github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/base/charts/gateways/templates/Deployment-istio-ingressgateway.yaml (about) 1 apiVersion: extensions/v1beta1 2 kind: Deployment 3 metadata: 4 name: istio-ingressgateway 5 namespace: default 6 labels: 7 chart: gateways-1.0.3 8 release: istio 9 heritage: Tiller 10 app: istio-ingressgateway 11 istio: ingressgateway 12 spec: 13 replicas: 1 14 template: 15 metadata: 16 labels: 17 app: istio-ingressgateway 18 istio: ingressgateway 19 annotations: 20 sidecar.istio.io/inject: "false" 21 scheduler.alpha.kubernetes.io/critical-pod: "" 22 spec: 23 serviceAccountName: istio-ingressgateway-service-account 24 containers: 25 - name: istio-proxy 26 image: "gcr.io/istio-release/proxyv2:release-1.0-latest-daily" 27 imagePullPolicy: IfNotPresent 28 ports: 29 - containerPort: 80 30 - containerPort: 443 31 - containerPort: 31400 32 - containerPort: 15011 33 - containerPort: 8060 34 - containerPort: 853 35 - containerPort: 15030 36 - containerPort: 15031 37 38 - containerPort: 15090 39 protocol: TCP 40 name: http-envoy-prom 41 42 args: 43 - proxy 44 - router 45 - -v 46 - "2" 47 - --discoveryRefreshDelay 48 - '1s' #discoveryRefreshDelay 49 - --drainDuration 50 - '45s' #drainDuration 51 - --parentShutdownDuration 52 - '1m0s' #parentShutdownDuration 53 - --connectTimeout 54 - '10s' #connectTimeout 55 - --serviceCluster 56 - istio-ingressgateway 57 - --zipkinAddress 58 - zipkin:9411 59 - --proxyAdminPort 60 - "15000" 61 - --controlPlaneAuthPolicy 62 - NONE 63 - --discoveryAddress 64 - istio-pilot:8080 65 resources: 66 requests: 67 cpu: 10m 68 69 env: 70 - name: POD_NAME 71 valueFrom: 72 fieldRef: 73 apiVersion: v1 74 fieldPath: metadata.name 75 - name: POD_NAMESPACE 76 valueFrom: 77 fieldRef: 78 apiVersion: v1 79 fieldPath: metadata.namespace 80 - name: INSTANCE_IP 81 valueFrom: 82 fieldRef: 83 apiVersion: v1 84 fieldPath: status.podIP 85 - name: ISTIO_META_POD_NAME 86 valueFrom: 87 fieldRef: 88 fieldPath: metadata.name 89 volumeMounts: 90 - name: istio-certs 91 mountPath: /etc/certs 92 readOnly: true 93 - name: ingressgateway-certs 94 mountPath: "/etc/istio/ingressgateway-certs" 95 readOnly: true 96 - name: ingressgateway-ca-certs 97 mountPath: "/etc/istio/ingressgateway-ca-certs" 98 readOnly: true 99 volumes: 100 - name: istio-certs 101 secret: 102 secretName: istio.istio-ingressgateway-service-account 103 optional: true 104 - name: ingressgateway-certs 105 secret: 106 secretName: "istio-ingressgateway-certs" 107 optional: true 108 - name: ingressgateway-ca-certs 109 secret: 110 secretName: "istio-ingressgateway-ca-certs" 111 optional: true 112 affinity: 113 nodeAffinity: 114 requiredDuringSchedulingIgnoredDuringExecution: 115 nodeSelectorTerms: 116 - matchExpressions: 117 - key: beta.kubernetes.io/arch 118 operator: In 119 values: 120 - amd64 121 - ppc64le 122 - s390x 123 preferredDuringSchedulingIgnoredDuringExecution: 124 - weight: 2 125 preference: 126 matchExpressions: 127 - key: beta.kubernetes.io/arch 128 operator: In 129 values: 130 - amd64 131 - weight: 2 132 preference: 133 matchExpressions: 134 - key: beta.kubernetes.io/arch 135 operator: In 136 values: 137 - ppc64le 138 - weight: 2 139 preference: 140 matchExpressions: 141 - key: beta.kubernetes.io/arch 142 operator: In 143 values: 144 - s390x