mirror of
https://github.com/coder/coder.git
synced 2025-07-15 22:20:27 +00:00
docs: add istio docs (#15733)
closes https://github.com/coder/coder/issues/11821
This commit is contained in:
35
docs/admin/integrations/istio.md
Normal file
35
docs/admin/integrations/istio.md
Normal file
@ -0,0 +1,35 @@
|
|||||||
|
# Integrate Coder with Istio
|
||||||
|
|
||||||
|
Use Istio service mesh for your Coder workspace traffic to implement access
|
||||||
|
controls, encrypt service-to-service communication, and gain visibility into
|
||||||
|
your workspace network patterns. This guide walks through the required steps to
|
||||||
|
configure the Istio service mesh for use with Coder.
|
||||||
|
|
||||||
|
While Istio is platform-independent, this guide assumes you are leveraging
|
||||||
|
Kubernetes. Ensure you have a running Kubernetes cluster with both Coder and
|
||||||
|
Istio installed, and that you have administrative access to configure both
|
||||||
|
systems. Once you have access to your Coder cluster, apply the following
|
||||||
|
manifest:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
apiVersion: networking.istio.io/v1alpha3
|
||||||
|
kind: EnvoyFilter
|
||||||
|
metadata:
|
||||||
|
name: tailscale-behind-istio-ingress
|
||||||
|
namespace: istio-system
|
||||||
|
spec:
|
||||||
|
configPatches:
|
||||||
|
- applyTo: NETWORK_FILTER
|
||||||
|
match:
|
||||||
|
listener:
|
||||||
|
filterChain:
|
||||||
|
filter:
|
||||||
|
name: envoy.filters.network.http_connection_manager
|
||||||
|
patch:
|
||||||
|
operation: MERGE
|
||||||
|
value:
|
||||||
|
typed_config:
|
||||||
|
"@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
|
||||||
|
upgrade_configs:
|
||||||
|
- upgrade_type: derp
|
||||||
|
```
|
@ -696,6 +696,11 @@
|
|||||||
"description": "Integrate Coder with JFrog Artifactory",
|
"description": "Integrate Coder with JFrog Artifactory",
|
||||||
"path": "./admin/integrations/jfrog-artifactory.md"
|
"path": "./admin/integrations/jfrog-artifactory.md"
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"title": "Istio Integration",
|
||||||
|
"description": "Integrate Coder with Istio",
|
||||||
|
"path": "./admin/integrations/istio.md"
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"title": "Island Secure Browser Integration",
|
"title": "Island Secure Browser Integration",
|
||||||
"description": "Integrate Coder with Island's Secure Browser",
|
"description": "Integrate Coder with Island's Secure Browser",
|
||||||
|
Reference in New Issue
Block a user