mirror of https://github.com/linkerd/linkerd2.git
114 lines
3.2 KiB
YAML
114 lines
3.2 KiB
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
annotations:
|
|
linkerd.io/created-by: linkerd/cli undefined
|
|
linkerd.io/proxy-version: testinjectversion
|
|
creationTimestamp: null
|
|
labels:
|
|
app: vote-bot
|
|
linkerd.io/control-plane-ns: linkerd
|
|
name: vote-bot
|
|
namespace: emojivoto
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- emojivoto-vote-bot
|
|
env:
|
|
- name: WEB_HOST
|
|
value: web-svc.emojivoto:80
|
|
image: buoyantio/emojivoto-web:v3
|
|
name: vote-bot
|
|
resources: {}
|
|
- env:
|
|
- name: LINKERD2_PROXY_LOG
|
|
value: warn,linkerd2_proxy=info
|
|
- name: LINKERD2_PROXY_BIND_TIMEOUT
|
|
value: 10s
|
|
- name: LINKERD2_PROXY_CONTROL_URL
|
|
value: tcp://proxy-api.linkerd.svc.cluster.local:8086
|
|
- name: LINKERD2_PROXY_CONTROL_LISTENER
|
|
value: tcp://0.0.0.0:4190
|
|
- name: LINKERD2_PROXY_METRICS_LISTENER
|
|
value: tcp://0.0.0.0:4191
|
|
- name: LINKERD2_PROXY_OUTBOUND_LISTENER
|
|
value: tcp://127.0.0.1:4140
|
|
- name: LINKERD2_PROXY_INBOUND_LISTENER
|
|
value: tcp://0.0.0.0:4143
|
|
- name: LINKERD2_PROXY_POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: LINKERD2_PROXY_TLS_TRUST_ANCHORS
|
|
value: /var/linkerd-io/trust-anchors/trust-anchors.pem
|
|
- name: LINKERD2_PROXY_TLS_CERT
|
|
value: /var/linkerd-io/identity/certificate.crt
|
|
- name: LINKERD2_PROXY_TLS_PRIVATE_KEY
|
|
value: /var/linkerd-io/identity/private-key.p8
|
|
- name: LINKERD2_PROXY_TLS_POD_IDENTITY
|
|
value: vote-bot.pod.$LINKERD2_PROXY_POD_NAMESPACE.linkerd-managed.linkerd.svc.cluster.local
|
|
- name: LINKERD2_PROXY_CONTROLLER_NAMESPACE
|
|
value: linkerd
|
|
- name: LINKERD2_PROXY_TLS_CONTROLLER_IDENTITY
|
|
value: controller.deployment.linkerd.linkerd-managed.linkerd.svc.cluster.local
|
|
image: gcr.io/linkerd-io/proxy:testinjectversion
|
|
imagePullPolicy: IfNotPresent
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /metrics
|
|
port: 4191
|
|
initialDelaySeconds: 10
|
|
name: linkerd-proxy
|
|
ports:
|
|
- containerPort: 4143
|
|
name: linkerd-proxy
|
|
- containerPort: 4191
|
|
name: linkerd-metrics
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /metrics
|
|
port: 4191
|
|
initialDelaySeconds: 10
|
|
resources: {}
|
|
securityContext:
|
|
runAsUser: 2102
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
volumeMounts:
|
|
- mountPath: /var/linkerd-io/trust-anchors
|
|
name: linkerd-trust-anchors
|
|
readOnly: true
|
|
- mountPath: /var/linkerd-io/identity
|
|
name: linkerd-secrets
|
|
readOnly: true
|
|
initContainers:
|
|
- args:
|
|
- --incoming-proxy-port
|
|
- "4143"
|
|
- --outgoing-proxy-port
|
|
- "4140"
|
|
- --proxy-uid
|
|
- "2102"
|
|
- --inbound-ports-to-ignore
|
|
- 4190,4191
|
|
image: gcr.io/linkerd-io/proxy-init:testinjectversion
|
|
imagePullPolicy: IfNotPresent
|
|
name: linkerd-init
|
|
resources: {}
|
|
securityContext:
|
|
capabilities:
|
|
add:
|
|
- NET_ADMIN
|
|
privileged: false
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
volumes:
|
|
- configMap:
|
|
name: linkerd-ca-bundle
|
|
optional: true
|
|
name: linkerd-trust-anchors
|
|
- name: linkerd-secrets
|
|
secret:
|
|
optional: true
|
|
secretName: vote-bot-pod-tls-linkerd-io
|
|
status: {}
|
|
---
|