github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/gateways/templates/Deployment-istio-egressgateway.yaml (about)

     1  ---
     2  # Source: istio/charts/gateways/templates/deployment.yaml
     3  
     4  apiVersion: extensions/v1beta1
     5  kind: Deployment
     6  metadata:
     7    name: istio-egressgateway
     8    namespace: default
     9    labels:
    10      chart: gateways
    11      heritage: Tiller
    12      release: istio
    13      app: istio-egressgateway
    14      istio: egressgateway
    15  spec:
    16    replicas: 1
    17    template:
    18      metadata:
    19        labels:
    20          chart: gateways
    21          heritage: Tiller
    22          release: istio
    23          version: 1.1.0
    24          app: istio-egressgateway
    25          istio: egressgateway
    26        annotations:
    27          sidecar.istio.io/inject: "false"
    28          scheduler.alpha.kubernetes.io/critical-pod: ""
    29      spec:
    30        serviceAccountName: istio-egressgateway-service-account
    31        containers:
    32          - name: istio-proxy
    33            image: "gcr.io/istio-release/proxyv2:master-latest-daily"
    34            imagePullPolicy: IfNotPresent
    35            ports:
    36              - containerPort: 80
    37              - containerPort: 443
    38  
    39              - containerPort: 15090
    40                protocol: TCP
    41                name: http-envoy-prom
    42  
    43            args:
    44            - proxy
    45            - router
    46            - --log_output_level
    47            - 'info'
    48            - --drainDuration
    49            - '45s' #drainDuration
    50            - --parentShutdownDuration
    51            - '1m0s' #parentShutdownDuration
    52            - --connectTimeout
    53            - '10s' #connectTimeout
    54            - --serviceCluster
    55            - istio-egressgateway
    56            - --zipkinAddress
    57            - zipkin:9411
    58            - --proxyAdminPort
    59            - "15000"
    60            - --controlPlaneAuthPolicy
    61            - NONE
    62            - --discoveryAddress
    63            - istio-pilot:15010
    64            resources:
    65              requests:
    66                cpu: 10m
    67              
    68            env:
    69            - name: POD_NAME
    70              valueFrom:
    71                fieldRef:
    72                  apiVersion: v1
    73                  fieldPath: metadata.name
    74            - name: POD_NAMESPACE
    75              valueFrom:
    76                fieldRef:
    77                  apiVersion: v1
    78                  fieldPath: metadata.namespace
    79            - name: INSTANCE_IP
    80              valueFrom:
    81                fieldRef:
    82                  apiVersion: v1
    83                  fieldPath: status.podIP
    84            - name: ISTIO_META_POD_NAME
    85              valueFrom:
    86                fieldRef:
    87                  fieldPath: metadata.name
    88            - name: ISTIO_META_REQUESTED_NETWORK_VIEW
    89              value:  ""
    90            
    91            volumeMounts:
    92            
    93            - name: istio-certs
    94              mountPath: /etc/certs
    95              readOnly: true
    96            - name: egressgateway-certs
    97              mountPath: "/etc/istio/egressgateway-certs"
    98              readOnly: true
    99            - name: egressgateway-ca-certs
   100              mountPath: "/etc/istio/egressgateway-ca-certs"
   101              readOnly: true
   102        volumes:
   103        
   104        - name: istio-certs
   105          secret:
   106            secretName: istio.istio-egressgateway-service-account
   107            optional: true
   108        - name: egressgateway-certs
   109          secret:
   110            secretName: "istio-egressgateway-certs"
   111            optional: true
   112        - name: egressgateway-ca-certs
   113          secret:
   114            secretName: "istio-egressgateway-ca-certs"
   115            optional: true
   116        affinity:      
   117          nodeAffinity:
   118            requiredDuringSchedulingIgnoredDuringExecution:
   119              nodeSelectorTerms:
   120              - matchExpressions:
   121                - key: beta.kubernetes.io/arch
   122                  operator: In
   123                  values:
   124                  - amd64
   125                  - ppc64le
   126                  - s390x
   127            preferredDuringSchedulingIgnoredDuringExecution:
   128            - weight: 2
   129              preference:
   130                matchExpressions:
   131                - key: beta.kubernetes.io/arch
   132                  operator: In
   133                  values:
   134                  - amd64
   135            - weight: 2
   136              preference:
   137                matchExpressions:
   138                - key: beta.kubernetes.io/arch
   139                  operator: In
   140                  values:
   141                  - ppc64le
   142            - weight: 2
   143              preference:
   144                matchExpressions:
   145                - key: beta.kubernetes.io/arch
   146                  operator: In
   147                  values:
   148                  - s390x