使用Istio运算符配置istio入口网关TLS

Question

如何配置由istio运营商管理的入口网关TLS (使用kind:IstioOperator)。我看不到包含的普通网关规格。

文档中的示例：

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  hub: gcr.io/istio-testing
  tag: latest
  revision: 1-8-0
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
  components:
    egressGateways:
    - name: istio-egressgateway
      enabled: true

https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#GatewaySpec

Answer 1

要获得网关部署的tls设置，您需要创建自己的网关对象(不是入口网关，只是网关)，您可能需要这样：https://istio.io/latest/docs/tasks/traffic-management/ingress/secure-ingress/#configure-a-tls-ingress-gateway-for-a-single-host

要从operator操作入口网关，可以使用入口网关下的k8s字段

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  hub: gcr.io/istio-testing
  tag: latest
  revision: 1-8-0
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
  components:
    egressGateways:
    - name: istio-egressgateway
      enabled: true
    ingressGateways:
    - name: istio-ingressgateway
      enabled: true
      namespace: istio-system
      k8s:
        <field: value>

https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#GatewaySpec

https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#KubernetesResourcesSpec