github.com/cilium/cilium@v1.16.2/test/k8s/manifests/demo-customcalls.yaml (about)

     1  kind: ServiceAccount
     2  apiVersion: v1
     3  metadata:
     4    name: app1-account
     5  ---
     6  kind: ServiceAccount
     7  apiVersion: v1
     8  metadata:
     9    name: app2-account
    10  ---
    11  apiVersion: v1
    12  kind: Service
    13  metadata:
    14    name: app1-service
    15  spec:
    16    ports:
    17    - name: http
    18      port: 80
    19      protocol: TCP
    20    - name: tftp
    21      port: 69
    22      protocol: UDP
    23    selector:
    24      id: app1
    25  ---
    26  apiVersion: apps/v1
    27  kind: Deployment
    28  metadata:
    29    name: app1
    30  spec:
    31    selector:
    32      matchLabels:
    33        id: app1
    34        zgroup: testapp
    35    replicas: 1
    36    template:
    37      metadata:
    38        labels:
    39          id: app1
    40          zgroup: testapp
    41      spec:
    42        serviceAccountName: app1-account
    43        terminationGracePeriodSeconds: 0
    44        containers:
    45        - name: web
    46          image: docker.io/cilium/demo-httpd:1.0
    47          imagePullPolicy: IfNotPresent
    48          ports:
    49          - containerPort: 80
    50          readinessProbe:
    51            httpGet:
    52              path: /
    53              port: 80
    54        - name: udp
    55          image: quay.io/cilium/echoserver-udp:v2020.01.30
    56          imagePullPolicy: IfNotPresent
    57          ports:
    58          - containerPort: 69
    59            protocol: UDP
    60        nodeSelector:
    61          "cilium.io/ci-node": k8s1
    62  ---
    63  apiVersion: apps/v1
    64  kind: Deployment
    65  metadata:
    66    name: app2
    67  spec:
    68    selector:
    69      matchLabels:
    70        id: app2
    71        zgroup: testapp
    72        appSecond: "true"
    73    replicas: 1
    74    template:
    75      metadata:
    76        labels:
    77          id: app2
    78          zgroup: testapp
    79          appSecond: "true"
    80      spec:
    81        serviceAccountName: app2-account
    82        terminationGracePeriodSeconds: 0
    83        containers:
    84        - name: app-frontend
    85          image: quay.io/cilium/demo-client:1.0
    86          imagePullPolicy: IfNotPresent
    87          command: [ "sleep" ]
    88          args:
    89            - "1000h"
    90        # We want the two pods to be on separate nodes, the egress custom tail
    91        # call hook for socket-based load-balancing is not supported yet.
    92        nodeSelector:
    93          "cilium.io/ci-node": k8s2
    94  ---
    95  apiVersion: v1
    96  kind: Pod
    97  metadata:
    98    name: bytecounter-compiler
    99  spec:
   100    containers:
   101    - name: cilium-builder
   102      image: quay.io/cilium/cilium-builder:40a6366e1459a87c9bc45c6798c241cab66612c1@sha256:41f50fd628282eec0d506345bed3b42f01050f1e99fd3cfb500575ce358c3549
   103      workingDir: /cilium
   104      command: ["/bin/sh", "-c"]
   105      args:
   106        - "git config --global --add safe.directory /cilium; sleep infinity"
   107      securityContext:
   108        privileged: true
   109      volumeMounts:
   110        - mountPath: /sys/fs/bpf
   111          name: bpf-maps
   112        - mountPath: /cilium
   113          name: cilium-src
   114    volumes:
   115    - hostPath:
   116        path: /sys/fs/bpf
   117        type: DirectoryOrCreate
   118      name: bpf-maps
   119    - hostPath:
   120        path: /home/vagrant/go/src/github.com/cilium/cilium
   121        type: Directory
   122      name: cilium-src
   123    # We need the following toleration overwrite because the pod is used with
   124    # Cilium uninstalled, so the network isn't ready.
   125    tolerations:
   126    - key: "node.kubernetes.io/not-ready"
   127      operator: "Exists"
   128    - key: "node.kubernetes.io/unreachable"
   129      operator: "Exists"
   130    hostNetwork: true
   131    nodeSelector:
   132      "cilium.io/ci-node": k8s2