malani

Untitled

Mar 9th, 2020
422
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.89 KB | None | 0 0
  1. {
  2. "apiVersion": "apps/v1",
  3. "kind": "Deployment",
  4. "metadata": {
  5. "labels": {
  6. "app": "1493e89",
  7. "commit": "1493e89"
  8. },
  9. "name": "1493e89"
  10. },
  11. "spec": {
  12. "replicas": 1,
  13. "selector": {
  14. "matchLabels": {
  15. "app": "1493e89"
  16. }
  17. },
  18. "template": {
  19. "metadata": {
  20. "annotations": {
  21. "linkerd.io/created-by": "linkerd/cli dev-e792141a-root",
  22. "linkerd.io/identity-mode": "default",
  23. "linkerd.io/proxy-version": "git-e792141a"
  24. },
  25. "labels": {
  26. "app": "1493e89",
  27. "commit": "1493e89",
  28. "linkerd.io/control-plane-ns": "linkerd",
  29. "linkerd.io/proxy-deployment": "1493e89"
  30. },
  31. "name": "1493e89"
  32. },
  33. "spec": {
  34. "containers": [
  35. {
  36. "image": "nginx",
  37. "name": "1493e89"
  38. },
  39. {
  40. "env": [
  41. {
  42. "name": "LINKERD2_PROXY_LOG",
  43. "value": "warn,linkerd=info"
  44. },
  45. {
  46. "name": "LINKERD2_PROXY_DESTINATION_SVC_ADDR",
  47. "value": "linkerd-dst.linkerd.svc.cluster.local:8086"
  48. },
  49. {
  50. "name": "LINKERD2_PROXY_CONTROL_LISTEN_ADDR",
  51. "value": "0.0.0.0:4190"
  52. },
  53. {
  54. "name": "LINKERD2_PROXY_ADMIN_LISTEN_ADDR",
  55. "value": "0.0.0.0:4191"
  56. },
  57. {
  58. "name": "LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR",
  59. "value": "127.0.0.1:4140"
  60. },
  61. {
  62. "name": "LINKERD2_PROXY_INBOUND_LISTEN_ADDR",
  63. "value": "0.0.0.0:4143"
  64. },
  65. {
  66. "name": "LINKERD2_PROXY_DESTINATION_GET_SUFFIXES",
  67. "value": "svc.cluster.local."
  68. },
  69. {
  70. "name": "LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES",
  71. "value": "svc.cluster.local."
  72. },
  73. {
  74. "name": "LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE",
  75. "value": "10000ms"
  76. },
  77. {
  78. "name": "LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE",
  79. "value": "10000ms"
  80. },
  81. {
  82. "name": "_pod_ns",
  83. "valueFrom": {
  84. "fieldRef": {
  85. "fieldPath": "metadata.namespace"
  86. }
  87. }
  88. },
  89. {
  90. "name": "LINKERD2_PROXY_DESTINATION_CONTEXT",
  91. "value": "ns:$(_pod_ns)"
  92. },
  93. {
  94. "name": "LINKERD2_PROXY_IDENTITY_DIR",
  95. "value": "/var/run/linkerd/identity/end-entity"
  96. },
  97. {
  98. "name": "LINKERD2_PROXY_IDENTITY_TRUST_ANCHORS",
  99. "value": "-----BEGIN CERTIFICATE-----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\ndyipy99qHw==\n-----END CERTIFICATE-----\n"
  100. },
  101. {
  102. "name": "LINKERD2_PROXY_IDENTITY_TOKEN_FILE",
  103. "value": "/var/run/secrets/kubernetes.io/serviceaccount/token"
  104. },
  105. {
  106. "name": "LINKERD2_PROXY_IDENTITY_SVC_ADDR",
  107. "value": "linkerd-identity.linkerd.svc.cluster.local:8080"
  108. },
  109. {
  110. "name": "_pod_sa",
  111. "valueFrom": {
  112. "fieldRef": {
  113. "fieldPath": "spec.serviceAccountName"
  114. }
  115. }
  116. },
  117. {
  118. "name": "_l5d_ns",
  119. "value": "linkerd"
  120. },
  121. {
  122. "name": "_l5d_trustdomain",
  123. "value": "cluster.local"
  124. },
  125. {
  126. "name": "LINKERD2_PROXY_IDENTITY_LOCAL_NAME",
  127. "value": "$(_pod_sa).$(_pod_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)"
  128. },
  129. {
  130. "name": "LINKERD2_PROXY_IDENTITY_SVC_NAME",
  131. "value": "linkerd-identity.$(_l5d_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)"
  132. },
  133. {
  134. "name": "LINKERD2_PROXY_DESTINATION_SVC_NAME",
  135. "value": "linkerd-destination.$(_l5d_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)"
  136. },
  137. {
  138. "name": "LINKERD2_PROXY_TAP_SVC_NAME",
  139. "value": "linkerd-tap.$(_l5d_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)"
  140. }
  141. ],
  142. "image": "gcr.io/linkerd-io/proxy:git-e792141a",
  143. "imagePullPolicy": "IfNotPresent",
  144. "livenessProbe": {
  145. "httpGet": {
  146. "path": "/metrics",
  147. "port": 4191
  148. },
  149. "initialDelaySeconds": 10
  150. },
  151. "name": "linkerd-proxy",
  152. "ports": [
  153. {
  154. "containerPort": 4143,
  155. "name": "linkerd-proxy"
  156. },
  157. {
  158. "containerPort": 4191,
  159. "name": "linkerd-admin"
  160. }
  161. ],
  162. "readinessProbe": {
  163. "httpGet": {
  164. "path": "/ready",
  165. "port": 4191
  166. },
  167. "initialDelaySeconds": 2
  168. },
  169. "resources": null,
  170. "securityContext": {
  171. "allowPrivilegeEscalation": false,
  172. "readOnlyRootFilesystem": true,
  173. "runAsUser": 2102
  174. },
  175. "terminationMessagePolicy": "FallbackToLogsOnError",
  176. "volumeMounts": [
  177. {
  178. "mountPath": "/var/run/linkerd/identity/end-entity",
  179. "name": "linkerd-identity-end-entity"
  180. }
  181. ]
  182. }
  183. ],
  184. "initContainers": [
  185. {
  186. "args": [
  187. "--incoming-proxy-port",
  188. "4143",
  189. "--outgoing-proxy-port",
  190. "4140",
  191. "--proxy-uid",
  192. "2102",
  193. "--inbound-ports-to-ignore",
  194. "4190,4191"
  195. ],
  196. "image": "gcr.io/linkerd-io/proxy-init:v1.3.1",
  197. "imagePullPolicy": "IfNotPresent",
  198. "name": "linkerd-init",
  199. "resources": {
  200. "limits": {
  201. "cpu": "100m",
  202. "memory": "50Mi"
  203. },
  204. "requests": {
  205. "cpu": "10m",
  206. "memory": "10Mi"
  207. }
  208. },
  209. "securityContext": {
  210. "allowPrivilegeEscalation": false,
  211. "capabilities": {
  212. "add": [
  213. "NET_ADMIN",
  214. "NET_RAW"
  215. ]
  216. },
  217. "privileged": false,
  218. "readOnlyRootFilesystem": true,
  219. "runAsNonRoot": false,
  220. "runAsUser": 0
  221. },
  222. "terminationMessagePolicy": "FallbackToLogsOnError"
  223. }
  224. ],
  225. "volumes": [
  226. {
  227. "name": "linkerd-identity-end-entity",
  228. "emptyDir": {
  229. "medium": "Memory"
  230. }
  231. }
  232. ]
  233. }
  234. }
  235. }
  236. }---
Add Comment
Please, Sign In to add comment