mirror of https://github.com/linkerd/linkerd2.git
				
				
				
			
		
			
				
	
	
		
			229 lines
		
	
	
		
			5.4 KiB
		
	
	
	
		
			JSON
		
	
	
	
			
		
		
	
	
			229 lines
		
	
	
		
			5.4 KiB
		
	
	
	
		
			JSON
		
	
	
	
[
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/metadata/annotations/linkerd.io~1identity-mode",
 | 
						|
    "value": "disabled"
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/metadata/annotations/linkerd.io~1proxy-version",
 | 
						|
    "value": "dev-undefined"
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/metadata/labels/linkerd.io~1control-plane-ns",
 | 
						|
    "value": "linkerd"
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/metadata/labels/linkerd.io~1proxy-deployment",
 | 
						|
    "value": "owner-deployment"
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/metadata/labels/linkerd.io~1workload-ns",
 | 
						|
    "value": "kube-public"
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/volumes",
 | 
						|
    "value": []
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/initContainers",
 | 
						|
    "value": []
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/volumes/-",
 | 
						|
    "value": {
 | 
						|
      "emptyDir": {},
 | 
						|
      "name": "linkerd-proxy-init-xtables-lock"
 | 
						|
    }
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/initContainers/-",
 | 
						|
    "value": {
 | 
						|
      "args": [
 | 
						|
        "--incoming-proxy-port",
 | 
						|
        "4143",
 | 
						|
        "--outgoing-proxy-port",
 | 
						|
        "4140",
 | 
						|
        "--proxy-uid",
 | 
						|
        "2102",
 | 
						|
        "--inbound-ports-to-ignore",
 | 
						|
        "4190,4191,25,443,587,3306,11211",
 | 
						|
        "--outbound-ports-to-ignore",
 | 
						|
        "25,443,587,3306,11211"
 | 
						|
      ],
 | 
						|
      "image": "ghcr.io/linkerd/proxy-init:v1.3.6",
 | 
						|
      "imagePullPolicy": "IfNotPresent",
 | 
						|
      "name": "linkerd-init",
 | 
						|
      "resources": {
 | 
						|
        "limits": {
 | 
						|
          "cpu": "100m",
 | 
						|
          "memory": "50Mi"
 | 
						|
        },
 | 
						|
        "requests": {
 | 
						|
          "cpu": "10m",
 | 
						|
          "memory": "10Mi"
 | 
						|
        }
 | 
						|
      },
 | 
						|
      "securityContext": {
 | 
						|
        "allowPrivilegeEscalation": false,
 | 
						|
        "capabilities": {
 | 
						|
          "add": [
 | 
						|
            "NET_ADMIN",
 | 
						|
            "NET_RAW"
 | 
						|
          ]
 | 
						|
        },
 | 
						|
        "privileged": false,
 | 
						|
        "readOnlyRootFilesystem": true,
 | 
						|
        "runAsNonRoot": false,
 | 
						|
        "runAsUser": 0
 | 
						|
      },
 | 
						|
      "terminationMessagePolicy": "FallbackToLogsOnError",
 | 
						|
      "volumeMounts": [
 | 
						|
        {
 | 
						|
          "mountPath": "/run",
 | 
						|
          "name": "linkerd-proxy-init-xtables-lock"
 | 
						|
        }
 | 
						|
      ]
 | 
						|
    }
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/containers/-",
 | 
						|
    "value": {
 | 
						|
      "image": "ghcr.io/linkerd/debug:dev-undefined",
 | 
						|
      "imagePullPolicy": "IfNotPresent",
 | 
						|
      "name": "linkerd-debug",
 | 
						|
      "terminationMessagePolicy": "FallbackToLogsOnError"
 | 
						|
    }
 | 
						|
  },
 | 
						|
  {
 | 
						|
    "op": "add",
 | 
						|
    "path": "/spec/containers/-",
 | 
						|
    "value": {
 | 
						|
      "env": [
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_LOG",
 | 
						|
          "value": "warn,linkerd=info"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_LOG_FORMAT",
 | 
						|
          "value": "plain"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_DESTINATION_SVC_ADDR",
 | 
						|
          "value": "linkerd-dst-headless.linkerd.svc.cluster.local:8086"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_DESTINATION_PROFILE_NETWORKS",
 | 
						|
          "value": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_INBOUND_CONNECT_TIMEOUT",
 | 
						|
          "value": "100ms"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_OUTBOUND_CONNECT_TIMEOUT",
 | 
						|
          "value": "1000ms"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_CONTROL_LISTEN_ADDR",
 | 
						|
          "value": "0.0.0.0:4190"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_ADMIN_LISTEN_ADDR",
 | 
						|
          "value": "0.0.0.0:4191"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR",
 | 
						|
          "value": "127.0.0.1:4140"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_INBOUND_LISTEN_ADDR",
 | 
						|
          "value": "0.0.0.0:4143"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES",
 | 
						|
          "value": "svc.cluster.local."
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE",
 | 
						|
          "value": "10000ms"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE",
 | 
						|
          "value": "10000ms"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "_pod_ns",
 | 
						|
          "valueFrom": {
 | 
						|
            "fieldRef": {
 | 
						|
              "fieldPath": "metadata.namespace"
 | 
						|
            }
 | 
						|
          }
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "_pod_nodeName",
 | 
						|
          "valueFrom": {
 | 
						|
            "fieldRef": {
 | 
						|
              "fieldPath": "spec.nodeName"
 | 
						|
            }
 | 
						|
          }
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_DESTINATION_CONTEXT",
 | 
						|
          "value": "{\"ns\":\"$(_pod_ns)\", \"nodeName\":\"$(_pod_nodeName)\"}\n"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_IDENTITY_DISABLED",
 | 
						|
          "value": "disabled"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "name": "LINKERD2_PROXY_TAP_DISABLED",
 | 
						|
          "value": "true"
 | 
						|
        }
 | 
						|
      ],
 | 
						|
      "image": "ghcr.io/linkerd/proxy:dev-undefined",
 | 
						|
      "imagePullPolicy": "IfNotPresent",
 | 
						|
      "livenessProbe": {
 | 
						|
        "httpGet": {
 | 
						|
          "path": "/live",
 | 
						|
          "port": 4191
 | 
						|
        },
 | 
						|
        "initialDelaySeconds": 10
 | 
						|
      },
 | 
						|
      "name": "linkerd-proxy",
 | 
						|
      "ports": [
 | 
						|
        {
 | 
						|
          "containerPort": 4143,
 | 
						|
          "name": "linkerd-proxy"
 | 
						|
        },
 | 
						|
        {
 | 
						|
          "containerPort": 4191,
 | 
						|
          "name": "linkerd-admin"
 | 
						|
        }
 | 
						|
      ],
 | 
						|
      "readinessProbe": {
 | 
						|
        "httpGet": {
 | 
						|
          "path": "/ready",
 | 
						|
          "port": 4191
 | 
						|
        },
 | 
						|
        "initialDelaySeconds": 2
 | 
						|
      },
 | 
						|
      "resources": null,
 | 
						|
      "securityContext": {
 | 
						|
        "allowPrivilegeEscalation": false,
 | 
						|
        "readOnlyRootFilesystem": true,
 | 
						|
        "runAsUser": 2102
 | 
						|
      },
 | 
						|
      "terminationMessagePolicy": "FallbackToLogsOnError"
 | 
						|
    }
 | 
						|
  }
 | 
						|
]
 |