Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k3s
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Registry
Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Jacklull
k3s
Commits
a445b2b9
Commit
a445b2b9
authored
Mar 29, 2018
by
Martin Ostrowski
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update Istio addon to 0.6.0 and mirror images in gcr
parent
d79570ee
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
224 additions
and
66 deletions
+224
-66
istio-auth.yaml
cluster/addons/istio/auth/istio-auth.yaml
+112
-33
istio.yaml
cluster/addons/istio/noauth/istio.yaml
+112
-33
No files found.
cluster/addons/istio/auth/istio-auth.yaml
View file @
a445b2b9
...
@@ -8,6 +8,7 @@ kind: Namespace
...
@@ -8,6 +8,7 @@ kind: Namespace
metadata
:
metadata
:
name
:
istio-system
name
:
istio-system
labels
:
labels
:
istio-injection
:
enabled
k8s-app
:
istio
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
...
@@ -290,7 +291,7 @@ spec:
...
@@ -290,7 +291,7 @@ spec:
serviceAccountName
:
istio-mixer-service-account
serviceAccountName
:
istio-mixer-service-account
containers
:
containers
:
-
name
:
statsd-to-prometheus
-
name
:
statsd-to-prometheus
image
:
prom
/statsd-exporter:v0.5.0
image
:
gcr.io/istio-release
/statsd-exporter:v0.5.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9102
-
containerPort
:
9102
...
@@ -302,7 +303,7 @@ spec:
...
@@ -302,7 +303,7 @@ spec:
-
name
:
config-volume
-
name
:
config-volume
mountPath
:
/etc/statsd
mountPath
:
/etc/statsd
-
name
:
mixer
-
name
:
mixer
image
:
gcr.io/istio-release/mixer:0.
5.1
image
:
gcr.io/istio-release/mixer:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9091
-
containerPort
:
9091
...
@@ -317,7 +318,7 @@ spec:
...
@@ -317,7 +318,7 @@ spec:
-
-v
-
-v
-
"
2"
-
"
2"
-
name
:
istio-proxy
-
name
:
istio-proxy
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
15004
-
containerPort
:
15004
...
@@ -596,6 +597,25 @@ spec:
...
@@ -596,6 +597,25 @@ spec:
kind
:
CustomResourceDefinition
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
metadata
:
name
:
solarwindses.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
package
:
solarwinds
istio
:
mixer-adapter
spec
:
group
:
config.istio.io
names
:
kind
:
solarwinds
plural
:
solarwindses
singular
:
solarwinds
scope
:
Namespaced
version
:
v1alpha2
---
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
name
:
stackdrivers.config.istio.io
name
:
stackdrivers.config.istio.io
labels
:
labels
:
k8s-app
:
istio
k8s-app
:
istio
...
@@ -653,7 +673,7 @@ spec:
...
@@ -653,7 +673,7 @@ spec:
kind
:
CustomResourceDefinition
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
metadata
:
name
:
apike
ie
s.config.istio.io
name
:
apike
y
s.config.istio.io
labels
:
labels
:
k8s-app
:
istio
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
...
@@ -663,7 +683,7 @@ spec:
...
@@ -663,7 +683,7 @@ spec:
group
:
config.istio.io
group
:
config.istio.io
names
:
names
:
kind
:
apikey
kind
:
apikey
plural
:
apike
ie
s
plural
:
apike
y
s
singular
:
apikey
singular
:
apikey
scope
:
Namespaced
scope
:
Namespaced
version
:
v1alpha2
version
:
v1alpha2
...
@@ -1339,16 +1359,16 @@ spec:
...
@@ -1339,16 +1359,16 @@ spec:
attribute_bindings
:
attribute_bindings
:
# Fill the new attributes from the adapter produced output.
# Fill the new attributes from the adapter produced output.
# $out refers to an instance of OutputTemplate message
# $out refers to an instance of OutputTemplate message
source.ip
:
$out.source_pod_ip
source.ip
:
$out.source_pod_ip
| ip("0.0.0.0")
source.labels
:
$out.source_labels
source.labels
:
$out.source_labels
| emptyStringMap()
source.namespace
:
$out.source_namespace
source.namespace
:
$out.source_namespace
| "default"
source.service
:
$out.source_service
source.service
:
$out.source_service
| "unknown"
source.serviceAccount
:
$out.source_service_account_name
source.serviceAccount
:
$out.source_service_account_name
| "unknown"
destination.ip
:
$out.destination_pod_ip
destination.ip
:
$out.destination_pod_ip
| ip("0.0.0.0")
destination.labels
:
$out.destination_labels
destination.labels
:
$out.destination_labels
| emptyStringMap()
destination.namespace
:
$out.destination_namespace
destination.namespace
:
$out.destination_namespace
| "default"
destination.service
:
$out.destination_service
destination.service
:
$out.destination_service
| "unknown"
destination.serviceAccount
:
$out.destination_service_account_name
destination.serviceAccount
:
$out.destination_service_account_name
| "unknown"
---
---
################################
################################
# Istio configMap cluster-wide
# Istio configMap cluster-wide
...
@@ -1378,8 +1398,9 @@ data:
...
@@ -1378,8 +1398,9 @@ data:
enableTracing: true
enableTracing: true
#
#
# To disable the mixer completely (including metrics), comment out
# To disable the mixer completely (including metrics), comment out
# the following line
# the following lines
mixerAddress: istio-mixer.istio-system:15004
mixerCheckServer: istio-mixer.istio-system:15004
mixerReportServer: istio-mixer.istio-system:15004
# This is the ingress service name, update if you used a different name
# This is the ingress service name, update if you used a different name
ingressService: istio-ingress
ingressService: istio-ingress
#
#
...
@@ -1486,6 +1507,57 @@ spec:
...
@@ -1486,6 +1507,57 @@ spec:
scope
:
Namespaced
scope
:
Namespaced
version
:
v1alpha2
version
:
v1alpha2
---
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
v1alpha2routerules.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
V1alpha2RouteRule
listKind
:
V1alpha2RouteRuleList
plural
:
v1alpha2routerules
singular
:
v1alpha2routerule
scope
:
Namespaced
version
:
v1alpha2
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
destinationrules.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
DestinationRule
listKind
:
DestinationRuleList
plural
:
destinationrules
singular
:
destinationrule
scope
:
Namespaced
version
:
v1alpha2
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
externalservices.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
ExternalService
listKind
:
ExternalServiceList
plural
:
externalservices
singular
:
externalservice
scope
:
Namespaced
version
:
v1alpha2
---
# Pilot service for discovery
# Pilot service for discovery
apiVersion
:
v1
apiVersion
:
v1
kind
:
Service
kind
:
Service
...
@@ -1538,7 +1610,7 @@ spec:
...
@@ -1538,7 +1610,7 @@ spec:
serviceAccountName
:
istio-pilot-service-account
serviceAccountName
:
istio-pilot-service-account
containers
:
containers
:
-
name
:
discovery
-
name
:
discovery
image
:
gcr.io/istio-release/pilot:0.
5.1
image
:
gcr.io/istio-release/pilot:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
args
:
[
"
discovery"
,
"
-v"
,
"
2"
,
"
--admission-service"
,
"
istio-pilot"
]
args
:
[
"
discovery"
,
"
-v"
,
"
2"
,
"
--admission-service"
,
"
istio-pilot"
]
ports
:
ports
:
...
@@ -1555,11 +1627,13 @@ spec:
...
@@ -1555,11 +1627,13 @@ spec:
fieldRef
:
fieldRef
:
apiVersion
:
v1
apiVersion
:
v1
fieldPath
:
metadata.namespace
fieldPath
:
metadata.namespace
-
name
:
PILOT_THROTTLE
value
:
"
200"
volumeMounts
:
volumeMounts
:
-
name
:
config-volume
-
name
:
config-volume
mountPath
:
/etc/istio/config
mountPath
:
/etc/istio/config
-
name
:
istio-proxy
-
name
:
istio-proxy
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
15003
-
containerPort
:
15003
...
@@ -1639,7 +1713,7 @@ spec:
...
@@ -1639,7 +1713,7 @@ spec:
serviceAccountName
:
istio-ingress-service-account
serviceAccountName
:
istio-ingress-service-account
containers
:
containers
:
-
name
:
istio-ingress
-
name
:
istio-ingress
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
args
:
args
:
-
proxy
-
proxy
-
ingress
-
ingress
...
@@ -1731,7 +1805,7 @@ spec:
...
@@ -1731,7 +1805,7 @@ spec:
serviceAccountName
:
istio-ca-service-account
serviceAccountName
:
istio-ca-service-account
containers
:
containers
:
-
name
:
istio-ca
-
name
:
istio-ca
image
:
gcr.io/istio-release/istio-ca:0.
5.1
image
:
gcr.io/istio-release/istio-ca:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
command
:
[
"
/usr/local/bin/istio_ca"
]
command
:
[
"
/usr/local/bin/istio_ca"
]
args
:
args
:
...
@@ -1776,21 +1850,16 @@ spec:
...
@@ -1776,21 +1850,16 @@ spec:
annotations
:
annotations
:
sidecar.istio.io/inject
:
"
false"
sidecar.istio.io/inject
:
"
false"
spec
:
spec
:
serviceAccountName
:
grafana
containers
:
containers
:
-
name
:
grafana
-
name
:
grafana
image
:
gcr.io/istio-release/grafana:0.
5.1
image
:
gcr.io/istio-release/grafana:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
3000
-
containerPort
:
3000
env
:
env
:
-
name
:
GRAFANA_PORT
# Only put environment related config here. Generic Istio config
value
:
"
3000"
# should go in addons/grafana/grafana.ini.
-
name
:
GF_AUTH_BASIC_ENABLED
value
:
"
false"
-
name
:
GF_AUTH_ANONYMOUS_ENABLED
value
:
"
true"
-
name
:
GF_AUTH_ANONYMOUS_ORG_ROLE
value
:
Admin
-
name
:
GF_PATHS_DATA
-
name
:
GF_PATHS_DATA
value
:
/data/grafana
value
:
/data/grafana
volumeMounts
:
volumeMounts
:
...
@@ -1800,6 +1869,15 @@ spec:
...
@@ -1800,6 +1869,15 @@ spec:
-
name
:
grafana-data
-
name
:
grafana-data
emptyDir
:
{}
emptyDir
:
{}
---
---
apiVersion
:
v1
kind
:
ServiceAccount
metadata
:
name
:
grafana
namespace
:
istio-system
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
---
apiVersion
:
v1
apiVersion
:
v1
kind
:
ConfigMap
kind
:
ConfigMap
...
@@ -2032,7 +2110,7 @@ spec:
...
@@ -2032,7 +2110,7 @@ spec:
serviceAccountName
:
prometheus
serviceAccountName
:
prometheus
containers
:
containers
:
-
name
:
prometheus
-
name
:
prometheus
image
:
docker.io
/prom/prometheus:v2.0.0
image
:
gcr.io/istio-release
/prom/prometheus:v2.0.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
args
:
args
:
-
'
--storage.tsdb.retention=6h'
-
'
--storage.tsdb.retention=6h'
...
@@ -2071,6 +2149,7 @@ rules:
...
@@ -2071,6 +2149,7 @@ rules:
-
services
-
services
-
endpoints
-
endpoints
-
pods
-
pods
-
nodes/proxy
verbs
:
[
"
get"
,
"
list"
,
"
watch"
]
verbs
:
[
"
get"
,
"
list"
,
"
watch"
]
-
apiGroups
:
[
"
"
]
-
apiGroups
:
[
"
"
]
resources
:
resources
:
...
@@ -2114,7 +2193,7 @@ spec:
...
@@ -2114,7 +2193,7 @@ spec:
spec
:
spec
:
containers
:
containers
:
-
name
:
servicegraph
-
name
:
servicegraph
image
:
gcr.io/istio-release/servicegraph:0.
5.1
image
:
gcr.io/istio-release/servicegraph:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
8088
-
containerPort
:
8088
...
@@ -2156,7 +2235,7 @@ spec:
...
@@ -2156,7 +2235,7 @@ spec:
spec
:
spec
:
containers
:
containers
:
-
name
:
zipkin
-
name
:
zipkin
image
:
docker.io/openzipkin/zipkin:latest
image
:
gcr.io/istio-release/zipkin:2.5.3
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9411
-
containerPort
:
9411
...
...
cluster/addons/istio/noauth/istio.yaml
View file @
a445b2b9
...
@@ -8,6 +8,7 @@ kind: Namespace
...
@@ -8,6 +8,7 @@ kind: Namespace
metadata
:
metadata
:
name
:
istio-system
name
:
istio-system
labels
:
labels
:
istio-injection
:
enabled
k8s-app
:
istio
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
...
@@ -290,7 +291,7 @@ spec:
...
@@ -290,7 +291,7 @@ spec:
serviceAccountName
:
istio-mixer-service-account
serviceAccountName
:
istio-mixer-service-account
containers
:
containers
:
-
name
:
statsd-to-prometheus
-
name
:
statsd-to-prometheus
image
:
prom
/statsd-exporter:v0.5.0
image
:
gcr.io/istio-release
/statsd-exporter:v0.5.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9102
-
containerPort
:
9102
...
@@ -302,7 +303,7 @@ spec:
...
@@ -302,7 +303,7 @@ spec:
-
name
:
config-volume
-
name
:
config-volume
mountPath
:
/etc/statsd
mountPath
:
/etc/statsd
-
name
:
mixer
-
name
:
mixer
image
:
gcr.io/istio-release/mixer:0.
5.1
image
:
gcr.io/istio-release/mixer:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9091
-
containerPort
:
9091
...
@@ -317,7 +318,7 @@ spec:
...
@@ -317,7 +318,7 @@ spec:
-
-v
-
-v
-
"
2"
-
"
2"
-
name
:
istio-proxy
-
name
:
istio-proxy
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
15004
-
containerPort
:
15004
...
@@ -596,6 +597,25 @@ spec:
...
@@ -596,6 +597,25 @@ spec:
kind
:
CustomResourceDefinition
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
metadata
:
name
:
solarwindses.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
package
:
solarwinds
istio
:
mixer-adapter
spec
:
group
:
config.istio.io
names
:
kind
:
solarwinds
plural
:
solarwindses
singular
:
solarwinds
scope
:
Namespaced
version
:
v1alpha2
---
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
name
:
stackdrivers.config.istio.io
name
:
stackdrivers.config.istio.io
labels
:
labels
:
k8s-app
:
istio
k8s-app
:
istio
...
@@ -653,7 +673,7 @@ spec:
...
@@ -653,7 +673,7 @@ spec:
kind
:
CustomResourceDefinition
kind
:
CustomResourceDefinition
apiVersion
:
apiextensions.k8s.io/v1beta1
apiVersion
:
apiextensions.k8s.io/v1beta1
metadata
:
metadata
:
name
:
apike
ie
s.config.istio.io
name
:
apike
y
s.config.istio.io
labels
:
labels
:
k8s-app
:
istio
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
addonmanager.kubernetes.io/mode
:
Reconcile
...
@@ -663,7 +683,7 @@ spec:
...
@@ -663,7 +683,7 @@ spec:
group
:
config.istio.io
group
:
config.istio.io
names
:
names
:
kind
:
apikey
kind
:
apikey
plural
:
apike
ie
s
plural
:
apike
y
s
singular
:
apikey
singular
:
apikey
scope
:
Namespaced
scope
:
Namespaced
version
:
v1alpha2
version
:
v1alpha2
...
@@ -1339,16 +1359,16 @@ spec:
...
@@ -1339,16 +1359,16 @@ spec:
attribute_bindings
:
attribute_bindings
:
# Fill the new attributes from the adapter produced output.
# Fill the new attributes from the adapter produced output.
# $out refers to an instance of OutputTemplate message
# $out refers to an instance of OutputTemplate message
source.ip
:
$out.source_pod_ip
source.ip
:
$out.source_pod_ip
| ip("0.0.0.0")
source.labels
:
$out.source_labels
source.labels
:
$out.source_labels
| emptyStringMap()
source.namespace
:
$out.source_namespace
source.namespace
:
$out.source_namespace
| "default"
source.service
:
$out.source_service
source.service
:
$out.source_service
| "unknown"
source.serviceAccount
:
$out.source_service_account_name
source.serviceAccount
:
$out.source_service_account_name
| "unknown"
destination.ip
:
$out.destination_pod_ip
destination.ip
:
$out.destination_pod_ip
| ip("0.0.0.0")
destination.labels
:
$out.destination_labels
destination.labels
:
$out.destination_labels
| emptyStringMap()
destination.namespace
:
$out.destination_namespace
destination.namespace
:
$out.destination_namespace
| "default"
destination.service
:
$out.destination_service
destination.service
:
$out.destination_service
| "unknown"
destination.serviceAccount
:
$out.destination_service_account_name
destination.serviceAccount
:
$out.destination_service_account_name
| "unknown"
---
---
################################
################################
# Istio configMap cluster-wide
# Istio configMap cluster-wide
...
@@ -1378,8 +1398,9 @@ data:
...
@@ -1378,8 +1398,9 @@ data:
enableTracing: true
enableTracing: true
#
#
# To disable the mixer completely (including metrics), comment out
# To disable the mixer completely (including metrics), comment out
# the following line
# the following lines
mixerAddress: istio-mixer.istio-system:15004
mixerCheckServer: istio-mixer.istio-system:15004
mixerReportServer: istio-mixer.istio-system:15004
# This is the ingress service name, update if you used a different name
# This is the ingress service name, update if you used a different name
ingressService: istio-ingress
ingressService: istio-ingress
#
#
...
@@ -1486,6 +1507,57 @@ spec:
...
@@ -1486,6 +1507,57 @@ spec:
scope
:
Namespaced
scope
:
Namespaced
version
:
v1alpha2
version
:
v1alpha2
---
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
v1alpha2routerules.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
V1alpha2RouteRule
listKind
:
V1alpha2RouteRuleList
plural
:
v1alpha2routerules
singular
:
v1alpha2routerule
scope
:
Namespaced
version
:
v1alpha2
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
destinationrules.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
DestinationRule
listKind
:
DestinationRuleList
plural
:
destinationrules
singular
:
destinationrule
scope
:
Namespaced
version
:
v1alpha2
---
apiVersion
:
apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
metadata
:
name
:
externalservices.config.istio.io
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
spec
:
group
:
config.istio.io
names
:
kind
:
ExternalService
listKind
:
ExternalServiceList
plural
:
externalservices
singular
:
externalservice
scope
:
Namespaced
version
:
v1alpha2
---
# Pilot service for discovery
# Pilot service for discovery
apiVersion
:
v1
apiVersion
:
v1
kind
:
Service
kind
:
Service
...
@@ -1538,7 +1610,7 @@ spec:
...
@@ -1538,7 +1610,7 @@ spec:
serviceAccountName
:
istio-pilot-service-account
serviceAccountName
:
istio-pilot-service-account
containers
:
containers
:
-
name
:
discovery
-
name
:
discovery
image
:
gcr.io/istio-release/pilot:0.
5.1
image
:
gcr.io/istio-release/pilot:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
args
:
[
"
discovery"
,
"
-v"
,
"
2"
,
"
--admission-service"
,
"
istio-pilot"
]
args
:
[
"
discovery"
,
"
-v"
,
"
2"
,
"
--admission-service"
,
"
istio-pilot"
]
ports
:
ports
:
...
@@ -1555,11 +1627,13 @@ spec:
...
@@ -1555,11 +1627,13 @@ spec:
fieldRef
:
fieldRef
:
apiVersion
:
v1
apiVersion
:
v1
fieldPath
:
metadata.namespace
fieldPath
:
metadata.namespace
-
name
:
PILOT_THROTTLE
value
:
"
200"
volumeMounts
:
volumeMounts
:
-
name
:
config-volume
-
name
:
config-volume
mountPath
:
/etc/istio/config
mountPath
:
/etc/istio/config
-
name
:
istio-proxy
-
name
:
istio-proxy
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
15003
-
containerPort
:
15003
...
@@ -1639,7 +1713,7 @@ spec:
...
@@ -1639,7 +1713,7 @@ spec:
serviceAccountName
:
istio-ingress-service-account
serviceAccountName
:
istio-ingress-service-account
containers
:
containers
:
-
name
:
istio-ingress
-
name
:
istio-ingress
image
:
gcr.io/istio-release/proxy:0.
5.1
image
:
gcr.io/istio-release/proxy:0.
6.0
args
:
args
:
-
proxy
-
proxy
-
ingress
-
ingress
...
@@ -1731,7 +1805,7 @@ spec:
...
@@ -1731,7 +1805,7 @@ spec:
serviceAccountName
:
istio-ca-service-account
serviceAccountName
:
istio-ca-service-account
containers
:
containers
:
-
name
:
istio-ca
-
name
:
istio-ca
image
:
gcr.io/istio-release/istio-ca:0.
5.1
image
:
gcr.io/istio-release/istio-ca:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
command
:
[
"
/usr/local/bin/istio_ca"
]
command
:
[
"
/usr/local/bin/istio_ca"
]
args
:
args
:
...
@@ -1776,21 +1850,16 @@ spec:
...
@@ -1776,21 +1850,16 @@ spec:
annotations
:
annotations
:
sidecar.istio.io/inject
:
"
false"
sidecar.istio.io/inject
:
"
false"
spec
:
spec
:
serviceAccountName
:
grafana
containers
:
containers
:
-
name
:
grafana
-
name
:
grafana
image
:
gcr.io/istio-release/grafana:0.
5.1
image
:
gcr.io/istio-release/grafana:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
3000
-
containerPort
:
3000
env
:
env
:
-
name
:
GRAFANA_PORT
# Only put environment related config here. Generic Istio config
value
:
"
3000"
# should go in addons/grafana/grafana.ini.
-
name
:
GF_AUTH_BASIC_ENABLED
value
:
"
false"
-
name
:
GF_AUTH_ANONYMOUS_ENABLED
value
:
"
true"
-
name
:
GF_AUTH_ANONYMOUS_ORG_ROLE
value
:
Admin
-
name
:
GF_PATHS_DATA
-
name
:
GF_PATHS_DATA
value
:
/data/grafana
value
:
/data/grafana
volumeMounts
:
volumeMounts
:
...
@@ -1800,6 +1869,15 @@ spec:
...
@@ -1800,6 +1869,15 @@ spec:
-
name
:
grafana-data
-
name
:
grafana-data
emptyDir
:
{}
emptyDir
:
{}
---
---
apiVersion
:
v1
kind
:
ServiceAccount
metadata
:
name
:
grafana
namespace
:
istio-system
labels
:
k8s-app
:
istio
addonmanager.kubernetes.io/mode
:
Reconcile
---
---
---
apiVersion
:
v1
apiVersion
:
v1
kind
:
ConfigMap
kind
:
ConfigMap
...
@@ -2032,7 +2110,7 @@ spec:
...
@@ -2032,7 +2110,7 @@ spec:
serviceAccountName
:
prometheus
serviceAccountName
:
prometheus
containers
:
containers
:
-
name
:
prometheus
-
name
:
prometheus
image
:
docker.io
/prom/prometheus:v2.0.0
image
:
gcr.io/istio-release
/prom/prometheus:v2.0.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
args
:
args
:
-
'
--storage.tsdb.retention=6h'
-
'
--storage.tsdb.retention=6h'
...
@@ -2071,6 +2149,7 @@ rules:
...
@@ -2071,6 +2149,7 @@ rules:
-
services
-
services
-
endpoints
-
endpoints
-
pods
-
pods
-
nodes/proxy
verbs
:
[
"
get"
,
"
list"
,
"
watch"
]
verbs
:
[
"
get"
,
"
list"
,
"
watch"
]
-
apiGroups
:
[
"
"
]
-
apiGroups
:
[
"
"
]
resources
:
resources
:
...
@@ -2114,7 +2193,7 @@ spec:
...
@@ -2114,7 +2193,7 @@ spec:
spec
:
spec
:
containers
:
containers
:
-
name
:
servicegraph
-
name
:
servicegraph
image
:
gcr.io/istio-release/servicegraph:0.
5.1
image
:
gcr.io/istio-release/servicegraph:0.
6.0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
8088
-
containerPort
:
8088
...
@@ -2156,7 +2235,7 @@ spec:
...
@@ -2156,7 +2235,7 @@ spec:
spec
:
spec
:
containers
:
containers
:
-
name
:
zipkin
-
name
:
zipkin
image
:
docker.io/openzipkin/zipkin:latest
image
:
gcr.io/istio-release/zipkin:2.5.3
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
ports
:
ports
:
-
containerPort
:
9411
-
containerPort
:
9411
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment