github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/gateways/templates/Deployment-istio-egressgateway.yaml (about) 1 --- 2 # Source: istio/charts/gateways/templates/deployment.yaml 3 4 apiVersion: extensions/v1beta1 5 kind: Deployment 6 metadata: 7 name: istio-egressgateway 8 namespace: default 9 labels: 10 chart: gateways 11 heritage: Tiller 12 release: istio 13 app: istio-egressgateway 14 istio: egressgateway 15 spec: 16 replicas: 1 17 template: 18 metadata: 19 labels: 20 chart: gateways 21 heritage: Tiller 22 release: istio 23 version: 1.1.0 24 app: istio-egressgateway 25 istio: egressgateway 26 annotations: 27 sidecar.istio.io/inject: "false" 28 scheduler.alpha.kubernetes.io/critical-pod: "" 29 spec: 30 serviceAccountName: istio-egressgateway-service-account 31 containers: 32 - name: istio-proxy 33 image: "gcr.io/istio-release/proxyv2:master-latest-daily" 34 imagePullPolicy: IfNotPresent 35 ports: 36 - containerPort: 80 37 - containerPort: 443 38 39 - containerPort: 15090 40 protocol: TCP 41 name: http-envoy-prom 42 43 args: 44 - proxy 45 - router 46 - --log_output_level 47 - 'info' 48 - --drainDuration 49 - '45s' #drainDuration 50 - --parentShutdownDuration 51 - '1m0s' #parentShutdownDuration 52 - --connectTimeout 53 - '10s' #connectTimeout 54 - --serviceCluster 55 - istio-egressgateway 56 - --zipkinAddress 57 - zipkin:9411 58 - --proxyAdminPort 59 - "15000" 60 - --controlPlaneAuthPolicy 61 - NONE 62 - --discoveryAddress 63 - istio-pilot:15010 64 resources: 65 requests: 66 cpu: 10m 67 68 env: 69 - name: POD_NAME 70 valueFrom: 71 fieldRef: 72 apiVersion: v1 73 fieldPath: metadata.name 74 - name: POD_NAMESPACE 75 valueFrom: 76 fieldRef: 77 apiVersion: v1 78 fieldPath: metadata.namespace 79 - name: INSTANCE_IP 80 valueFrom: 81 fieldRef: 82 apiVersion: v1 83 fieldPath: status.podIP 84 - name: ISTIO_META_POD_NAME 85 valueFrom: 86 fieldRef: 87 fieldPath: metadata.name 88 - name: ISTIO_META_REQUESTED_NETWORK_VIEW 89 value: "" 90 91 volumeMounts: 92 93 - name: istio-certs 94 mountPath: /etc/certs 95 readOnly: true 96 - name: egressgateway-certs 97 mountPath: "/etc/istio/egressgateway-certs" 98 readOnly: true 99 - name: egressgateway-ca-certs 100 mountPath: "/etc/istio/egressgateway-ca-certs" 101 readOnly: true 102 volumes: 103 104 - name: istio-certs 105 secret: 106 secretName: istio.istio-egressgateway-service-account 107 optional: true 108 - name: egressgateway-certs 109 secret: 110 secretName: "istio-egressgateway-certs" 111 optional: true 112 - name: egressgateway-ca-certs 113 secret: 114 secretName: "istio-egressgateway-ca-certs" 115 optional: true 116 affinity: 117 nodeAffinity: 118 requiredDuringSchedulingIgnoredDuringExecution: 119 nodeSelectorTerms: 120 - matchExpressions: 121 - key: beta.kubernetes.io/arch 122 operator: In 123 values: 124 - amd64 125 - ppc64le 126 - s390x 127 preferredDuringSchedulingIgnoredDuringExecution: 128 - weight: 2 129 preference: 130 matchExpressions: 131 - key: beta.kubernetes.io/arch 132 operator: In 133 values: 134 - amd64 135 - weight: 2 136 preference: 137 matchExpressions: 138 - key: beta.kubernetes.io/arch 139 operator: In 140 values: 141 - ppc64le 142 - weight: 2 143 preference: 144 matchExpressions: 145 - key: beta.kubernetes.io/arch 146 operator: In 147 values: 148 - s390x