mirror of https://github.com/linkerd/linkerd2.git
122 lines
3.6 KiB
Plaintext
122 lines
3.6 KiB
Plaintext
apiVersion: apps/v1beta1
|
|
kind: Deployment
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: inject-test-terminus
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: inject-test-terminus
|
|
strategy: {}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
config.linkerd.io/disable-identity: "true"
|
|
config.linkerd.io/init-image: init-image
|
|
config.linkerd.io/proxy-image: proxy-image
|
|
config.linkerd.io/proxy-version: proxy-version
|
|
linkerd.io/created-by: fake # this gets removed during testing
|
|
linkerd.io/identity-mode: disabled
|
|
linkerd.io/proxy-version: fake # this gets removed during testing
|
|
creationTimestamp: null
|
|
labels:
|
|
app: inject-test-terminus
|
|
linkerd.io/control-plane-ns: fake-ns
|
|
linkerd.io/proxy-deployment: inject-test-terminus
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- terminus
|
|
- --grpc-server-port
|
|
- "9090"
|
|
- --response-text
|
|
- BANANA
|
|
image: buoyantio/bb:v0.0.5
|
|
name: bb-terminus
|
|
ports:
|
|
- containerPort: 9090
|
|
resources: {}
|
|
- env:
|
|
- name: LINKERD2_PROXY_LOG
|
|
value: warn,linkerd2_proxy=info
|
|
- name: LINKERD2_PROXY_DESTINATION_SVC_ADDR
|
|
value: linkerd-destination.fake-ns.svc.cluster.local:8086
|
|
- name: LINKERD2_PROXY_CONTROL_LISTEN_ADDR
|
|
value: 0.0.0.0:4190
|
|
- name: LINKERD2_PROXY_ADMIN_LISTEN_ADDR
|
|
value: 0.0.0.0:4191
|
|
- name: LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR
|
|
value: 127.0.0.1:4140
|
|
- name: LINKERD2_PROXY_INBOUND_LISTEN_ADDR
|
|
value: 0.0.0.0:4143
|
|
- name: LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES
|
|
value: svc.cluster.local.
|
|
- name: LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE
|
|
value: 10000ms
|
|
- name: LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE
|
|
value: 10000ms
|
|
- name: _pod_ns
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: LINKERD2_PROXY_DESTINATION_CONTEXT
|
|
value: ns:$(_pod_ns)
|
|
- name: LINKERD2_PROXY_IDENTITY_DISABLED
|
|
value: disabled
|
|
image: proxy-image:proxy-version
|
|
imagePullPolicy: IfNotPresent
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /metrics
|
|
port: 4191
|
|
initialDelaySeconds: 10
|
|
name: linkerd-proxy
|
|
ports:
|
|
- containerPort: 4143
|
|
name: linkerd-proxy
|
|
- containerPort: 4191
|
|
name: linkerd-admin
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /ready
|
|
port: 4191
|
|
initialDelaySeconds: 2
|
|
resources: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsUser: 2102
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
initContainers:
|
|
- args:
|
|
- --incoming-proxy-port
|
|
- "4143"
|
|
- --outgoing-proxy-port
|
|
- "4140"
|
|
- --proxy-uid
|
|
- "2102"
|
|
- --inbound-ports-to-ignore
|
|
- 4190,4191
|
|
image: init-image:fake # this is replaced during testing
|
|
imagePullPolicy: IfNotPresent
|
|
name: linkerd-init
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 50Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 10Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
add:
|
|
- NET_ADMIN
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
terminationMessagePolicy: FallbackToLogsOnError
|
|
status: {}
|
|
---
|