --protocol Tcp --source-address-prefix '*' --source-port-range '*' --destination-address-prefix '*' --destination-port-range 80 443 | |
| az network nsg rule list --resource-group <your-resource-group> --query "[].{Name:name, Access:access, Port:destinationPortRange}" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: VirtualService | |
| metadata: | |
| name: abs-routing | |
| namespace: aks-istio-ingress | |
| spec: | |
| hosts: | |
| - "gateway.abs.com" | |
| gateways: | |
| - abs-gateway | |
| http: | |
| - match: | |
| - uri: | |
| prefix: "/ui" # Route /ui to UI service | |
| route: | |
| - destination: | |
| host: ui-service | |
| port: | |
| number: 80 | |
| - match: | |
| - uri: | |
| prefix: "/api" # Route /api to API service | |
| route: | |
| - destination: | |
| host: api-service | |
| port: | |
| number: 8080 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1beta1 | |
| kind: DestinationRule | |
| metadata: | |
| name: https-destinationrule | |
| namespace: default | |
| spec: | |
| host: my-backend.default.svc.cluster.local | |
| trafficPolicy: | |
| tls: | |
| mode: SIMPLE # Ensures TLS is used between Istio Gateway and backend service |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment