github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/gateways/templates/Deployment-istio-ingressgateway.yaml (about)

     1  apiVersion: extensions/v1beta1
     2  kind: Deployment
     3  metadata:
     4    name: istio-ingressgateway
     5    namespace: default
     6    labels:
     7      chart: gateways
     8      heritage: Tiller
     9      release: istio
    10      app: istio-ingressgateway
    11      istio: ingressgateway
    12  spec:
    13    replicas: 1
    14    template:
    15      metadata:
    16        labels:
    17          chart: gateways
    18          heritage: Tiller
    19          release: istio
    20          version: 1.1.0
    21          app: istio-ingressgateway
    22          istio: ingressgateway
    23        annotations:
    24          sidecar.istio.io/inject: "false"
    25          scheduler.alpha.kubernetes.io/critical-pod: ""
    26      spec:
    27        serviceAccountName: istio-ingressgateway-service-account
    28        containers:
    29          - name: istio-proxy
    30            image: "gcr.io/istio-release/proxyv2:master-latest-daily"
    31            imagePullPolicy: IfNotPresent
    32            ports:
    33              - containerPort: 80
    34              - containerPort: 443
    35              - containerPort: 31400
    36              - containerPort: 15029
    37              - containerPort: 15030
    38              - containerPort: 15031
    39              - containerPort: 15032
    40  
    41              - containerPort: 15090
    42                protocol: TCP
    43                name: http-envoy-prom
    44  
    45            args:
    46            - proxy
    47            - router
    48            - --log_output_level
    49            - 'info'
    50            - --drainDuration
    51            - '45s' #drainDuration
    52            - --parentShutdownDuration
    53            - '1m0s' #parentShutdownDuration
    54            - --connectTimeout
    55            - '10s' #connectTimeout
    56            - --serviceCluster
    57            - istio-ingressgateway
    58            - --zipkinAddress
    59            - zipkin:9411
    60            - --proxyAdminPort
    61            - "15000"
    62            - --controlPlaneAuthPolicy
    63            - NONE
    64            - --discoveryAddress
    65            - istio-pilot:15010
    66            resources:
    67              requests:
    68                cpu: 10m
    69              
    70            env:
    71            - name: POD_NAME
    72              valueFrom:
    73                fieldRef:
    74                  apiVersion: v1
    75                  fieldPath: metadata.name
    76            - name: POD_NAMESPACE
    77              valueFrom:
    78                fieldRef:
    79                  apiVersion: v1
    80                  fieldPath: metadata.namespace
    81            - name: INSTANCE_IP
    82              valueFrom:
    83                fieldRef:
    84                  apiVersion: v1
    85                  fieldPath: status.podIP
    86            - name: ISTIO_META_POD_NAME
    87              valueFrom:
    88                fieldRef:
    89                  fieldPath: metadata.name
    90            volumeMounts:
    91            
    92            - name: istio-certs
    93              mountPath: /etc/certs
    94              readOnly: true
    95            - name: ingressgateway-certs
    96              mountPath: "/etc/istio/ingressgateway-certs"
    97              readOnly: true
    98            - name: ingressgateway-ca-certs
    99              mountPath: "/etc/istio/ingressgateway-ca-certs"
   100              readOnly: true
   101        volumes:
   102        
   103        - name: istio-certs
   104          secret:
   105            secretName: istio.istio-ingressgateway-service-account
   106            optional: true
   107        - name: ingressgateway-certs
   108          secret:
   109            secretName: "istio-ingressgateway-certs"
   110            optional: true
   111        - name: ingressgateway-ca-certs
   112          secret:
   113            secretName: "istio-ingressgateway-ca-certs"
   114            optional: true
   115        affinity:      
   116          nodeAffinity:
   117            requiredDuringSchedulingIgnoredDuringExecution:
   118              nodeSelectorTerms:
   119              - matchExpressions:
   120                - key: beta.kubernetes.io/arch
   121                  operator: In
   122                  values:
   123                  - amd64
   124                  - ppc64le
   125                  - s390x
   126            preferredDuringSchedulingIgnoredDuringExecution:
   127            - weight: 2
   128              preference:
   129                matchExpressions:
   130                - key: beta.kubernetes.io/arch
   131                  operator: In
   132                  values:
   133                  - amd64
   134            - weight: 2
   135              preference:
   136                matchExpressions:
   137                - key: beta.kubernetes.io/arch
   138                  operator: In
   139                  values:
   140                  - ppc64le
   141            - weight: 2
   142              preference:
   143                matchExpressions:
   144                - key: beta.kubernetes.io/arch
   145                  operator: In
   146                  values:
   147                  - s390x