teg-envoy-gateway-helm

The Helm chart for Tetrate Enterprise Gateway for Envoy

Homepage: https://tetrate.io/

Requirements

Repository	Name	Version
oci://docker.io/envoyproxy	gateway-helm	v0.0.0-latest

Values

Key	Type	Default	Description
certgen	object	{"job":{"annotations":{},"resources":{},"ttlSecondsAfterFinished":0},"rbac":{"annotations":{},"labels":{}}}	TEG Certificate Generation Job configuration used to generate TLS Certificates for Redis
config.envoyProxy	object	{"logging":{"level":{"default":"warn"}}}	Configuration for every Envoy Proxy replica in each Gateway which uses the default 'teg' GatewayClass (which references the EnvoyProxy resource made from these values). This is merged with defaults to product an EnvoyProxy object (https://gateway.envoyproxy.io/latest/api/extension_types/#envoyproxyspec). Values specified here take precedence
config.envoyProxy.logging.level.default	string	"warn"	All Envoy log areas to log at level warn Individual areas can be altered with eg oauth2: debug
corazaWaf	object	-	Coraza WAF Configuration for Envoy Proxy
corazaWaf.directives	list	["Include @recommended-conf","SecRuleEngine On","SecDebugLogLevel 2","Include @crs-setup-conf","Include @owasp_crs/*.conf"]	Directives to configure Coraza WAF You can find more details about the directives here: https://github.com/corazawaf/coraza-proxy-wasm/tree/main/wasmplugin/rules
corazaWaf.enabled	bool	false	Switch to enable Coraza WAF
corazaWaf.image	object	-	Coraza WAF image configuration
corazaWaf.image.pullPolicy	string	"IfNotPresent"	Coraza WAF image pull policy
corazaWaf.image.repository	string	"ghcr.io/tetrateio/coraza-proxy-wasm"	Coraza WAF image repository
corazaWaf.image.tag	string	"0.4.0-busybox"	Coraza WAF image tag
deployment	object	-	Tetrate Enterprise Gateway for Envoy control plane components configuration options
deployment.tegEnvoyGateway	object	-	Tetrate Enterprise Gateway for Envoy deployment configuration
deployment.tegEnvoyGateway.image	object	-	Tetrate Enterprise Gateway for Envoy image configuration
deployment.tegEnvoyGateway.image.repository	string	"oci://docker.io/tetrate/teg-envoy-gateway"	Tetrate Enterprise Gateway for Envoy image repository
deployment.tegEnvoyGateway.image.tag	string	"6c340dc"	Tetrate Enterprise Gateway for Envoy image tag
deployment.tegEnvoyGateway.imagePullPolicy	string	"IfNotPresent"	Tetrate Enterprise Gateway for Envoy image pull policy
deployment.tegEnvoyGateway.replicas	int	1	Tetrate Enterprise Gateway for Envoy replicas in cluster
deployment.tegEnvoyGateway.resources	object	{}	Tetrate Enterprise Gateway for Envoy deployment resources More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
gateway-helm	object	{"config":{"envoyGateway":{"extensionApis":{"enableEnvoyPatchPolicy":true},"provider":{"kubernetes":{"overwrite_control_plane_certs":false,"rateLimitDeployment":{"container":{"env":[{"name":"LOG_FORMAT","value":"json"},{"name":"REDIS_HEALTH_CHECK_ACTIVE_CONNECTION","value":"false"},{"name":"REDIS_TYPE","value":"SINGLE"},{"name":"REDIS_TLS_CACERT","value":"/redis-certs/ca.crt"}]}}}},"rateLimit":{"backend":{"redis":{"tls":{"certificateRef":{"name":"redis-tls"}},"url":"teg-redis.envoy-gateway-system.svc.cluster.local:6379"},"type":"Redis"}}}}}	Envoy Gateway installation configuration. Detailed configuration documentation can be found here: https://github.com/envoyproxy/gateway/tree/main/charts/gateway-helm Tetrate Enterprise Gateway for Envoy configures underlying Envoy gateway installation configuration. In case there are any conflicts, between TEG configuration and EG configuration provided here, EG configuration is given precedence.
gateway-helm.config.envoyGateway.rateLimit.backend.redis.url	string	"teg-redis.envoy-gateway-system.svc.cluster.local:6379"	If you change the namespace or name of the Redis Service, change this to match
redis	object	-	TEG Redis deployment configuration
redis.image	object	-	Redis image configuration
redis.image.pullPolicy	string	"IfNotPresent"	Redis image pull policy in cluster
redis.image.repository	string	"redis"	Redis image repository
redis.image.tag	string	"7.0.11"	Redis image tag
redis.password	string	""	default user auth password for redis deployment
redis.replicas	int	1	Redis replicas to deploy
redis.resources	object	{}	Redis deployment resources More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
redis.service	object	-	Redis service configuration
redis.service.port	int	6379	Redis service exposed port
redis.service.type	string	"ClusterIP"	Redis service type