mirror of https://github.com/linkerd/linkerd2.git
219 lines
5.2 KiB
JSON
219 lines
5.2 KiB
JSON
[
|
|
{
|
|
"op": "add",
|
|
"path": "/metadata/annotations/linkerd.io~1identity-mode",
|
|
"value": "disabled"
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/metadata/annotations/linkerd.io~1proxy-version",
|
|
"value": "dev-undefined"
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/metadata/labels/linkerd.io~1control-plane-ns",
|
|
"value": "linkerd"
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/metadata/labels/linkerd.io~1proxy-deployment",
|
|
"value": "owner-deployment"
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/metadata/labels/linkerd.io~1workload-ns",
|
|
"value": "kube-public"
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/volumes",
|
|
"value": []
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/initContainers",
|
|
"value": []
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/volumes/-",
|
|
"value": {
|
|
"emptyDir": {},
|
|
"name": "linkerd-proxy-init-xtables-lock"
|
|
}
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/initContainers/-",
|
|
"value": {
|
|
"args": [
|
|
"--incoming-proxy-port",
|
|
"4143",
|
|
"--outgoing-proxy-port",
|
|
"4140",
|
|
"--proxy-uid",
|
|
"2102",
|
|
"--inbound-ports-to-ignore",
|
|
"4190,4191,25,443,587,3306,11211",
|
|
"--outbound-ports-to-ignore",
|
|
"25,443,587,3306,11211"
|
|
],
|
|
"image": "ghcr.io/linkerd/proxy-init:v1.3.6",
|
|
"imagePullPolicy": "IfNotPresent",
|
|
"name": "linkerd-init",
|
|
"resources": {
|
|
"limits": {
|
|
"cpu": "100m",
|
|
"memory": "50Mi"
|
|
},
|
|
"requests": {
|
|
"cpu": "10m",
|
|
"memory": "10Mi"
|
|
}
|
|
},
|
|
"securityContext": {
|
|
"allowPrivilegeEscalation": false,
|
|
"capabilities": {
|
|
"add": [
|
|
"NET_ADMIN",
|
|
"NET_RAW"
|
|
]
|
|
},
|
|
"privileged": false,
|
|
"readOnlyRootFilesystem": true,
|
|
"runAsNonRoot": false,
|
|
"runAsUser": 0
|
|
},
|
|
"terminationMessagePolicy": "FallbackToLogsOnError",
|
|
"volumeMounts": [
|
|
{
|
|
"mountPath": "/run",
|
|
"name": "linkerd-proxy-init-xtables-lock"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/containers/-",
|
|
"value": {
|
|
"env": [
|
|
{
|
|
"name": "LINKERD2_PROXY_LOG",
|
|
"value": "warn,linkerd=info"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_LOG_FORMAT",
|
|
"value": "plain"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_DESTINATION_SVC_ADDR",
|
|
"value": "linkerd-dst-headless.linkerd.svc.cluster.local:8086"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_DESTINATION_PROFILE_NETWORKS",
|
|
"value": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_INBOUND_CONNECT_TIMEOUT",
|
|
"value": "100ms"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_OUTBOUND_CONNECT_TIMEOUT",
|
|
"value": "1000ms"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_CONTROL_LISTEN_ADDR",
|
|
"value": "0.0.0.0:4190"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_ADMIN_LISTEN_ADDR",
|
|
"value": "0.0.0.0:4191"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR",
|
|
"value": "127.0.0.1:4140"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_INBOUND_LISTEN_ADDR",
|
|
"value": "0.0.0.0:4143"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES",
|
|
"value": "svc.cluster.local."
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE",
|
|
"value": "10000ms"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE",
|
|
"value": "10000ms"
|
|
},
|
|
{
|
|
"name": "_pod_ns",
|
|
"valueFrom": {
|
|
"fieldRef": {
|
|
"fieldPath": "metadata.namespace"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"name": "_pod_nodeName",
|
|
"valueFrom": {
|
|
"fieldRef": {
|
|
"fieldPath": "spec.nodeName"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_DESTINATION_CONTEXT",
|
|
"value": "{\"ns\":\"$(_pod_ns)\", \"nodeName\":\"$(_pod_nodeName)\"}\n"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_IDENTITY_DISABLED",
|
|
"value": "disabled"
|
|
},
|
|
{
|
|
"name": "LINKERD2_PROXY_TAP_DISABLED",
|
|
"value": "true"
|
|
}
|
|
],
|
|
"image": "ghcr.io/linkerd/proxy:dev-undefined",
|
|
"imagePullPolicy": "IfNotPresent",
|
|
"livenessProbe": {
|
|
"httpGet": {
|
|
"path": "/live",
|
|
"port": 4191
|
|
},
|
|
"initialDelaySeconds": 10
|
|
},
|
|
"name": "linkerd-proxy",
|
|
"ports": [
|
|
{
|
|
"containerPort": 4143,
|
|
"name": "linkerd-proxy"
|
|
},
|
|
{
|
|
"containerPort": 4191,
|
|
"name": "linkerd-admin"
|
|
}
|
|
],
|
|
"readinessProbe": {
|
|
"httpGet": {
|
|
"path": "/ready",
|
|
"port": 4191
|
|
},
|
|
"initialDelaySeconds": 2
|
|
},
|
|
"resources": null,
|
|
"securityContext": {
|
|
"allowPrivilegeEscalation": false,
|
|
"readOnlyRootFilesystem": true,
|
|
"runAsUser": 2102
|
|
},
|
|
"terminationMessagePolicy": "FallbackToLogsOnError"
|
|
}
|
|
}
|
|
]
|