mirror of https://github.com/linkerd/linkerd2.git
150 lines
4.6 KiB
Plaintext
150 lines
4.6 KiB
Plaintext
apiVersion: apps/v1beta1
|
|
kind: Deployment
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: inject-test-terminus
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: inject-test-terminus
|
|
strategy: {}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
config.linkerd.io/admin-port: "789"
|
|
config.linkerd.io/control-port: "123"
|
|
config.linkerd.io/disable-identity: "true"
|
|
config.linkerd.io/disable-tap: "true"
|
|
config.linkerd.io/enable-external-profiles: "true"
|
|
config.linkerd.io/image-pull-policy: Never
|
|
config.linkerd.io/inbound-port: "678"
|
|
config.linkerd.io/init-image: init-image
|
|
config.linkerd.io/outbound-port: "890"
|
|
config.linkerd.io/proxy-cpu-limit: 20m
|
|
config.linkerd.io/proxy-cpu-request: 10m
|
|
config.linkerd.io/proxy-image: proxy-image
|
|
config.linkerd.io/proxy-log-level: warn
|
|
config.linkerd.io/proxy-memory-limit: 20Mi
|
|
config.linkerd.io/proxy-memory-request: 10Mi
|
|
config.linkerd.io/proxy-uid: "1337"
|
|
config.linkerd.io/proxy-version: proxy-version
|
|
config.linkerd.io/skip-inbound-ports: 234,345
|
|
config.linkerd.io/skip-outbound-ports: 456,567
|
|
linkerd.io/created-by: fake # this gets removed during testing
|
|
linkerd.io/identity-mode: disabled
|
|
linkerd.io/proxy-version: fake # this gets removed during testing
|
|
creationTimestamp: null
|
|
labels:
|
|
app: inject-test-terminus
|
|
linkerd.io/control-plane-ns: fake-ns
|
|
linkerd.io/proxy-deployment: inject-test-terminus
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- terminus
|
|
- --grpc-server-port
|
|
- "9090"
|
|
- --response-text
|
|
- BANANA
|
|
image: buoyantio/bb:v0.0.5
|
|
name: bb-terminus
|
|
ports:
|
|
- containerPort: 9090
|
|
resources: {}
|
|
- env:
|
|
- name: LINKERD2_PROXY_LOG
|
|
value: warn
|
|
- name: LINKERD2_PROXY_DESTINATION_SVC_ADDR
|
|
value: linkerd-destination.fake-ns.svc.cluster.local:8086
|
|
- name: LINKERD2_PROXY_CONTROL_LISTEN_ADDR
|
|
value: 0.0.0.0:123
|
|
- name: LINKERD2_PROXY_ADMIN_LISTEN_ADDR
|
|
value: 0.0.0.0:789
|
|
- name: LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR
|
|
value: 127.0.0.1:890
|
|
- name: LINKERD2_PROXY_INBOUND_LISTEN_ADDR
|
|
value: 0.0.0.0:678
|
|
- name: LINKERD2_PROXY_DESTINATION_GET_SUFFIXES
|
|
value: .
|
|
- name: LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES
|
|
value: .
|
|
- name: LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE
|
|
value: 10000ms
|
|
- name: LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE
|
|
value: 10000ms
|
|
- name: _pod_ns
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: LINKERD2_PROXY_DESTINATION_CONTEXT
|
|
value: ns:$(_pod_ns)
|
|
- name: LINKERD2_PROXY_IDENTITY_DISABLED
|
|
value: disabled
|
|
- name: LINKERD2_PROXY_TAP_DISABLED
|
|
value: "true"
|
|
image: proxy-image:proxy-version
|
|
imagePullPolicy: Never
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /metrics
|
|
port: 789
|
|
initialDelaySeconds: 10
|
|
name: linkerd-proxy
|
|
ports:
|
|
- containerPort: 678
|
|
name: linkerd-proxy
|
|
- containerPort: 789
|
|
name: linkerd-admin
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /ready
|
|
port: 789
|
|
initialDelaySeconds: 2
|
|
resources:
|
|
limits:
|
|
cpu: 20m
|
|
memory: 20Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 10Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsUser: 1337
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
initContainers:
|
|
- args:
|
|
- --incoming-proxy-port
|
|
- "678"
|
|
- --outgoing-proxy-port
|
|
- "890"
|
|
- --proxy-uid
|
|
- "1337"
|
|
- --inbound-ports-to-ignore
|
|
- 123,789,234,345
|
|
- --outbound-ports-to-ignore
|
|
- 456,567
|
|
image: init-image:fake # this is replaced during testing
|
|
imagePullPolicy: Never
|
|
name: linkerd-init
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 50Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 10Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
add:
|
|
- NET_ADMIN
|
|
- NET_RAW
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
status: {}
|
|
---
|