github.com/replicatedcom/ship@v0.50.0/integration/unfork/istio-k8s/expected/base/charts/gateways/templates/Deployment-istio-ingressgateway.yaml (about)

     1  apiVersion: extensions/v1beta1
     2  kind: Deployment
     3  metadata:
     4    name: istio-ingressgateway
     5    namespace: default
     6    labels:
     7      chart: gateways-1.0.3
     8      release: istio
     9      heritage: Tiller
    10      app: istio-ingressgateway
    11      istio: ingressgateway
    12  spec:
    13    replicas: 1
    14    template:
    15      metadata:
    16        labels:
    17          app: istio-ingressgateway
    18          istio: ingressgateway
    19        annotations:
    20          sidecar.istio.io/inject: "false"
    21          scheduler.alpha.kubernetes.io/critical-pod: ""
    22      spec:
    23        serviceAccountName: istio-ingressgateway-service-account
    24        containers:
    25          - name: istio-proxy
    26            image: "gcr.io/istio-release/proxyv2:release-1.0-latest-daily"
    27            imagePullPolicy: IfNotPresent
    28            ports:
    29              - containerPort: 80
    30              - containerPort: 443
    31              - containerPort: 31400
    32              - containerPort: 15011
    33              - containerPort: 8060
    34              - containerPort: 853
    35              - containerPort: 15030
    36              - containerPort: 15031
    37  
    38              - containerPort: 15090
    39                protocol: TCP
    40                name: http-envoy-prom
    41  
    42            args:
    43            - proxy
    44            - router
    45            - -v
    46            - "2"
    47            - --discoveryRefreshDelay
    48            - '1s' #discoveryRefreshDelay
    49            - --drainDuration
    50            - '45s' #drainDuration
    51            - --parentShutdownDuration
    52            - '1m0s' #parentShutdownDuration
    53            - --connectTimeout
    54            - '10s' #connectTimeout
    55            - --serviceCluster
    56            - istio-ingressgateway
    57            - --zipkinAddress
    58            - zipkin:9411
    59            - --proxyAdminPort
    60            - "15000"
    61            - --controlPlaneAuthPolicy
    62            - NONE
    63            - --discoveryAddress
    64            - istio-pilot:8080
    65            resources:
    66              requests:
    67                cpu: 10m
    68              
    69            env:
    70            - name: POD_NAME
    71              valueFrom:
    72                fieldRef:
    73                  apiVersion: v1
    74                  fieldPath: metadata.name
    75            - name: POD_NAMESPACE
    76              valueFrom:
    77                fieldRef:
    78                  apiVersion: v1
    79                  fieldPath: metadata.namespace
    80            - name: INSTANCE_IP
    81              valueFrom:
    82                fieldRef:
    83                  apiVersion: v1
    84                  fieldPath: status.podIP
    85            - name: ISTIO_META_POD_NAME
    86              valueFrom:
    87                fieldRef:
    88                  fieldPath: metadata.name
    89            volumeMounts:
    90            - name: istio-certs
    91              mountPath: /etc/certs
    92              readOnly: true
    93            - name: ingressgateway-certs
    94              mountPath: "/etc/istio/ingressgateway-certs"
    95              readOnly: true
    96            - name: ingressgateway-ca-certs
    97              mountPath: "/etc/istio/ingressgateway-ca-certs"
    98              readOnly: true
    99        volumes:
   100        - name: istio-certs
   101          secret:
   102            secretName: istio.istio-ingressgateway-service-account
   103            optional: true
   104        - name: ingressgateway-certs
   105          secret:
   106            secretName: "istio-ingressgateway-certs"
   107            optional: true
   108        - name: ingressgateway-ca-certs
   109          secret:
   110            secretName: "istio-ingressgateway-ca-certs"
   111            optional: true
   112        affinity:      
   113          nodeAffinity:
   114            requiredDuringSchedulingIgnoredDuringExecution:
   115              nodeSelectorTerms:
   116              - matchExpressions:
   117                - key: beta.kubernetes.io/arch
   118                  operator: In
   119                  values:
   120                  - amd64
   121                  - ppc64le
   122                  - s390x
   123            preferredDuringSchedulingIgnoredDuringExecution:
   124            - weight: 2
   125              preference:
   126                matchExpressions:
   127                - key: beta.kubernetes.io/arch
   128                  operator: In
   129                  values:
   130                  - amd64
   131            - weight: 2
   132              preference:
   133                matchExpressions:
   134                - key: beta.kubernetes.io/arch
   135                  operator: In
   136                  values:
   137                  - ppc64le
   138            - weight: 2
   139              preference:
   140                matchExpressions:
   141                - key: beta.kubernetes.io/arch
   142                  operator: In
   143                  values:
   144                  - s390x