gateway-helm

Abstract

The Helm chart for Envoy Gateway

gateway-helm#

Version: v0.0.0-latest Type: application AppVersion: latest

Homepage: https://gateway.envoyproxy.io/

Maintainers#

Name

Email

Url

envoy-gateway-steering-committee

none given

governance

envoy-gateway-maintainers

none given

code owners

Source Code#

Usage#

Helm must be installed to use the charts. Please refer to Helm’s documentation to get started.

Install from DockerHub#

Once Helm has been set up correctly, install the chart from dockerhub:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.0.0-latest -n envoy-gateway-system --create-namespace

You can find all helm chart release in Dockerhub

Install from Source Code#

You can also install the helm chart from the source code:

To install the eg chart along with Gateway API CRDs and Envoy Gateway CRDs:

make kube-deploy TAG=latest

Skip install CRDs#

You can install the eg chart along without Gateway API CRDs and Envoy Gateway CRDs, make sure CRDs exist in Cluster first if you want to skip to install them, otherwise EG may fail to start:

helm install eg --create-namespace oci://docker.io/envoyproxy/gateway-helm \
  --version v0.0.0-latest -n envoy-gateway-system --skip-crds

To uninstall the chart:

helm uninstall eg -n envoy-gateway-system

Values#

Key

Type

Default

Description

certgen

object

{"job":{"affinity":{},"annotations":{},"args":[],"nodeSelector":{},"pod":{"annotations":{},"labels":{}},"resources":{},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}},"tolerations":[],"ttlSecondsAfterFinished":30},"rbac":{"annotations":{},"labels":{}}}

Certgen is used to generate the certificates required by EnvoyGateway. If you want to construct a custom certificate, you can generate a custom certificate through Cert-Manager before installing EnvoyGateway. Certgen will not overwrite the custom certificate. Please do not manually modify values.yaml to disable certgen, it may cause EnvoyGateway OIDC,OAuth2,etc. to not work as expected.

config.envoyGateway

object

{"extensionApis":{},"gateway":{"controllerName":"gateway.envoyproxy.io/gatewayclass-controller"},"logging":{"level":{"default":"info"}},"provider":{"type":"Kubernetes"}}

EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options.

createNamespace

bool

false

deployment.annotations

object

{}

deployment.envoyGateway.image.repository

string

""

deployment.envoyGateway.image.tag

string

""

deployment.envoyGateway.imagePullPolicy

string

""

deployment.envoyGateway.imagePullSecrets

list

[]

deployment.envoyGateway.resources.limits.memory

string

"1024Mi"

deployment.envoyGateway.resources.requests.cpu

string

"100m"

deployment.envoyGateway.resources.requests.memory

string

"256Mi"

deployment.envoyGateway.securityContext.allowPrivilegeEscalation

bool

false

deployment.envoyGateway.securityContext.capabilities.drop[0]

string

"ALL"

deployment.envoyGateway.securityContext.privileged

bool

false

deployment.envoyGateway.securityContext.runAsGroup

int

65532

deployment.envoyGateway.securityContext.runAsNonRoot

bool

true

deployment.envoyGateway.securityContext.runAsUser

int

65532

deployment.envoyGateway.securityContext.seccompProfile.type

string

"RuntimeDefault"

deployment.pod.affinity

object

{}

deployment.pod.annotations.“prometheus.io/port”

string

"19001"

deployment.pod.annotations.“prometheus.io/scrape”

string

"true"

deployment.pod.labels

object

{}

deployment.pod.nodeSelector

object

{}

deployment.pod.tolerations

list

[]

deployment.pod.topologySpreadConstraints

list

[]

deployment.ports[0].name

string

"grpc"

deployment.ports[0].port

int

18000

deployment.ports[0].targetPort

int

18000

deployment.ports[1].name

string

"ratelimit"

deployment.ports[1].port

int

18001

deployment.ports[1].targetPort

int

18001

deployment.ports[2].name

string

"wasm"

deployment.ports[2].port

int

18002

deployment.ports[2].targetPort

int

18002

deployment.ports[3].name

string

"metrics"

deployment.ports[3].port

int

19001

deployment.ports[3].targetPort

int

19001

deployment.priorityClassName

string

nil

deployment.replicas

int

1

global.imagePullSecrets

list

[]

Global override for image pull secrets

global.imageRegistry

string

""

Global override for image registry

global.images.envoyGateway.image

string

nil

global.images.envoyGateway.pullPolicy

string

nil

global.images.envoyGateway.pullSecrets

list

[]

global.images.ratelimit.image

string

"docker.io/envoyproxy/ratelimit:master"

global.images.ratelimit.pullPolicy

string

"IfNotPresent"

global.images.ratelimit.pullSecrets

list

[]

hpa.behavior

object

{}

hpa.enabled

bool

false

hpa.maxReplicas

int

1

hpa.metrics

list

[]

hpa.minReplicas

int

1

kubernetesClusterDomain

string

"cluster.local"

podDisruptionBudget.minAvailable

int

0

service.annotations

object

{}

service.trafficDistribution

string

""

service.type

string

"ClusterIP"

Service type. Can be set to LoadBalancer with specific IP, e.g.: type: LoadBalancer loadBalancerIP: 10.236.90.20

topologyInjector.annotations

object

{}

topologyInjector.enabled

bool

true

Contents