expose vault UI for wb via istio at vault-srx.wb.ru, routes to vault-vault-contour-active on 8200

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-11 12:41:56 +03:00 · 2026-08-11 12:41:56 +03:00 · 1ae2a13198
commit 1ae2a13198
parent 802f0b44fc
1 changed files with 21 additions and 0 deletions
--- a/clusters/wb/infrastructure/patches/istio-config.yaml
+++ b/clusters/wb/infrastructure/patches/istio-config.yaml
@ -71,6 +71,16 @@ spec:
                    - vmalert-srx.wb.ru
                  tls:
                    credentialName: istio-gateway-wildcard-cert
+            vault:
+              name: vault-gw
+              namespace: gateway
+              selector:
+                istio: ingressgateway
+              servers:
+                - hosts:
+                    - vault-srx.wb.ru
+                  tls:
+                    credentialName: istio-gateway-wildcard-cert
          virtualServices:
            gitea-vs:
              namespace: gitea
@ -127,3 +137,14 @@ spec:
                    prefix: /
                  service: goalert.goalert.svc.cluster.local
                  port: 8081
+            vault-vs:
+              namespace: vault
+              hosts:
+                - vault-srx.wb.ru
+              gateways:
+                - gateway/vault-gw
+              routes:
+                - path:
+                    prefix: /
+                  service: vault-vault-contour-active.vault.svc.cluster.local
+                  port: 8200