add support for istio-proxy

Author: soerenschneider

apps/hermes/components/istio-proxy/kustomization.yaml

@@ -0,0 +1,41 @@
+---
+apiVersion: "kustomize.config.k8s.io/v1alpha1"
+kind: "Component"
+patches:
+  - target:
+      kind: "Namespace"
+    patch: |-
+      - op: add
+        path: "/metadata/labels/istio-injection"
+        value: "enabled"
+  - target:
+      kind: "NetworkPolicy"
+    patch: |-
+      - op: add
+        path: "/spec/egress/-"
+        value:
+          to:
+            - namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: "kube-system"
+              podSelector:
+                matchLabels:
+                  k8s-app: "kube-dns"
+          ports:
+            - port: 53
+              protocol: "UDP"
+            - port: 53
+              protocol: "TCP"
+      - op: add
+        path: "/spec/egress/-"
+        value:
+          to:
+            - namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: "istio-system"
+              podSelector: {}
+          ports:
+            - port: 15012
+              protocol: "TCP"
+            - port: 15014
+              protocol: "TCP"