github.com/replicatedcom/ship@v0.50.0/integration/unfork/istio-k8s/expected/base/charts/gateways/templates/Deployment-istio-egressgateway.yaml (about) 1 --- 2 # Source: istio/charts/gateways/templates/deployment.yaml 3 4 apiVersion: extensions/v1beta1 5 kind: Deployment 6 metadata: 7 name: istio-egressgateway 8 namespace: default 9 labels: 10 chart: gateways-1.0.3 11 release: istio 12 heritage: Tiller 13 app: istio-egressgateway 14 istio: egressgateway 15 spec: 16 replicas: 1 17 template: 18 metadata: 19 labels: 20 app: istio-egressgateway 21 istio: egressgateway 22 annotations: 23 sidecar.istio.io/inject: "false" 24 scheduler.alpha.kubernetes.io/critical-pod: "" 25 spec: 26 serviceAccountName: istio-egressgateway-service-account 27 containers: 28 - name: istio-proxy 29 image: "gcr.io/istio-release/proxyv2:release-1.0-latest-daily" 30 imagePullPolicy: IfNotPresent 31 ports: 32 - containerPort: 80 33 - containerPort: 443 34 35 - containerPort: 15090 36 protocol: TCP 37 name: http-envoy-prom 38 39 args: 40 - proxy 41 - router 42 - -v 43 - "2" 44 - --discoveryRefreshDelay 45 - '1s' #discoveryRefreshDelay 46 - --drainDuration 47 - '45s' #drainDuration 48 - --parentShutdownDuration 49 - '1m0s' #parentShutdownDuration 50 - --connectTimeout 51 - '10s' #connectTimeout 52 - --serviceCluster 53 - istio-egressgateway 54 - --zipkinAddress 55 - zipkin:9411 56 - --proxyAdminPort 57 - "15000" 58 - --controlPlaneAuthPolicy 59 - NONE 60 - --discoveryAddress 61 - istio-pilot:8080 62 resources: 63 requests: 64 cpu: 10m 65 66 env: 67 - name: POD_NAME 68 valueFrom: 69 fieldRef: 70 apiVersion: v1 71 fieldPath: metadata.name 72 - name: POD_NAMESPACE 73 valueFrom: 74 fieldRef: 75 apiVersion: v1 76 fieldPath: metadata.namespace 77 - name: INSTANCE_IP 78 valueFrom: 79 fieldRef: 80 apiVersion: v1 81 fieldPath: status.podIP 82 - name: ISTIO_META_POD_NAME 83 valueFrom: 84 fieldRef: 85 fieldPath: metadata.name 86 volumeMounts: 87 - name: istio-certs 88 mountPath: /etc/certs 89 readOnly: true 90 - name: egressgateway-certs 91 mountPath: "/etc/istio/egressgateway-certs" 92 readOnly: true 93 - name: egressgateway-ca-certs 94 mountPath: "/etc/istio/egressgateway-ca-certs" 95 readOnly: true 96 volumes: 97 - name: istio-certs 98 secret: 99 secretName: istio.istio-egressgateway-service-account 100 optional: true 101 - name: egressgateway-certs 102 secret: 103 secretName: "istio-egressgateway-certs" 104 optional: true 105 - name: egressgateway-ca-certs 106 secret: 107 secretName: "istio-egressgateway-ca-certs" 108 optional: true 109 affinity: 110 nodeAffinity: 111 requiredDuringSchedulingIgnoredDuringExecution: 112 nodeSelectorTerms: 113 - matchExpressions: 114 - key: beta.kubernetes.io/arch 115 operator: In 116 values: 117 - amd64 118 - ppc64le 119 - s390x 120 preferredDuringSchedulingIgnoredDuringExecution: 121 - weight: 2 122 preference: 123 matchExpressions: 124 - key: beta.kubernetes.io/arch 125 operator: In 126 values: 127 - amd64 128 - weight: 2 129 preference: 130 matchExpressions: 131 - key: beta.kubernetes.io/arch 132 operator: In 133 values: 134 - ppc64le 135 - weight: 2 136 preference: 137 matchExpressions: 138 - key: beta.kubernetes.io/arch 139 operator: In 140 values: 141 - s390x