From cba6e5f8119c4e4919c186a4ff00ef143feaf9fe Mon Sep 17 00:00:00 2001
From: stefanprodan <stefan.prodan@gmail.com>
Date: Fri, 7 Jun 2019 13:32:34 +0300
Subject: [PATCH] Add Istio destination rule to RBAC

---
 artifacts/flagger/account.yaml               | 2 ++
 artifacts/workloads/canary-destination.yaml  | 7 +++++++
 artifacts/workloads/canary-hpa.yaml          | 2 +-
 artifacts/workloads/primary-destination.yaml | 7 +++++++
 artifacts/workloads/primary-hpa.yaml         | 2 +-
 charts/flagger/templates/rbac.yaml           | 2 ++
 6 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/artifacts/flagger/account.yaml b/artifacts/flagger/account.yaml
index b7cf0e28..0507289e 100644
--- a/artifacts/flagger/account.yaml
+++ b/artifacts/flagger/account.yaml
@@ -48,6 +48,8 @@ rules:
     resources:
       - virtualservices
       - virtualservices/status
+      - destinationrules
+      - destinationrules/status
     verbs: ["*"]
   - apiGroups:
       - appmesh.k8s.aws
diff --git a/artifacts/workloads/canary-destination.yaml b/artifacts/workloads/canary-destination.yaml
index ba98103c..761a21a7 100644
--- a/artifacts/workloads/canary-destination.yaml
+++ b/artifacts/workloads/canary-destination.yaml
@@ -2,5 +2,12 @@ apiVersion: networking.istio.io/v1alpha3
 kind: DestinationRule
 metadata:
   name: podinfo-canary
+  namespace: test
 spec:
   host: podinfo-canary
+  trafficPolicy:
+    loadBalancer:
+      consistentHash:
+        httpCookie:
+          name: user
+          ttl: 0s
\ No newline at end of file
diff --git a/artifacts/workloads/canary-hpa.yaml b/artifacts/workloads/canary-hpa.yaml
index f262c219..9ffce478 100644
--- a/artifacts/workloads/canary-hpa.yaml
+++ b/artifacts/workloads/canary-hpa.yaml
@@ -9,7 +9,7 @@ spec:
     kind: Deployment
     name: podinfo
   minReplicas: 2
-  maxReplicas: 3
+  maxReplicas: 2
   metrics:
   - type: Resource
     resource:
diff --git a/artifacts/workloads/primary-destination.yaml b/artifacts/workloads/primary-destination.yaml
index c3ac3cbc..d84b1962 100644
--- a/artifacts/workloads/primary-destination.yaml
+++ b/artifacts/workloads/primary-destination.yaml
@@ -2,5 +2,12 @@ apiVersion: networking.istio.io/v1alpha3
 kind: DestinationRule
 metadata:
   name: podinfo-primary
+  namespace: test
 spec:
   host: podinfo-primary
+  trafficPolicy:
+    loadBalancer:
+      consistentHash:
+        httpCookie:
+          name: user
+          ttl: 0s
diff --git a/artifacts/workloads/primary-hpa.yaml b/artifacts/workloads/primary-hpa.yaml
index 80fe84c5..0b762122 100644
--- a/artifacts/workloads/primary-hpa.yaml
+++ b/artifacts/workloads/primary-hpa.yaml
@@ -9,7 +9,7 @@ spec:
     kind: Deployment
     name: podinfo-primary
   minReplicas: 2
-  maxReplicas: 4
+  maxReplicas: 2
   metrics:
   - type: Resource
     resource:
diff --git a/charts/flagger/templates/rbac.yaml b/charts/flagger/templates/rbac.yaml
index cb5c52ef..111b1622 100644
--- a/charts/flagger/templates/rbac.yaml
+++ b/charts/flagger/templates/rbac.yaml
@@ -44,6 +44,8 @@ rules:
     resources:
       - virtualservices
       - virtualservices/status
+      - destinationrules
+      - destinationrules/status
     verbs: ["*"]
   - apiGroups:
       - appmesh.k8s.aws