Add support for cert-manager

[nonrtric.git] / service-exposure / templates / EnvoyFilter-template.txt

diff --git a/service-exposure/templates/EnvoyFilter-template.txt b/service-exposure/templates/EnvoyFilter-template.txt
index f023fa6..7e91f5f 100644 (file)
--- a/service-exposure/templates/EnvoyFilter-template.txt
+++ b/service-exposure/templates/EnvoyFilter-template.txt
@@ -1,31 +1,12 @@
-#
-# ============LICENSE_START=======================================================
-#  Copyright (C) 2022 Nordix Foundation.
-# ================================================================================
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# SPDX-License-Identifier: Apache-2.0
-# ============LICENSE_END=========================================================
-#
 apiVersion: networking.istio.io/v1alpha3
 kind: EnvoyFilter
 metadata:
   name: {{.Name}}-outbound-filter
-  namespace: {{.Namespace}}
+  namespace: {{.Namespace}} 
 spec:
   workloadSelector:
     labels:
-      app.kubernetes.io/name: {{.Name}}
+      app.kubernetes.io/name: {{.Name}} 
   configPatches:
     # The first patch adds the lua filter to the listener/http connection manager
   - applyTo: HTTP_FILTER
@@ -59,6 +40,9 @@ spec:
                  ["realm"] = "{{.Realm}}",
                  ["client"] = "{{.Client}}",
                  ["authenticator"] = "{{.Authenticator}}",
+                 ["caCrt"] = "{{.CaCrt}}",
+                 ["tlsCrt"] = "{{.TlsCrt}}",
+                 ["tlsKey"] = "{{.TlsKey}}",
                  ["ns"] = "{{.Namespace}}"
                 },
                "jwt call",