Skip to content
This repository was archived by the owner on Mar 24, 2023. It is now read-only.

Commit d7db438

Browse files
Rob0hRob0h
authored
Fix for Istio 1.0.3 (#686)
1 parent d5c597a commit d7db438

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

60 files changed

+9446
-24
lines changed

‎integration/init/istio-1.0.3/expected/.ship/state.json

+17
Large diffs are not rendered by default.

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/clusterrole.yaml

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
---
2+
# Source: istio/charts/galley/templates/clusterrole.yaml
3+
apiVersion: rbac.authorization.k8s.io/v1beta1
4+
kind: ClusterRole
5+
metadata:
6+
name: istio-galley-default
7+
labels:
8+
app: istio-galley
9+
chart: galley-1.0.3
10+
heritage: Tiller
11+
release: istio
12+
rules:
13+
- apiGroups: ["admissionregistration.k8s.io"]
14+
resources: ["validatingwebhookconfigurations"]
15+
verbs: ["*"]
16+
- apiGroups: ["config.istio.io"] # istio mixer CRD watcher
17+
resources: ["*"]
18+
verbs: ["get", "list", "watch"]
19+
- apiGroups: ["*"]
20+
resources: ["deployments"]
21+
resourceNames: ["istio-galley"]
22+
verbs: ["get"]
23+
- apiGroups: ["*"]
24+
resources: ["endpoints"]
25+
resourceNames: ["istio-galley"]
26+
verbs: ["get"]

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/clusterrolebinding.yaml

+19
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
# Source: istio/charts/galley/templates/clusterrolebinding.yaml
3+
apiVersion: rbac.authorization.k8s.io/v1beta1
4+
kind: ClusterRoleBinding
5+
metadata:
6+
name: istio-galley-admin-role-binding-default
7+
labels:
8+
app: istio-galley
9+
chart: galley-1.0.3
10+
heritage: Tiller
11+
release: istio
12+
roleRef:
13+
apiGroup: rbac.authorization.k8s.io
14+
kind: ClusterRole
15+
name: istio-galley-default
16+
subjects:
17+
- kind: ServiceAccount
18+
name: istio-galley-service-account
19+
namespace: default

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/configmap.yaml

+126
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
---
2+
# Source: istio/charts/galley/templates/configmap.yaml
3+
apiVersion: v1
4+
kind: ConfigMap
5+
metadata:
6+
name: istio-galley-configuration
7+
namespace: default
8+
labels:
9+
app: istio-galley
10+
chart: galley-1.0.3
11+
release: istio
12+
heritage: Tiller
13+
istio: mixer
14+
data:
15+
validatingwebhookconfiguration.yaml: |-
16+
apiVersion: admissionregistration.k8s.io/v1beta1
17+
kind: ValidatingWebhookConfiguration
18+
metadata:
19+
name: istio-galley
20+
namespace: default
21+
labels:
22+
app: istio-galley
23+
chart: galley-1.0.3
24+
release: istio
25+
heritage: Tiller
26+
webhooks:
27+
- name: pilot.validation.istio.io
28+
clientConfig:
29+
service:
30+
name: istio-galley
31+
namespace: default
32+
path: "/admitpilot"
33+
caBundle: ""
34+
rules:
35+
- operations:
36+
- CREATE
37+
- UPDATE
38+
apiGroups:
39+
- config.istio.io
40+
apiVersions:
41+
- v1alpha2
42+
resources:
43+
- httpapispecs
44+
- httpapispecbindings
45+
- quotaspecs
46+
- quotaspecbindings
47+
- operations:
48+
- CREATE
49+
- UPDATE
50+
apiGroups:
51+
- rbac.istio.io
52+
apiVersions:
53+
- "*"
54+
resources:
55+
- "*"
56+
- operations:
57+
- CREATE
58+
- UPDATE
59+
apiGroups:
60+
- authentication.istio.io
61+
apiVersions:
62+
- "*"
63+
resources:
64+
- "*"
65+
- operations:
66+
- CREATE
67+
- UPDATE
68+
apiGroups:
69+
- networking.istio.io
70+
apiVersions:
71+
- "*"
72+
resources:
73+
- destinationrules
74+
- envoyfilters
75+
- gateways
76+
- serviceentries
77+
- virtualservices
78+
failurePolicy: Fail
79+
- name: mixer.validation.istio.io
80+
clientConfig:
81+
service:
82+
name: istio-galley
83+
namespace: default
84+
path: "/admitmixer"
85+
caBundle: ""
86+
rules:
87+
- operations:
88+
- CREATE
89+
- UPDATE
90+
apiGroups:
91+
- config.istio.io
92+
apiVersions:
93+
- v1alpha2
94+
resources:
95+
- rules
96+
- attributemanifests
97+
- circonuses
98+
- deniers
99+
- fluentds
100+
- kubernetesenvs
101+
- listcheckers
102+
- memquotas
103+
- noops
104+
- opas
105+
- prometheuses
106+
- rbacs
107+
- servicecontrols
108+
- solarwindses
109+
- stackdrivers
110+
- cloudwatches
111+
- dogstatsds
112+
- statsds
113+
- stdios
114+
- apikeys
115+
- authorizations
116+
- checknothings
117+
# - kuberneteses
118+
- listentries
119+
- logentries
120+
- metrics
121+
- quotas
122+
- reportnothings
123+
- servicecontrolreports
124+
- tracespans
125+
failurePolicy: Fail
126+

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/deployment.yaml

+115
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,115 @@
1+
---
2+
# Source: istio/charts/galley/templates/deployment.yaml
3+
apiVersion: extensions/v1beta1
4+
kind: Deployment
5+
metadata:
6+
name: istio-galley
7+
namespace: default
8+
labels:
9+
app: galley
10+
chart: galley-1.0.3
11+
release: istio
12+
heritage: Tiller
13+
istio: galley
14+
spec:
15+
replicas: 1
16+
strategy:
17+
rollingUpdate:
18+
maxSurge: 1
19+
maxUnavailable: 0
20+
template:
21+
metadata:
22+
labels:
23+
istio: galley
24+
annotations:
25+
sidecar.istio.io/inject: "false"
26+
scheduler.alpha.kubernetes.io/critical-pod: ""
27+
spec:
28+
serviceAccountName: istio-galley-service-account
29+
containers:
30+
- name: validator
31+
image: "gcr.io/istio-release/galley:release-1.0-latest-daily"
32+
imagePullPolicy: IfNotPresent
33+
ports:
34+
- containerPort: 443
35+
- containerPort: 9093
36+
command:
37+
- /usr/local/bin/galley
38+
- validator
39+
- --deployment-namespace=default
40+
- --caCertFile=/etc/istio/certs/root-cert.pem
41+
- --tlsCertFile=/etc/istio/certs/cert-chain.pem
42+
- --tlsKeyFile=/etc/istio/certs/key.pem
43+
- --healthCheckInterval=1s
44+
- --healthCheckFile=/health
45+
- --webhook-config-file
46+
- /etc/istio/config/validatingwebhookconfiguration.yaml
47+
volumeMounts:
48+
- name: certs
49+
mountPath: /etc/istio/certs
50+
readOnly: true
51+
- name: config
52+
mountPath: /etc/istio/config
53+
readOnly: true
54+
livenessProbe:
55+
exec:
56+
command:
57+
- /usr/local/bin/galley
58+
- probe
59+
- --probe-path=/health
60+
- --interval=10s
61+
initialDelaySeconds: 5
62+
periodSeconds: 5
63+
readinessProbe:
64+
exec:
65+
command:
66+
- /usr/local/bin/galley
67+
- probe
68+
- --probe-path=/health
69+
- --interval=10s
70+
initialDelaySeconds: 5
71+
periodSeconds: 5
72+
resources:
73+
requests:
74+
cpu: 10m
75+
76+
volumes:
77+
- name: certs
78+
secret:
79+
secretName: istio.istio-galley-service-account
80+
- name: config
81+
configMap:
82+
name: istio-galley-configuration
83+
affinity:
84+
nodeAffinity:
85+
requiredDuringSchedulingIgnoredDuringExecution:
86+
nodeSelectorTerms:
87+
- matchExpressions:
88+
- key: beta.kubernetes.io/arch
89+
operator: In
90+
values:
91+
- amd64
92+
- ppc64le
93+
- s390x
94+
preferredDuringSchedulingIgnoredDuringExecution:
95+
- weight: 2
96+
preference:
97+
matchExpressions:
98+
- key: beta.kubernetes.io/arch
99+
operator: In
100+
values:
101+
- amd64
102+
- weight: 2
103+
preference:
104+
matchExpressions:
105+
- key: beta.kubernetes.io/arch
106+
operator: In
107+
values:
108+
- ppc64le
109+
- weight: 2
110+
preference:
111+
matchExpressions:
112+
- key: beta.kubernetes.io/arch
113+
operator: In
114+
values:
115+
- s390x

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/service.yaml

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
# Source: istio/charts/galley/templates/service.yaml
3+
apiVersion: v1
4+
kind: Service
5+
metadata:
6+
name: istio-galley
7+
namespace: default
8+
labels:
9+
istio: galley
10+
spec:
11+
ports:
12+
- port: 443
13+
name: https-validation
14+
- port: 9093
15+
name: http-monitoring
16+
selector:
17+
istio: galley

‎integration/init/istio-1.0.3/expected/base/charts/galley/templates/serviceaccount.yaml

+12
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
---
2+
# Source: istio/charts/galley/templates/serviceaccount.yaml
3+
apiVersion: v1
4+
kind: ServiceAccount
5+
metadata:
6+
name: istio-galley-service-account
7+
namespace: default
8+
labels:
9+
app: istio-galley
10+
chart: galley-1.0.3
11+
heritage: Tiller
12+
release: istio

‎integration/init/istio-1.0.3/expected/base/charts/gateways/templates/autoscale.yaml

+39
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
---
2+
# Source: istio/charts/gateways/templates/autoscale.yaml
3+
4+
apiVersion: autoscaling/v2beta1
5+
kind: HorizontalPodAutoscaler
6+
metadata:
7+
name: istio-egressgateway
8+
namespace: default
9+
spec:
10+
maxReplicas: 5
11+
minReplicas: 1
12+
scaleTargetRef:
13+
apiVersion: apps/v1beta1
14+
kind: Deployment
15+
name: istio-egressgateway
16+
metrics:
17+
- type: Resource
18+
resource:
19+
name: cpu
20+
targetAverageUtilization: 80
21+
---
22+
apiVersion: autoscaling/v2beta1
23+
kind: HorizontalPodAutoscaler
24+
metadata:
25+
name: istio-ingressgateway
26+
namespace: default
27+
spec:
28+
maxReplicas: 5
29+
minReplicas: 1
30+
scaleTargetRef:
31+
apiVersion: apps/v1beta1
32+
kind: Deployment
33+
name: istio-ingressgateway
34+
metrics:
35+
- type: Resource
36+
resource:
37+
name: cpu
38+
targetAverageUtilization: 80
39+
---

‎integration/init/istio-1.0.3/expected/base/charts/gateways/templates/clusterrole.yaml

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
# Source: istio/charts/gateways/templates/clusterrole.yaml
3+
4+
apiVersion: rbac.authorization.k8s.io/v1beta1
5+
kind: ClusterRole
6+
metadata:
7+
labels:
8+
app: gateways
9+
chart: gateways-1.0.3
10+
heritage: Tiller
11+
release: istio
12+
name: istio-egressgateway-default
13+
rules:
14+
- apiGroups: ["extensions"]
15+
resources: ["thirdpartyresources", "virtualservices", "destinationrules", "gateways"]
16+
verbs: ["get", "watch", "list", "update"]
17+
---
18+
apiVersion: rbac.authorization.k8s.io/v1beta1
19+
kind: ClusterRole
20+
metadata:
21+
labels:
22+
app: gateways
23+
chart: gateways-1.0.3
24+
heritage: Tiller
25+
release: istio
26+
name: istio-ingressgateway-default
27+
rules:
28+
- apiGroups: ["extensions"]
29+
resources: ["thirdpartyresources", "virtualservices", "destinationrules", "gateways"]
30+
verbs: ["get", "watch", "list", "update"]
31+
---

0 commit comments

Comments
 (0)