istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pkg/config/analysis/analyzers/testdata/injection-image-distroless-no-meshconfig.yaml (about)

     1  apiVersion: v1
     2  kind: Namespace
     3  metadata:
     4    labels:
     5      istio-injection: enabled
     6    name: ns-override
     7  ---
     8  apiVersion: v1
     9  kind: Namespace
    10  metadata:
    11    labels:
    12      istio-injection: enabled
    13    name: workload-override
    14  ---
    15  # ProxyConfig for root namespace
    16  apiVersion: networking.istio.io/v1beta1
    17  kind: ProxyConfig
    18  metadata:
    19    name: valid-example-pc
    20    namespace: istio-system
    21  ---
    22  # ProxyConfig for ns-override namespace
    23  apiVersion: networking.istio.io/v1beta1
    24  kind: ProxyConfig
    25  metadata:
    26    name: valid-example-pc
    27    namespace: ns-override
    28  spec:
    29    image:
    30      imageType: distroless
    31  ---
    32  # ProxyConfig for workload-override namespace
    33  apiVersion: networking.istio.io/v1beta1
    34  kind: ProxyConfig
    35  metadata:
    36    name: valid-example-pc
    37    namespace: workload-override
    38  spec:
    39    selector:
    40      matchLabels:
    41        app: details
    42        workload: details
    43    image:
    44      imageType: distroless
    45  ---
    46  # Pod with ProxyConfig for ns-override namespace should not get a warning.
    47  apiVersion: v1
    48  kind: Pod
    49  metadata:
    50    labels:
    51      app: details
    52    name: details-v1-pod-ns-override
    53    namespace: ns-override
    54  spec:
    55    containers:
    56    - image: docker.io/istio/examples-bookinfo-details-v1:1.15.0
    57      name: details
    58    - image: docker.io/istio/proxyv2:1.3.1-distroless
    59      name: istio-proxy
    60  ---
    61  # Pod with ProxyConfig for workload-override namespace should not get a warning.
    62  apiVersion: v1
    63  kind: Pod
    64  metadata:
    65    labels:
    66      app: details
    67      workload: details
    68    name: details-v1-pod-workload-override
    69    namespace: workload-override
    70  spec:
    71    containers:
    72    - image: docker.io/istio/examples-bookinfo-details-v1:1.15.0
    73      name: details
    74    - image: docker.io/istio/proxyv2:1.3.1-distroless
    75      name: istio-proxy
    76  ---
    77  apiVersion: v1
    78  kind: Namespace
    79  metadata:
    80    labels:
    81      istio-injection: enabled
    82    name: annotation-override
    83  ---
    84  # Pod with annotation override should not get a warning.
    85  apiVersion: v1
    86  kind: Pod
    87  metadata:
    88    annotations:
    89      proxy.istio.io/config: |
    90        image:
    91          imageType: distroless
    92    labels:
    93      app: details
    94    name: details-v1-pod-annotation-override
    95    namespace: annotation-override
    96  spec:
    97    containers:
    98    - image: docker.io/istio/examples-bookinfo-details-v1:1.15.0
    99      name: details
   100    - image: docker.io/istio/proxyv2:1.3.1-distroless
   101      name: istio-proxy