github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/ingress/templates/deployment.yaml (about)

     1  apiVersion: extensions/v1beta1
     2  kind: Deployment
     3  metadata:
     4    name: istio-ingress
     5    namespace: {{ .Release.Namespace }}
     6    labels:
     7      app: {{ template "istio.name" . }}
     8      chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
     9      release: {{ .Release.Name }}
    10      heritage: {{ .Release.Service }}
    11      istio: ingress
    12  spec:
    13    replicas: {{ .Values.replicaCount }}
    14    template:
    15      metadata:
    16        labels:
    17          istio: ingress
    18        annotations:
    19          sidecar.istio.io/inject: "false"
    20          scheduler.alpha.kubernetes.io/critical-pod: ""
    21      spec:
    22        serviceAccountName: istio-ingress-service-account
    23  {{- if .Values.global.priorityClassName }}
    24        priorityClassName: "{{ .Values.global.priorityClassName }}"
    25  {{- end }}
    26        containers:
    27          - name: {{ template "istio.name" . }}
    28            image: "{{ .Values.global.hub }}/proxyv2:{{ .Values.global.tag }}"
    29            imagePullPolicy: {{ .Values.global.imagePullPolicy }}
    30            ports:
    31              - containerPort: 80
    32              - containerPort: 443
    33            args:
    34            - proxy
    35            - ingress
    36            - -v
    37            - "2"
    38            - --discoveryRefreshDelay
    39            - '1s' #discoveryRefreshDelay
    40            - --drainDuration
    41            - '45s' #drainDuration
    42            - --parentShutdownDuration
    43            - '1m0s' #parentShutdownDuration
    44            - --connectTimeout
    45            - '10s' #connectTimeout
    46            - --serviceCluster
    47            - istio-ingress
    48            - --zipkinAddress
    49            - zipkin:9411
    50          {{- if .Values.global.proxy.envoyStatsd.enabled }}
    51            - --statsdUdpAddress
    52            - {{ .Values.global.proxy.envoyStatsd.host }}:{{ .Values.global.proxy.envoyStatsd.port }}
    53          {{- end }}
    54            - --proxyAdminPort
    55            - "15000"
    56          {{- if .Values.global.controlPlaneSecurityEnabled }}
    57            - --controlPlaneAuthPolicy
    58            - MUTUAL_TLS
    59            - --discoveryAddress
    60            - istio-pilot:15005
    61          {{- else }}
    62            - --controlPlaneAuthPolicy
    63            - NONE
    64            - --discoveryAddress
    65            - istio-pilot:8080
    66          {{- end }}
    67            resources:
    68  {{- if .Values.resources }}
    69  {{ toYaml .Values.resources | indent 12 }}
    70  {{- else }}
    71  {{ toYaml .Values.global.defaultResources | indent 12 }}
    72  {{- end }}
    73            env:
    74            - name: POD_NAME
    75              valueFrom:
    76                fieldRef:
    77                  apiVersion: v1
    78                  fieldPath: metadata.name
    79            - name: POD_NAMESPACE
    80              valueFrom:
    81                fieldRef:
    82                  apiVersion: v1
    83                  fieldPath: metadata.namespace
    84            - name: INSTANCE_IP
    85              valueFrom:
    86                fieldRef:
    87                  apiVersion: v1
    88                  fieldPath: status.podIP
    89            volumeMounts:
    90            - name: istio-certs
    91              mountPath: /etc/certs
    92              readOnly: true
    93            - name: ingress-certs
    94              mountPath: /etc/istio/ingress-certs
    95              readOnly: true
    96        volumes:
    97        - name: istio-certs
    98          secret:
    99            secretName: istio.istio-ingress-service-account
   100            optional: true
   101        - name: ingress-certs
   102          secret:
   103            secretName: istio-ingress-certs
   104            optional: true
   105        affinity:
   106        {{- include "nodeaffinity" . | indent 6 }}