2-service-mesh.yaml

---
apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata:
  name: fs-control-plane
  namespace: istio-system
spec:
  version: v2.0
  istio:
    global:
        # Enable mTLS
        controlPlaneSecurityEnabled: true
        mtls:
          enabled: true

        # Turn on policy checking
        disablePolicyChecks: false

        # Only allow registered services to be called.
        outboundTrafficPolicy:
          mode: REGISTRY_ONLY

        proxy:
          accessLogFile: /dev/stdout

    # Security section to use custom CA certs for signing. 
    security:
      selfSigned: true

    # Enable cert manager
    # certmanager
    #   enabled: true
    gateways:
      istio-egressgateway:
        autoscaleEnabled: false
      istio-ingressgateway:
        autoscaleEnabled: false

        # Enable automatic OCP Route creation for Istio Gateway hosts.
        # Note: This is only for testing purposes. This will ensure SNI and
        #       hosts are setup correctly. 
        ior_enabled: true

    mixer:
      policy:
        autoscaleEnabled: false
      telemetry:
        autoscaleEnabled: false
    pilot:
      autoscaleEnabled: false
      traceSampling: 100
    kiali:
      enabled: true
    grafana:
      enabled: true
    tracing:
      enabled: true
      jaeger:
        template: all-in-one

---
apiVersion: maistra.io/v1
kind: ServiceMeshMemberRoll
metadata:
  name: default
  namespace: istio-system
spec:
  members:
  - fs-mesh-dev
  - fs-mesh-qa