Skip to content

Instantly share code, notes, and snippets.

@rvennam
Created September 10, 2020 11:51
Show Gist options
  • Save rvennam/93a7be88f89cf1483fd38bda051117ae to your computer and use it in GitHub Desktop.
Save rvennam/93a7be88f89cf1483fd38bda051117ae to your computer and use it in GitHub Desktop.
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
annotations:
armada-service: addon-istio
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"install.istio.io/v1alpha1","kind":"IstioOperator","metadata":{"annotations":{"armada-service":"addon-istio","version":"1.7.0_2772"},"labels":{"addonmanager.kubernetes.io/mode":"Reconcile"},"name":"managed-istio","namespace":"ibm-operators"},"spec":{"addonComponents":{"grafana":{"enabled":false},"kiali":{"enabled":false},"prometheus":{"enabled":false},"tracing":{"enabled":false}},"components":{"egressGateways":[{"enabled":true,"k8s":{"hpaSpec":{"minReplicas":2},"overlays":[{"kind":"Deployment","name":"istio-egressgateway","patches":[{"path":"spec.template.spec.containers.[name:istio-proxy].lifecycle","value":{"preStop":{"exec":{"command":["sleep","25"]}}}},{"path":"spec.template.spec.affinity","value":{"nodeAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"preference":{"matchExpressions":[{"key":"dedicated","operator":"In","values":["edge"]}]},"weight":100}]},"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["istio-egressgateway"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]}]},"name":"istio-egressgateway"}],"ingressGateways":[{"enabled":true,"k8s":{"hpaSpec":{"minReplicas":2},"overlays":[{"kind":"Deployment","name":"istio-ingressgateway","patches":[{"path":"spec.template.spec.containers.[name:istio-proxy].lifecycle","value":{"preStop":{"exec":{"command":["sleep","25"]}}}},{"path":"spec.template.spec.affinity","value":{"nodeAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"preference":{"matchExpressions":[{"key":"dedicated","operator":"In","values":["edge"]}]},"weight":100}]},"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["istio-ingressgateway"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]}],"serviceAnnotations":{"service.kubernetes.io/ibm-load-balancer-cloud-provider-zone":"dal13"}},"name":"istio-ingressgateway"},{"enabled":false,"k8s":{"hpaSpec":{"minReplicas":2},"overlays":[{"kind":"Deployment","name":"istio-ingressgateway-public-2","patches":[{"path":"spec.template.spec.containers.[name:istio-proxy].lifecycle","value":{"preStop":{"exec":{"command":["sleep","25"]}}}},{"path":"spec.template.spec.affinity","value":{"nodeAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"preference":{"matchExpressions":[{"key":"dedicated","operator":"In","values":["edge"]}]},"weight":100}],"requiredDuringSchedulingIgnoredDuringExecution":{"nodeSelectorTerms":[{"matchExpressions":[{"key":"ibm-cloud.kubernetes.io/zone","operator":"In","values":["dal12"]}]}]}},"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["istio-ingressgateway-public-2"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]}],"serviceAnnotations":{"service.kubernetes.io/ibm-load-balancer-cloud-provider-zone":"dal12"}},"name":"istio-ingressgateway-public-2"},{"enabled":false,"k8s":{"hpaSpec":{"minReplicas":2},"overlays":[{"kind":"Deployment","name":"istio-ingressgateway-public-3","patches":[{"path":"spec.template.spec.containers.[name:istio-proxy].lifecycle","value":{"preStop":{"exec":{"command":["sleep","25"]}}}},{"path":"spec.template.spec.affinity","value":{"nodeAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"preference":{"matchExpressions":[{"key":"dedicated","operator":"In","values":["edge"]}]},"weight":100}],"requiredDuringSchedulingIgnoredDuringExecution":{"nodeSelectorTerms":[{"matchExpressions":[{"key":"ibm-cloud.kubernetes.io/zone","operator":"In","values":["dal10"]}]}]}},"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["istio-ingressgateway-public-3"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]}],"serviceAnnotations":{"service.kubernetes.io/ibm-load-balancer-cloud-provider-zone":"dal10"}},"name":"istio-ingressgateway-public-3"},{"enabled":false,"k8s":{"hpaSpec":{"minReplicas":2},"overlays":[{"kind":"Deployment","name":"cluster-local-gateway","patches":[{"path":"spec.template.spec.containers.[name:istio-proxy].lifecycle","value":{"preStop":{"exec":{"command":["sleep","25"]}}}},{"path":"spec.template.spec.affinity","value":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["cluster-local-gateway"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]},{"kind":"Service","name":"cluster-local-gateway","patches":[{"path":"spec.type","value":"ClusterIP"}]}]},"label":{"app":"cluster-local-gateway","istio":"cluster-local-gateway"},"name":"cluster-local-gateway"}],"pilot":{"k8s":{"overlays":[{"kind":"Deployment","name":"istiod","patches":[{"path":"spec.template.spec.affinity","value":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"app","operator":"In","values":["istiod"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}}}]}]}}},"hub":"icr.io/ext/istio","meshConfig":{"accessLogFile":"/dev/stdout","enablePrometheusMerge":true,"protocolDetectionTimeout":"0s"},"profile":"default","values":{"global":{"logging":{"level":"default:info"},"outboundTrafficPolicy":{"mode":"REGISTRY_ONLY"},"priorityClassName":"ibm-app-cluster-critical","proxy":{"lifecycle":{"preStop":{"exec":{"command":["sleep","25"]}}}}},"grafana":{"image":{"repository":"icr.io/ext/istio/grafana/grafana","tag":"7.0.5"},"security":{"enabled":true}},"kiali":{"createDemoSecret":false,"dashboard":{"viewOnlyMode":true},"hub":"icr.io/ext/istio/kiali","tag":"v1.22.1"},"pilot":{"autoscaleMin":2,"enableProtocolSniffingForInbound":false,"enableProtocolSniffingForOutbound":false,"traceSampling":1},"prometheus":{"hub":"icr.io/ext/istio/prom","resources":{"limits":{"cpu":"2000m","memory":"10G"},"requests":{"cpu":"200m","memory":"500M"}},"tag":"v2.19.2"},"telemetry":{"v2":{"enabled":true}},"tracing":{"jaeger":{"hub":"icr.io/ext/istio/jaegertracing","tag":"1.18.1"}}}}}
version: 1.7.0_2772
creationTimestamp: "2020-09-09T23:29:24Z"
finalizers:
- istio-finalizer.install.istio.io
generation: 3
labels:
addonmanager.kubernetes.io/mode: Reconcile
name: managed-istio
namespace: ibm-operators
resourceVersion: "18070079"
selfLink: /apis/install.istio.io/v1alpha1/namespaces/ibm-operators/istiooperators/managed-istio
uid: 7ab32872-909b-4163-974a-600c13729d54
spec:
addonComponents:
grafana:
enabled: false
kiali:
enabled: false
prometheus:
enabled: false
tracing:
enabled: false
components:
egressGateways:
- enabled: true
k8s:
hpaSpec:
minReplicas: 2
overlays:
- kind: Deployment
name: istio-egressgateway
patches:
- path: spec.template.spec.containers.[name:istio-proxy].lifecycle
value:
preStop:
exec:
command:
- sleep
- "25"
- path: spec.template.spec.affinity
value:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- preference:
matchExpressions:
- key: dedicated
operator: In
values:
- edge
weight: 100
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- istio-egressgateway
topologyKey: kubernetes.io/hostname
weight: 100
name: istio-egressgateway
ingressGateways:
- enabled: true
k8s:
hpaSpec:
minReplicas: 2
overlays:
- kind: Deployment
name: istio-ingressgateway
patches:
- path: spec.template.spec.containers.[name:istio-proxy].lifecycle
value:
preStop:
exec:
command:
- sleep
- "25"
- path: spec.template.spec.affinity
value:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- preference:
matchExpressions:
- key: dedicated
operator: In
values:
- edge
weight: 100
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- istio-ingressgateway
topologyKey: kubernetes.io/hostname
weight: 100
serviceAnnotations:
service.kubernetes.io/ibm-load-balancer-cloud-provider-zone: dal13
name: istio-ingressgateway
- enabled: false
k8s:
hpaSpec:
minReplicas: 2
overlays:
- kind: Deployment
name: istio-ingressgateway-public-2
patches:
- path: spec.template.spec.containers.[name:istio-proxy].lifecycle
value:
preStop:
exec:
command:
- sleep
- "25"
- path: spec.template.spec.affinity
value:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- preference:
matchExpressions:
- key: dedicated
operator: In
values:
- edge
weight: 100
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: ibm-cloud.kubernetes.io/zone
operator: In
values:
- dal12
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- istio-ingressgateway-public-2
topologyKey: kubernetes.io/hostname
weight: 100
serviceAnnotations:
service.kubernetes.io/ibm-load-balancer-cloud-provider-zone: dal12
name: istio-ingressgateway-public-2
- enabled: false
k8s:
hpaSpec:
minReplicas: 2
overlays:
- kind: Deployment
name: istio-ingressgateway-public-3
patches:
- path: spec.template.spec.containers.[name:istio-proxy].lifecycle
value:
preStop:
exec:
command:
- sleep
- "25"
- path: spec.template.spec.affinity
value:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- preference:
matchExpressions:
- key: dedicated
operator: In
values:
- edge
weight: 100
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: ibm-cloud.kubernetes.io/zone
operator: In
values:
- dal10
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- istio-ingressgateway-public-3
topologyKey: kubernetes.io/hostname
weight: 100
serviceAnnotations:
service.kubernetes.io/ibm-load-balancer-cloud-provider-zone: dal10
name: istio-ingressgateway-public-3
- enabled: false
k8s:
hpaSpec:
minReplicas: 2
overlays:
- kind: Deployment
name: cluster-local-gateway
patches:
- path: spec.template.spec.containers.[name:istio-proxy].lifecycle
value:
preStop:
exec:
command:
- sleep
- "25"
- path: spec.template.spec.affinity
value:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- cluster-local-gateway
topologyKey: kubernetes.io/hostname
weight: 100
- kind: Service
name: cluster-local-gateway
patches:
- path: spec.type
value: ClusterIP
label:
app: cluster-local-gateway
istio: cluster-local-gateway
name: cluster-local-gateway
pilot:
k8s:
overlays:
- kind: Deployment
name: istiod
patches:
- path: spec.template.spec.affinity
value:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- istiod
topologyKey: kubernetes.io/hostname
weight: 100
hub: icr.io/ext/istio
meshConfig:
accessLogFile: /dev/stdout
enablePrometheusMerge: true
protocolDetectionTimeout: 0s
profile: default
values:
global:
logging:
level: default:info
outboundTrafficPolicy:
mode: REGISTRY_ONLY
priorityClassName: ibm-app-cluster-critical
proxy:
lifecycle:
preStop:
exec:
command:
- sleep
- "25"
grafana:
image:
repository: icr.io/ext/istio/grafana/grafana
tag: 7.0.5
security:
enabled: true
kiali:
createDemoSecret: false
dashboard:
viewOnlyMode: true
hub: icr.io/ext/istio/kiali
tag: v1.22.1
pilot:
autoscaleMin: 2
enableProtocolSniffingForInbound: false
enableProtocolSniffingForOutbound: false
traceSampling: 1
prometheus:
hub: icr.io/ext/istio/prom
resources:
limits:
cpu: 2000m
memory: 10G
requests:
cpu: 200m
memory: 500M
tag: v2.19.2
telemetry:
v2:
enabled: true
tracing:
jaeger:
hub: icr.io/ext/istio/jaegertracing
tag: 1.18.1
status:
componentStatus:
Base:
status: HEALTHY
EgressGateways:
status: HEALTHY
IngressGateways:
status: HEALTHY
Pilot:
status: HEALTHY
status: HEALTHY
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment