istio.io/istio@v0.0.0-20240520182934-d79c90f27776/operator/cmd/mesh/testdata/manifest-generate/input/pilot_override_kubernetes.yaml (about)

     1  apiVersion: install.istio.io/v1alpha1
     2  kind: IstioOperator
     3  spec:
     4    profile: empty
     5    hub: docker.io/istio
     6    tag: 1.1.4
     7    meshConfig:
     8      rootNamespace: istio-control
     9    components:
    10      base:
    11        enabled: true
    12        k8s:
    13          # Base component only allows overlays field.
    14          overlays:
    15            - kind: ServiceAccount
    16              name: istio-reader-service-account
    17              patches:
    18                # Select list item by value
    19                - path: spec.automountServiceAccountToken
    20                  value: false
    21  
    22      pilot:
    23        enabled: true
    24        namespace: istio-control
    25        k8s:
    26          resources:
    27            requests:
    28              cpu: 123m
    29          overlays:
    30            - kind: Deployment
    31              name: istiod
    32              patches:
    33                # Select list item by value
    34                - path: spec.template.spec.containers.[name:discovery].args.[30m]
    35                  value: "60m" # OVERRIDDEN
    36                # Select list item by key:value
    37                - path: spec.template.spec.containers.[name:discovery].ports.[containerPort:8080].containerPort
    38                  value: 1234 # OVERRIDDEN
    39                # Override with object (note | on value: first line)
    40                - path: spec.template.spec.containers.[name:discovery].env.[name:POD_NAMESPACE].valueFrom
    41                  value: |
    42                    fieldRef:
    43                      apiVersion: v2
    44                      fieldPath: metadata.myPath
    45                # Deletion of list item
    46                - path: spec.template.spec.containers.[name:discovery].env.[name:REVISION]
    47                # Deletion of map item
    48                - path: spec.template.spec.containers.[name:discovery].securityContext
    49            - kind: Service
    50              name: istiod
    51              patches:
    52                - path: spec.ports.[name:https-dns].port
    53                  value: 11111 # OVERRIDDEN
    54            # Cluster scope resource
    55            - kind: MutatingWebhookConfiguration
    56              name: istio-sidecar-injector-istio-control
    57              patches:
    58                - path: webhooks.[name:namespace\.sidecar-injector\.istio\.io].clientConfig.service.name
    59                  value: foo
    60