github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/galley/templates/deployment.yaml (about) 1 apiVersion: extensions/v1beta1 2 kind: Deployment 3 metadata: 4 name: istio-galley 5 namespace: {{ .Release.Namespace }} 6 labels: 7 app: {{ template "galley.name" . }} 8 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 release: {{ .Release.Name }} 10 heritage: {{ .Release.Service }} 11 istio: galley 12 spec: 13 replicas: {{ .Values.replicaCount }} 14 strategy: 15 rollingUpdate: 16 maxSurge: 1 17 maxUnavailable: 0 18 template: 19 metadata: 20 labels: 21 istio: galley 22 annotations: 23 sidecar.istio.io/inject: "false" 24 scheduler.alpha.kubernetes.io/critical-pod: "" 25 spec: 26 serviceAccountName: istio-galley-service-account 27 {{- if .Values.global.priorityClassName }} 28 priorityClassName: "{{ .Values.global.priorityClassName }}" 29 {{- end }} 30 containers: 31 - name: validator 32 image: "{{ .Values.global.hub }}/{{ .Values.image }}:{{ .Values.global.tag }}" 33 imagePullPolicy: {{ .Values.global.imagePullPolicy }} 34 ports: 35 - containerPort: 443 36 - containerPort: 9093 37 command: 38 - /usr/local/bin/galley 39 - validator 40 - --deployment-namespace={{ .Release.Namespace }} 41 - --caCertFile=/etc/istio/certs/root-cert.pem 42 - --tlsCertFile=/etc/istio/certs/cert-chain.pem 43 - --tlsKeyFile=/etc/istio/certs/key.pem 44 - --healthCheckInterval=1s 45 - --healthCheckFile=/health 46 - --webhook-config-file 47 - /etc/istio/config/validatingwebhookconfiguration.yaml 48 volumeMounts: 49 - name: certs 50 mountPath: /etc/istio/certs 51 readOnly: true 52 - name: config 53 mountPath: /etc/istio/config 54 readOnly: true 55 livenessProbe: 56 exec: 57 command: 58 - /usr/local/bin/galley 59 - probe 60 - --probe-path=/health 61 - --interval=10s 62 initialDelaySeconds: 5 63 periodSeconds: 5 64 readinessProbe: 65 exec: 66 command: 67 - /usr/local/bin/galley 68 - probe 69 - --probe-path=/health 70 - --interval=10s 71 initialDelaySeconds: 5 72 periodSeconds: 5 73 resources: 74 {{- if .Values.resources }} 75 {{ toYaml .Values.resources | indent 12 }} 76 {{- else }} 77 {{ toYaml .Values.global.defaultResources | indent 12 }} 78 {{- end }} 79 volumes: 80 - name: certs 81 secret: 82 secretName: istio.istio-galley-service-account 83 - name: config 84 configMap: 85 name: istio-galley-configuration 86 affinity: 87 {{- include "nodeaffinity" . | indent 6 }}