github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/galley/templates/deployment.yaml (about)

     1  apiVersion: extensions/v1beta1
     2  kind: Deployment
     3  metadata:
     4    name: istio-galley
     5    namespace: {{ .Release.Namespace }}
     6    labels:
     7      app: {{ template "galley.name" . }}
     8      chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
     9      release: {{ .Release.Name }}
    10      heritage: {{ .Release.Service }}
    11      istio: galley
    12  spec:
    13    replicas: {{ .Values.replicaCount }}
    14    strategy:
    15      rollingUpdate:
    16        maxSurge: 1
    17        maxUnavailable: 0
    18    template:
    19      metadata:
    20        labels:
    21          istio: galley
    22        annotations:
    23          sidecar.istio.io/inject: "false"
    24          scheduler.alpha.kubernetes.io/critical-pod: ""
    25      spec:
    26        serviceAccountName: istio-galley-service-account
    27  {{- if .Values.global.priorityClassName }}
    28        priorityClassName: "{{ .Values.global.priorityClassName }}"
    29  {{- end }}
    30        containers:
    31          - name: validator
    32            image: "{{ .Values.global.hub }}/{{ .Values.image }}:{{ .Values.global.tag }}"
    33            imagePullPolicy: {{ .Values.global.imagePullPolicy }}
    34            ports:
    35            - containerPort: 443
    36            - containerPort: 9093
    37            command:
    38            - /usr/local/bin/galley
    39            - validator
    40            - --deployment-namespace={{ .Release.Namespace }}
    41            - --caCertFile=/etc/istio/certs/root-cert.pem
    42            - --tlsCertFile=/etc/istio/certs/cert-chain.pem
    43            - --tlsKeyFile=/etc/istio/certs/key.pem
    44            - --healthCheckInterval=1s
    45            - --healthCheckFile=/health
    46            - --webhook-config-file
    47            - /etc/istio/config/validatingwebhookconfiguration.yaml
    48            volumeMounts:
    49            - name: certs
    50              mountPath: /etc/istio/certs
    51              readOnly: true
    52            - name: config
    53              mountPath: /etc/istio/config
    54              readOnly: true
    55            livenessProbe:
    56              exec:
    57                command:
    58                  - /usr/local/bin/galley
    59                  - probe
    60                  - --probe-path=/health
    61                  - --interval=10s
    62              initialDelaySeconds: 5
    63              periodSeconds: 5
    64            readinessProbe:
    65              exec:
    66                command:
    67                  - /usr/local/bin/galley
    68                  - probe
    69                  - --probe-path=/health
    70                  - --interval=10s
    71              initialDelaySeconds: 5
    72              periodSeconds: 5
    73            resources:
    74  {{- if .Values.resources }}
    75  {{ toYaml .Values.resources | indent 12 }}
    76  {{- else }}
    77  {{ toYaml .Values.global.defaultResources | indent 12 }}
    78  {{- end }}
    79        volumes:
    80        - name: certs
    81          secret:
    82            secretName: istio.istio-galley-service-account
    83        - name: config
    84          configMap:
    85            name: istio-galley-configuration
    86        affinity:
    87        {{- include "nodeaffinity" . | indent 6 }}