github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/mixer/templates/Deployment-istio-policy.yaml (about)

     1  ---
     2  # Source: istio/charts/mixer/templates/deployment.yaml
     3  
     4  apiVersion: extensions/v1beta1
     5  kind: Deployment
     6  metadata:
     7    name: istio-policy
     8    namespace: default
     9    labels:
    10      app: mixer
    11      chart: mixer
    12      heritage: Tiller
    13      release: istio
    14      istio: mixer
    15  spec:
    16    replicas: 1
    17    template:
    18      metadata:
    19        labels:
    20          app: mixer
    21          chart: mixer
    22          heritage: Tiller
    23          release: istio
    24          version: 1.1.0
    25          istio: mixer
    26          istio-mixer-type: policy
    27        annotations:
    28          sidecar.istio.io/inject: "false"
    29          scheduler.alpha.kubernetes.io/critical-pod: ""
    30      spec:
    31        serviceAccountName: istio-mixer-service-account
    32        volumes:
    33        - name: istio-certs
    34          secret:
    35            secretName: istio.istio-mixer-service-account
    36            optional: true
    37        - name: uds-socket
    38          emptyDir: {}
    39        affinity:      
    40          nodeAffinity:
    41            requiredDuringSchedulingIgnoredDuringExecution:
    42              nodeSelectorTerms:
    43              - matchExpressions:
    44                - key: beta.kubernetes.io/arch
    45                  operator: In
    46                  values:
    47                  - amd64
    48                  - ppc64le
    49                  - s390x
    50            preferredDuringSchedulingIgnoredDuringExecution:
    51            - weight: 2
    52              preference:
    53                matchExpressions:
    54                - key: beta.kubernetes.io/arch
    55                  operator: In
    56                  values:
    57                  - amd64
    58            - weight: 2
    59              preference:
    60                matchExpressions:
    61                - key: beta.kubernetes.io/arch
    62                  operator: In
    63                  values:
    64                  - ppc64le
    65            - weight: 2
    66              preference:
    67                matchExpressions:
    68                - key: beta.kubernetes.io/arch
    69                  operator: In
    70                  values:
    71                  - s390x
    72        containers:
    73        - name: mixer
    74          image: "gcr.io/istio-release/mixer:master-latest-daily"
    75          imagePullPolicy: IfNotPresent
    76          ports:
    77          - containerPort: 9093
    78          - containerPort: 42422
    79          args:
    80            - --address
    81            - unix:///sock/mixer.socket
    82            - --configStoreURL=k8s://
    83            - --configDefaultNamespace=default
    84            - --trace_zipkin_url=http://zipkin:9411/api/v1/spans
    85          env:
    86          - name: GODEBUG
    87            value: "gctrace=2"
    88          resources:
    89            requests:
    90              cpu: 10m
    91            
    92          volumeMounts:
    93          - name: uds-socket
    94            mountPath: /sock
    95          livenessProbe:
    96            httpGet:
    97              path: /version
    98              port: 9093
    99            initialDelaySeconds: 5
   100            periodSeconds: 5
   101        - name: istio-proxy
   102          image: "gcr.io/istio-release/proxyv2:master-latest-daily"
   103          imagePullPolicy: IfNotPresent
   104          ports:
   105          - containerPort: 9091
   106          - containerPort: 15004
   107  
   108          - containerPort: 15090
   109            protocol: TCP
   110            name: http-envoy-prom
   111  
   112          args:
   113          - proxy
   114          - --serviceCluster
   115          - istio-policy
   116          - --templateFile
   117          - /etc/istio/proxy/envoy_policy.yaml.tmpl
   118          - --controlPlaneAuthPolicy
   119          - NONE
   120          env:
   121          - name: POD_NAME
   122            valueFrom:
   123              fieldRef:
   124                apiVersion: v1
   125                fieldPath: metadata.name
   126          - name: POD_NAMESPACE
   127            valueFrom:
   128              fieldRef:
   129                apiVersion: v1
   130                fieldPath: metadata.namespace
   131          - name: INSTANCE_IP
   132            valueFrom:
   133              fieldRef:
   134                apiVersion: v1
   135                fieldPath: status.podIP
   136          resources:
   137            requests:
   138              cpu: 10m
   139            
   140          volumeMounts:
   141          - name: istio-certs
   142            mountPath: /etc/certs
   143            readOnly: true
   144          - name: uds-socket
   145            mountPath: /sock