cluster

commit 939b8f3b7c66928673cd85d82b40f89537adb0d2
parent f9acc177135a94631e90a37dafa0e15ed2959bb3
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 19 Feb 2025 16:17:28 +0100

Use tcp keepalive in the gateway

Diffstat:
M
apps/base/envoy-gateway/release.yaml
 | 
12
++++++++----

1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -324,10 +324,10 @@ metadata:
     name: enable-proxy-protocol-policy
     namespace: envoy-gateway
 spec:
-    targetRef:
-        group: gateway.networking.k8s.io
-        kind: Gateway
-        name: envoy-gateway
+    targetRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: envoy-gateway
     # WARNING: False as cilium routes the gateway locally if used internally with the public domain. HOWEVER then proxy proto cant be used...
     enableProxyProtocol: false
     # Alternative to enableProxyProtocol: true
@@ -335,6 +335,10 @@ spec:
         xForwardedFor:
             # Check if this is correct or if 1 is correct
             numTrustedHops: 2
+    tcpKeepalive:
+        idleTime: 1h
+        interval: 75s
+        probes: 9
 ---
 # Monitors the above gateway using a servicemonitor
 # First we do a service matching on the labels "gateway.envoyproxy.io/owning-gateway-name: envoy-gateway" and "gateway.envoyproxy.io/owning-gateway-namespace: envoy-gateway"