github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/base/charts/security/templates/deployment.yaml (about)

     1  ---
     2  # Source: istio/charts/security/templates/deployment.yaml
     3  # istio CA watching all namespaces
     4  apiVersion: extensions/v1beta1
     5  kind: Deployment
     6  metadata:
     7    name: istio-citadel
     8    namespace: default
     9    labels:
    10      app: security
    11      chart: security-1.0.3
    12      release: istio
    13      heritage: Tiller
    14      istio: citadel
    15  spec:
    16    replicas: 1
    17    template:
    18      metadata:
    19        labels:
    20          istio: citadel
    21        annotations:
    22          sidecar.istio.io/inject: "false"
    23          scheduler.alpha.kubernetes.io/critical-pod: ""
    24      spec:
    25        serviceAccountName: istio-citadel-service-account
    26        containers:
    27          - name: citadel
    28            image: "gcr.io/istio-release/citadel:release-1.0-latest-daily"
    29            imagePullPolicy: IfNotPresent
    30            args:
    31              - --append-dns-names=true
    32              - --grpc-port=8060
    33              - --grpc-hostname=citadel
    34              - --citadel-storage-namespace=default
    35              - --custom-dns-names=istio-pilot-service-account.default:istio-pilot.default,istio-ingressgateway-service-account.default:istio-ingressgateway.default
    36              - --self-signed-ca=true
    37            resources:
    38              requests:
    39                cpu: 10m
    40              
    41        affinity:      
    42          nodeAffinity:
    43            requiredDuringSchedulingIgnoredDuringExecution:
    44              nodeSelectorTerms:
    45              - matchExpressions:
    46                - key: beta.kubernetes.io/arch
    47                  operator: In
    48                  values:
    49                  - amd64
    50                  - ppc64le
    51                  - s390x
    52            preferredDuringSchedulingIgnoredDuringExecution:
    53            - weight: 2
    54              preference:
    55                matchExpressions:
    56                - key: beta.kubernetes.io/arch
    57                  operator: In
    58                  values:
    59                  - amd64
    60            - weight: 2
    61              preference:
    62                matchExpressions:
    63                - key: beta.kubernetes.io/arch
    64                  operator: In
    65                  values:
    66                  - ppc64le
    67            - weight: 2
    68              preference:
    69                matchExpressions:
    70                - key: beta.kubernetes.io/arch
    71                  operator: In
    72                  values:
    73                  - s390x