blob: 7f457a5afad7c2157479d9aff6bf486023e58afc [file] [log] [blame]
# This ServiceEntry exposes the hosts needed for Python `pip`.
# After applying this file, Istio-enabled pods will be able to execute
# `pip search istio`.
# HTTP and TLS, the host must be specified
# See https://istio.io/docs/tasks/traffic-management/egress/
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: python-https
spec:
hosts:
- pypi.python.org
ports:
- number: 443
name: https
protocol: HTTPS
---
# pypi.python.org may 301 redirect to pypi.org, so we need this too.
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: pypi-https
spec:
hosts:
- pypi.org
ports:
- number: 443
name: https
protocol: HTTPS
---
# pip install may fetch files from files.pythonhosted.org
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: pythonhosted-https
spec:
hosts:
- files.pythonhosted.org
ports:
- number: 443
name: https
protocol: HTTPS