From ccbd9d767ad08455382e2cec91e0bfc4ed7ea942 Mon Sep 17 00:00:00 2001
From: Pramod <pramod.raghavendra.jayathirth@intel.com>
Date: Wed, 23 Oct 2019 16:14:19 -0700
Subject: Upgrade istio-operator

Issue-ID: AAF-1023
Signed-off-by: Pramod <pramod.raghavendra.jayathirth@intel.com>
Change-Id: I863a06ee8f504febb822d02c054860065ad888b9
---
 .../helm/servicemesh/istio-operator/values.yaml    | 39 +++++++++++++++++-----
 1 file changed, 31 insertions(+), 8 deletions(-)

(limited to 'deployments/helm/servicemesh/istio-operator/values.yaml')

diff --git a/deployments/helm/servicemesh/istio-operator/values.yaml b/deployments/helm/servicemesh/istio-operator/values.yaml
index cb937c11..f1ff6575 100644
--- a/deployments/helm/servicemesh/istio-operator/values.yaml
+++ b/deployments/helm/servicemesh/istio-operator/values.yaml
@@ -1,12 +1,26 @@
-
-
+#/*Copyright 2019 Intel Corporation, Inc
+# *
+# * Licensed under the Apache License, Version 2.0 (the "License");
+# * you may not use this file except in compliance with the License.
+# * You may obtain a copy of the License at
+# *
+# *     http://www.apache.org/licenses/LICENSE-2.0
+# *
+# * Unless required by applicable law or agreed to in writing, software
+# * distributed under the License is distributed on an "AS IS" BASIS,
+# * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# * See the License for the specific language governing permissions and
+# * limitations under the License.
+# */
+
+# Default values for istio-operator.
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
 operator:
   image:
     repository: banzaicloud/istio-operator
-    tag: 0.2.1
+    tag: 0.3.3
     pullPolicy: IfNotPresent
   resources:
     limits:
@@ -16,21 +30,30 @@ operator:
       cpu: 100m
       memory: 128Mi
 
-istioVersion: 1.2
+istioVersion: "1.3"
 
-## Prometheus Metrics
+# If you want the operator to expose the /metrics
 prometheusMetrics:
   enabled: false
-# Enable or disable the auth proxy (https://github.com/brancz/kube-rbac-proxy)
-# which protects your /metrics endpoint.
+  # Enable or disable the auth proxy (https://github.com/brancz/kube-rbac-proxy)
+  # which protects your /metrics endpoint.
   authProxy:
-    enabled: false
+    enabled: true
+    image:
+      repository: gcr.io/kubebuilder/kube-rbac-proxy
+      tag: v0.4.0
+      pullPolicy: IfNotPresent
 
 ## Role Based Access
 ## Ref: https://kubernetes.io/docs/admin/authorization/rbac/
 ##
 rbac:
   enabled: true
+  ## Pod Security Policies
+  ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
+  ##
+  psp:
+    enabled: true
 
 nameOverride: ""
 fullnameOverride: ""
-- 
cgit 1.2.3-korg