github.com/replicatedcom/ship@v0.50.0/integration/unfork/istio-k8s/expected/base/charts/mixer/templates/Deployment-istio-policy.yaml (about)

     1  ---
     2  # Source: istio/charts/mixer/templates/deployment.yaml
     3  
     4  apiVersion: extensions/v1beta1
     5  kind: Deployment
     6  metadata:
     7    name: istio-policy
     8    namespace: default
     9    labels:
    10      chart: mixer-1.0.3
    11      release: istio
    12      istio: mixer
    13  spec:
    14    replicas: 1
    15    template:
    16      metadata:
    17        labels:
    18          app: policy
    19          istio: mixer
    20          istio-mixer-type: policy
    21        annotations:
    22          sidecar.istio.io/inject: "false"
    23          scheduler.alpha.kubernetes.io/critical-pod: ""
    24      spec:
    25        serviceAccountName: istio-mixer-service-account
    26        volumes:
    27        - name: istio-certs
    28          secret:
    29            secretName: istio.istio-mixer-service-account
    30            optional: true
    31        - name: uds-socket
    32          emptyDir: {}
    33        affinity:      
    34          nodeAffinity:
    35            requiredDuringSchedulingIgnoredDuringExecution:
    36              nodeSelectorTerms:
    37              - matchExpressions:
    38                - key: beta.kubernetes.io/arch
    39                  operator: In
    40                  values:
    41                  - amd64
    42                  - ppc64le
    43                  - s390x
    44            preferredDuringSchedulingIgnoredDuringExecution:
    45            - weight: 2
    46              preference:
    47                matchExpressions:
    48                - key: beta.kubernetes.io/arch
    49                  operator: In
    50                  values:
    51                  - amd64
    52            - weight: 2
    53              preference:
    54                matchExpressions:
    55                - key: beta.kubernetes.io/arch
    56                  operator: In
    57                  values:
    58                  - ppc64le
    59            - weight: 2
    60              preference:
    61                matchExpressions:
    62                - key: beta.kubernetes.io/arch
    63                  operator: In
    64                  values:
    65                  - s390x
    66        containers:
    67        - name: mixer
    68          image: "gcr.io/istio-release/mixer:release-1.0-latest-daily"
    69          imagePullPolicy: IfNotPresent
    70          ports:
    71          - containerPort: 9093
    72          - containerPort: 42422
    73          args:
    74            - --address
    75            - unix:///sock/mixer.socket
    76            - --configStoreURL=k8s://
    77            - --configDefaultNamespace=default
    78            - --trace_zipkin_url=http://zipkin:9411/api/v1/spans
    79          env:
    80          - name: GODEBUG
    81            value: "gctrace=2"
    82          resources:
    83            requests:
    84              cpu: 10m
    85            
    86          volumeMounts:
    87          - name: uds-socket
    88            mountPath: /sock
    89          livenessProbe:
    90            httpGet:
    91              path: /version
    92              port: 9093
    93            initialDelaySeconds: 5
    94            periodSeconds: 5
    95        - name: istio-proxy
    96          image: "gcr.io/istio-release/proxyv2:release-1.0-latest-daily"
    97          imagePullPolicy: IfNotPresent
    98          ports:
    99          - containerPort: 9091
   100          - containerPort: 15004
   101  
   102          ports:
   103          - containerPort: 15090
   104            protocol: TCP
   105            name: http-envoy-prom
   106  
   107          args:
   108          - proxy
   109          - --serviceCluster
   110          - istio-policy
   111          - --templateFile
   112          - /etc/istio/proxy/envoy_policy.yaml.tmpl
   113          - --controlPlaneAuthPolicy
   114          - NONE
   115          env:
   116          - name: POD_NAME
   117            valueFrom:
   118              fieldRef:
   119                apiVersion: v1
   120                fieldPath: metadata.name
   121          - name: POD_NAMESPACE
   122            valueFrom:
   123              fieldRef:
   124                apiVersion: v1
   125                fieldPath: metadata.namespace
   126          - name: INSTANCE_IP
   127            valueFrom:
   128              fieldRef:
   129                apiVersion: v1
   130                fieldPath: status.podIP
   131          resources:
   132            requests:
   133              cpu: 10m
   134            
   135          volumeMounts:
   136          - name: istio-certs
   137            mountPath: /etc/certs
   138            readOnly: true
   139          - name: uds-socket
   140            mountPath: /sock