github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/base/charts/security/templates/deployment.yaml (about) 1 --- 2 # Source: istio/charts/security/templates/deployment.yaml 3 # istio CA watching all namespaces 4 apiVersion: extensions/v1beta1 5 kind: Deployment 6 metadata: 7 name: istio-citadel 8 namespace: default 9 labels: 10 app: security 11 chart: security-1.0.3 12 release: istio 13 heritage: Tiller 14 istio: citadel 15 spec: 16 replicas: 1 17 template: 18 metadata: 19 labels: 20 istio: citadel 21 annotations: 22 sidecar.istio.io/inject: "false" 23 scheduler.alpha.kubernetes.io/critical-pod: "" 24 spec: 25 serviceAccountName: istio-citadel-service-account 26 containers: 27 - name: citadel 28 image: "gcr.io/istio-release/citadel:release-1.0-latest-daily" 29 imagePullPolicy: IfNotPresent 30 args: 31 - --append-dns-names=true 32 - --grpc-port=8060 33 - --grpc-hostname=citadel 34 - --citadel-storage-namespace=default 35 - --custom-dns-names=istio-pilot-service-account.default:istio-pilot.default,istio-ingressgateway-service-account.default:istio-ingressgateway.default 36 - --self-signed-ca=true 37 resources: 38 requests: 39 cpu: 10m 40 41 affinity: 42 nodeAffinity: 43 requiredDuringSchedulingIgnoredDuringExecution: 44 nodeSelectorTerms: 45 - matchExpressions: 46 - key: beta.kubernetes.io/arch 47 operator: In 48 values: 49 - amd64 50 - ppc64le 51 - s390x 52 preferredDuringSchedulingIgnoredDuringExecution: 53 - weight: 2 54 preference: 55 matchExpressions: 56 - key: beta.kubernetes.io/arch 57 operator: In 58 values: 59 - amd64 60 - weight: 2 61 preference: 62 matchExpressions: 63 - key: beta.kubernetes.io/arch 64 operator: In 65 values: 66 - ppc64le 67 - weight: 2 68 preference: 69 matchExpressions: 70 - key: beta.kubernetes.io/arch 71 operator: In 72 values: 73 - s390x