github.com/replicatedcom/ship@v0.50.0/integration/unfork/istio-k8s/expected/base/charts/pilot/templates/deployment.yaml (about)

     1  ---
     2  # Source: istio/charts/pilot/templates/deployment.yaml
     3  apiVersion: extensions/v1beta1
     4  kind: Deployment
     5  metadata:
     6    name: istio-pilot
     7    namespace: default
     8    # TODO: default template doesn't have this, which one is right ?
     9    labels:
    10      app: istio-pilot
    11      chart: pilot-1.0.3
    12      release: istio
    13      heritage: Tiller
    14      istio: pilot
    15    annotations:
    16      checksum/config-volume: f8da08b6b8c170dde721efd680270b2901e750d4aa186ebb6c22bef5b78a43f9
    17  spec:
    18    replicas: 1
    19    template:
    20      metadata:
    21        labels:
    22          istio: pilot
    23          app: pilot
    24        annotations:
    25          sidecar.istio.io/inject: "false"
    26          scheduler.alpha.kubernetes.io/critical-pod: ""
    27      spec:
    28        serviceAccountName: istio-pilot-service-account
    29        containers:
    30          - name: discovery
    31            image: "gcr.io/istio-release/pilot:release-1.0-latest-daily"
    32            imagePullPolicy: IfNotPresent
    33            args:
    34            - "discovery"
    35            ports:
    36            - containerPort: 8080
    37            - containerPort: 15010
    38            readinessProbe:
    39              httpGet:
    40                path: /ready
    41                port: 8080
    42              initialDelaySeconds: 5
    43              periodSeconds: 30
    44              timeoutSeconds: 5
    45            env:
    46            - name: POD_NAME
    47              valueFrom:
    48                fieldRef:
    49                  apiVersion: v1
    50                  fieldPath: metadata.name
    51            - name: POD_NAMESPACE
    52              valueFrom:
    53                fieldRef:
    54                  apiVersion: v1
    55                  fieldPath: metadata.namespace
    56            - name: PILOT_CACHE_SQUASH
    57              value: "5"
    58            - name: GODEBUG
    59              value: "gctrace=2"
    60            - name: PILOT_PUSH_THROTTLE_COUNT
    61              value: "100"
    62            - name: PILOT_TRACE_SAMPLING
    63              value: "1"
    64            resources:
    65              requests:
    66                cpu: 500m
    67                memory: 2048Mi
    68              
    69            volumeMounts:
    70            - name: config-volume
    71              mountPath: /etc/istio/config
    72            - name: istio-certs
    73              mountPath: /etc/certs
    74              readOnly: true
    75          - name: istio-proxy
    76            image: "gcr.io/istio-release/proxyv2:release-1.0-latest-daily"
    77            imagePullPolicy: IfNotPresent
    78            ports:
    79            - containerPort: 15003
    80            - containerPort: 15005
    81            - containerPort: 15007
    82            - containerPort: 15011
    83            args:
    84            - proxy
    85            - --serviceCluster
    86            - istio-pilot
    87            - --templateFile
    88            - /etc/istio/proxy/envoy_pilot.yaml.tmpl
    89            - --controlPlaneAuthPolicy
    90            - NONE
    91            env:
    92            - name: POD_NAME
    93              valueFrom:
    94                fieldRef:
    95                  apiVersion: v1
    96                  fieldPath: metadata.name
    97            - name: POD_NAMESPACE
    98              valueFrom:
    99                fieldRef:
   100                  apiVersion: v1
   101                  fieldPath: metadata.namespace
   102            - name: INSTANCE_IP
   103              valueFrom:
   104                fieldRef:
   105                  apiVersion: v1
   106                  fieldPath: status.podIP
   107            resources:
   108              requests:
   109                cpu: 10m
   110              
   111            volumeMounts:
   112            - name: istio-certs
   113              mountPath: /etc/certs
   114              readOnly: true
   115        volumes:
   116        - name: config-volume
   117          configMap:
   118            name: istio
   119        - name: istio-certs
   120          secret:
   121            secretName: istio.istio-pilot-service-account
   122            optional: true   
   123        affinity:      
   124          nodeAffinity:
   125            requiredDuringSchedulingIgnoredDuringExecution:
   126              nodeSelectorTerms:
   127              - matchExpressions:
   128                - key: beta.kubernetes.io/arch
   129                  operator: In
   130                  values:
   131                  - amd64
   132                  - ppc64le
   133                  - s390x
   134            preferredDuringSchedulingIgnoredDuringExecution:
   135            - weight: 2
   136              preference:
   137                matchExpressions:
   138                - key: beta.kubernetes.io/arch
   139                  operator: In
   140                  values:
   141                  - amd64
   142            - weight: 2
   143              preference:
   144                matchExpressions:
   145                - key: beta.kubernetes.io/arch
   146                  operator: In
   147                  values:
   148                  - ppc64le
   149            - weight: 2
   150              preference:
   151                matchExpressions:
   152                - key: beta.kubernetes.io/arch
   153                  operator: In
   154                  values:
   155                  - s390x