Skip to content

🔧 infrastructure: parameterize envoyExtAuthzHttp extensionProviders via Helm values#828

Draft
Tobias-Pe wants to merge 6 commits into
mainfrom
tpeslalz/envoy-ext-authz-helm-values
Draft

🔧 infrastructure: parameterize envoyExtAuthzHttp extensionProviders via Helm values#828
Tobias-Pe wants to merge 6 commits into
mainfrom
tpeslalz/envoy-ext-authz-helm-values

Conversation

@Tobias-Pe

@Tobias-Pe Tobias-Pe commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Parameterize Istio extensionProviders in base-cloud chart via values-cloud.yaml to decouple commercial auth configuration from open-source release manifests.

Why

Parameterize Istio extensionProviders via Helm values to achieve clean OSS customization separation and eliminate fragile post-install ConfigMap patching.

The code changes include:

  • Support -f / --values CLI flags in deploy.sh
  • Add additionalExtensionProviders Go template snippet to ConfigMap/istio in update-istio.sh and istio-generated.yaml
  • Set default istio.additionalExtensionProviders: [] in values-cloud.yaml

TESTED=UNITTESTS (bazel test //src/app_charts/base/... passed)
RELNOTES=NONE

…ia Helm values

Parameterize Istio extensionProviders in base-cloud chart via values-cloud.yaml to decouple commercial auth configuration from open-source release manifests.

#### Why

Parameterize Istio extensionProviders via Helm values to achieve clean OSS/commercial separation and eliminate fragile post-install ConfigMap patching.

#### The code changes include:

- Support -f / --values CLI flags in deploy.sh
- Add additionalExtensionProviders Go template snippet to ConfigMap/istio in update-istio.sh and istio-generated.yaml
- Set default istio.additionalExtensionProviders: [] in values-cloud.yaml

TESTED=UNITTESTS (bazel test //src/app_charts/base/... passed)
RELNOTES=NONE


Created using jj-spr
@Tobias-Pe

Copy link
Copy Markdown
Contributor Author

This PR is a standalone change.

@Tobias-Pe Tobias-Pe self-assigned this Jul 22, 2026
@Tobias-Pe
Tobias-Pe requested a review from ensonic July 22, 2026 15:12
fi
if ! command -v "${YQ}" &>/dev/null && [[ -x "/usr/local/google/home/tpeslalz/go/bin/yq" ]]; then
YQ="/usr/local/google/home/tpeslalz/go/bin/yq"
fi

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shall we use $HOME?

Comment thread deploy.sh
--set "use_tv_verbose=${CRC_USE_TV_VERBOSE}"
)

shift 6

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd move the "shift 6" up to line 258.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants