github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/ingress/templates/deployment.yaml (about) 1 apiVersion: extensions/v1beta1 2 kind: Deployment 3 metadata: 4 name: istio-ingress 5 namespace: {{ .Release.Namespace }} 6 labels: 7 app: {{ template "istio.name" . }} 8 chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 release: {{ .Release.Name }} 10 heritage: {{ .Release.Service }} 11 istio: ingress 12 spec: 13 replicas: {{ .Values.replicaCount }} 14 template: 15 metadata: 16 labels: 17 istio: ingress 18 annotations: 19 sidecar.istio.io/inject: "false" 20 scheduler.alpha.kubernetes.io/critical-pod: "" 21 spec: 22 serviceAccountName: istio-ingress-service-account 23 {{- if .Values.global.priorityClassName }} 24 priorityClassName: "{{ .Values.global.priorityClassName }}" 25 {{- end }} 26 containers: 27 - name: {{ template "istio.name" . }} 28 image: "{{ .Values.global.hub }}/proxyv2:{{ .Values.global.tag }}" 29 imagePullPolicy: {{ .Values.global.imagePullPolicy }} 30 ports: 31 - containerPort: 80 32 - containerPort: 443 33 args: 34 - proxy 35 - ingress 36 - -v 37 - "2" 38 - --discoveryRefreshDelay 39 - '1s' #discoveryRefreshDelay 40 - --drainDuration 41 - '45s' #drainDuration 42 - --parentShutdownDuration 43 - '1m0s' #parentShutdownDuration 44 - --connectTimeout 45 - '10s' #connectTimeout 46 - --serviceCluster 47 - istio-ingress 48 - --zipkinAddress 49 - zipkin:9411 50 {{- if .Values.global.proxy.envoyStatsd.enabled }} 51 - --statsdUdpAddress 52 - {{ .Values.global.proxy.envoyStatsd.host }}:{{ .Values.global.proxy.envoyStatsd.port }} 53 {{- end }} 54 - --proxyAdminPort 55 - "15000" 56 {{- if .Values.global.controlPlaneSecurityEnabled }} 57 - --controlPlaneAuthPolicy 58 - MUTUAL_TLS 59 - --discoveryAddress 60 - istio-pilot:15005 61 {{- else }} 62 - --controlPlaneAuthPolicy 63 - NONE 64 - --discoveryAddress 65 - istio-pilot:8080 66 {{- end }} 67 resources: 68 {{- if .Values.resources }} 69 {{ toYaml .Values.resources | indent 12 }} 70 {{- else }} 71 {{ toYaml .Values.global.defaultResources | indent 12 }} 72 {{- end }} 73 env: 74 - name: POD_NAME 75 valueFrom: 76 fieldRef: 77 apiVersion: v1 78 fieldPath: metadata.name 79 - name: POD_NAMESPACE 80 valueFrom: 81 fieldRef: 82 apiVersion: v1 83 fieldPath: metadata.namespace 84 - name: INSTANCE_IP 85 valueFrom: 86 fieldRef: 87 apiVersion: v1 88 fieldPath: status.podIP 89 volumeMounts: 90 - name: istio-certs 91 mountPath: /etc/certs 92 readOnly: true 93 - name: ingress-certs 94 mountPath: /etc/istio/ingress-certs 95 readOnly: true 96 volumes: 97 - name: istio-certs 98 secret: 99 secretName: istio.istio-ingress-service-account 100 optional: true 101 - name: ingress-certs 102 secret: 103 secretName: istio-ingress-certs 104 optional: true 105 affinity: 106 {{- include "nodeaffinity" . | indent 6 }}