Add multizone podAntiAffinity for Istio ingressGateways (#1127)

* Add multizone podAntiAffinity for Istio ingressGateways * Add Istiod to zones
kyma-project · Nov 19, 2024 · 5dd7b3b · 5dd7b3b
1 parent b582de0
commit 5dd7b3b
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/internal/istiooperator/istio-operator.yaml b/internal/istiooperator/istio-operator.yaml
@@ -60,6 +60,15 @@ spec:
                     - istio-ingressgateway
                 topologyKey: kubernetes.io/hostname
               weight: 100
+            - podAffinityTerm:
+                labelSelector:
+                  matchExpressions:
+                    - key: app
+                      operator: In
+                      values:
+                      - istio-ingressgateway
+                topologyKey: topology.kubernetes.io/zone
+              weight: 100
         hpaSpec:
           maxReplicas: 10
           metrics:
@@ -105,6 +114,15 @@ spec:
                     - istiod
                 topologyKey: kubernetes.io/hostname
               weight: 100
+            - podAffinityTerm:
+                labelSelector:
+                  matchExpressions:
+                    - key: app
+                      operator: In
+                      values:
+                        - istiod
+                topologyKey: topology.kubernetes.io/zone
+              weight: 100
         env:
         - name: PILOT_HTTP10
           value: "1"