values.test-lb.yaml

fullnameOverride: "roldyx"
gcpProject: kubertonic-st
providerConfigRef: crossplane-loadbalancer-creds

GlobalAddress:
  external-address:
    managementPolicies:
      - Create
      - Update
      - Observe
    description: Just an example
    addressType: EXTERNAL

ManagedSSLCertificate:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    domains:
    - test.example.com.
    - xxx.example.com.

HealthCheck:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    checkIntervalSec: 1
    tcpHealthCheck:
      port: 80
    timeoutSec: 1
    healthyThreshold: 2
    logConfig:
      enable: false

BackendService:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    healthChecksSelector: my-external-name
    loadBalancingScheme: "EXTERNAL"
    backend:
      - group: "https://www.googleapis.com/compute/beta/projects/kubertonic-st/zones/europe-west1-b/networkEndpointGroups/k8s1-3d2bc877-istio-system-standalone-neg-fhp-80-43bd33ab"
        balancingMode: "RATE"
        maxRate: 100000000
    securityPolicy: my-external-name
    logConfig:
      - enable: true
        sampleRate: 1

URLMap:
  my-external-name:
    deletionPolicy: Orphan
    defaultService: my-external-name
  my-external-name-redirect:
    managementPolicies:
      - Create
      - Update
      - Observe
    defaultUrlRedirect:
      httpsRedirect: true
      stripQuery: false
      redirectResponseCode: MOVED_PERMANENTLY_DEFAULT

TargetHTTPProxy:
  my-external-name-80:
    managementPolicies:
      - Create
      - Update
      - Observe
    urlMapSelector: my-external-name-redirect

TargetHTTPSProxy:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    quicOverride: "ENABLE"
    sslCertificates: my-external-name
    urlMapSelector: my-external-name
    certificateMap: my-external-name
    sslPolicy: min-tls

GlobalForwardingRule:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    ipAddressSelector: external-address
    ipProtocol: TCP
    loadBalancingScheme: EXTERNAL
    portRange: "443"
    target: "projects/kubertonic-st/global/targetHttpsProxies/my-external-name"

SSLPolicy:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    mode: COMPATIBLE
    minTlsVersion: TLS_1_2
    description: "Just an example"

SecurityPolicy:
  my-external-name:
    managementPolicies:
      - Create
      - Update
      - Observe
    rule:
      - description: "Ban IPs with more than 1000 reqs/min"
        action: "rate_based_ban"
        preview: false
        priority: 10
        match:
          - versionedExpr: "SRC_IPS_V1"
            config:
              - srcIpRanges:
                  - "*"
        rateLimitOptions:
          - banDurationSec: 1800
            conformAction: "allow"
            enforceOnKey: "IP"
            exceedAction: "deny(429)"
            rateLimitThreshold:
              - count: 1000
                intervalSec: 60
      - description: "Default rule"
        action: "allow"
        preview: false
        priority: 2147483647
        match:
          - versionedExpr: "SRC_IPS_V1"
            config:
              - srcIpRanges:
                  - "*"