Switch Vault Ingress from GCE to Istio in pre-gitlab-gke (!2646) · Merge requests · GitLab.com / GitLab Infrastructure Team / Kubernetes Workloads / GitLab Helmfiles · GitLab

Pierre Guinoiseau requested to merge pguinoiseau/vault-istio-ingress into master Jul 26, 2023

What

Switch Vault Ingress from GCE to Istio in pre-gitlab-gke.

The IAP is handled by oauth2-proxy, see https://gitlab.com/gitlab-com/gl-infra/k8s-mgmt/tenants/reliability/-/blob/main/overlays/gke/gitlab-pre/us-east1/pre-gitlab-gke/istio/istio-oauth2-proxy.yaml

Terraform changes: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/6366

Extracted from !2444

Why

Part of https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/23980

Edited Jul 26, 2023 by Pierre Guinoiseau