github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/gateways/templates/Deployment-istio-ingressgateway.yaml (about) 1 apiVersion: extensions/v1beta1 2 kind: Deployment 3 metadata: 4 name: istio-ingressgateway 5 namespace: default 6 labels: 7 chart: gateways 8 heritage: Tiller 9 release: istio 10 app: istio-ingressgateway 11 istio: ingressgateway 12 spec: 13 replicas: 1 14 template: 15 metadata: 16 labels: 17 chart: gateways 18 heritage: Tiller 19 release: istio 20 version: 1.1.0 21 app: istio-ingressgateway 22 istio: ingressgateway 23 annotations: 24 sidecar.istio.io/inject: "false" 25 scheduler.alpha.kubernetes.io/critical-pod: "" 26 spec: 27 serviceAccountName: istio-ingressgateway-service-account 28 containers: 29 - name: istio-proxy 30 image: "gcr.io/istio-release/proxyv2:master-latest-daily" 31 imagePullPolicy: IfNotPresent 32 ports: 33 - containerPort: 80 34 - containerPort: 443 35 - containerPort: 31400 36 - containerPort: 15029 37 - containerPort: 15030 38 - containerPort: 15031 39 - containerPort: 15032 40 41 - containerPort: 15090 42 protocol: TCP 43 name: http-envoy-prom 44 45 args: 46 - proxy 47 - router 48 - --log_output_level 49 - 'info' 50 - --drainDuration 51 - '45s' #drainDuration 52 - --parentShutdownDuration 53 - '1m0s' #parentShutdownDuration 54 - --connectTimeout 55 - '10s' #connectTimeout 56 - --serviceCluster 57 - istio-ingressgateway 58 - --zipkinAddress 59 - zipkin:9411 60 - --proxyAdminPort 61 - "15000" 62 - --controlPlaneAuthPolicy 63 - NONE 64 - --discoveryAddress 65 - istio-pilot:15010 66 resources: 67 requests: 68 cpu: 10m 69 70 env: 71 - name: POD_NAME 72 valueFrom: 73 fieldRef: 74 apiVersion: v1 75 fieldPath: metadata.name 76 - name: POD_NAMESPACE 77 valueFrom: 78 fieldRef: 79 apiVersion: v1 80 fieldPath: metadata.namespace 81 - name: INSTANCE_IP 82 valueFrom: 83 fieldRef: 84 apiVersion: v1 85 fieldPath: status.podIP 86 - name: ISTIO_META_POD_NAME 87 valueFrom: 88 fieldRef: 89 fieldPath: metadata.name 90 volumeMounts: 91 92 - name: istio-certs 93 mountPath: /etc/certs 94 readOnly: true 95 - name: ingressgateway-certs 96 mountPath: "/etc/istio/ingressgateway-certs" 97 readOnly: true 98 - name: ingressgateway-ca-certs 99 mountPath: "/etc/istio/ingressgateway-ca-certs" 100 readOnly: true 101 volumes: 102 103 - name: istio-certs 104 secret: 105 secretName: istio.istio-ingressgateway-service-account 106 optional: true 107 - name: ingressgateway-certs 108 secret: 109 secretName: "istio-ingressgateway-certs" 110 optional: true 111 - name: ingressgateway-ca-certs 112 secret: 113 secretName: "istio-ingressgateway-ca-certs" 114 optional: true 115 affinity: 116 nodeAffinity: 117 requiredDuringSchedulingIgnoredDuringExecution: 118 nodeSelectorTerms: 119 - matchExpressions: 120 - key: beta.kubernetes.io/arch 121 operator: In 122 values: 123 - amd64 124 - ppc64le 125 - s390x 126 preferredDuringSchedulingIgnoredDuringExecution: 127 - weight: 2 128 preference: 129 matchExpressions: 130 - key: beta.kubernetes.io/arch 131 operator: In 132 values: 133 - amd64 134 - weight: 2 135 preference: 136 matchExpressions: 137 - key: beta.kubernetes.io/arch 138 operator: In 139 values: 140 - ppc64le 141 - weight: 2 142 preference: 143 matchExpressions: 144 - key: beta.kubernetes.io/arch 145 operator: In 146 values: 147 - s390x