| apiVersion: apps/v1 |
| kind: Deployment |
| metadata: |
| creationTimestamp: null |
| name: grpc |
| spec: |
| selector: |
| matchLabels: |
| app: grpc |
| strategy: {} |
| template: |
| metadata: |
| annotations: |
| inject.istio.io/templates: grpc-agent |
| kubectl.kubernetes.io/default-container: traffic |
| kubectl.kubernetes.io/default-logs-container: traffic |
| prometheus.io/path: /stats/prometheus |
| prometheus.io/port: "15020" |
| prometheus.io/scrape: "true" |
| proxy.istio.io/overrides: '{"containers":[{"name":"traffic","image":"fake.docker.io/google-samples/traffic-go-gke:1.0","resources":{},"readinessProbe":{"httpGet":{"port":80}}}]}' |
| sidecar.istio.io/rewriteAppHTTPProbers: "false" |
| sidecar.istio.io/status: '{"initContainers":null,"containers":["traffic","istio-proxy"],"volumes":["workload-socket","workload-certs","istio-xds","istio-data","istio-podinfo","istio-token","istiod-ca-cert"],"imagePullSecrets":null,"revision":"default"}' |
| creationTimestamp: null |
| labels: |
| app: grpc |
| service.istio.io/canonical-name: grpc |
| service.istio.io/canonical-revision: latest |
| spec: |
| containers: |
| - env: |
| - name: GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT |
| value: "true" |
| - name: GRPC_XDS_BOOTSTRAP |
| value: /etc/istio/proxy/grpc-bootstrap.json |
| image: fake.docker.io/google-samples/traffic-go-gke:1.0 |
| name: traffic |
| readinessProbe: |
| httpGet: |
| port: 80 |
| resources: {} |
| volumeMounts: |
| - mountPath: /var/lib/istio/data |
| name: istio-data |
| - mountPath: /etc/istio/proxy |
| name: istio-xds |
| - args: |
| - proxy |
| - sidecar |
| - --domain |
| - $(POD_NAMESPACE).svc.cluster.local |
| - --log_output_level=default:info |
| env: |
| - name: ISTIO_META_GENERATOR |
| value: grpc |
| - name: OUTPUT_CERTS |
| value: /var/lib/istio/data |
| - name: JWT_POLICY |
| value: third-party-jwt |
| - name: PILOT_CERT_PROVIDER |
| value: istiod |
| - name: CA_ADDR |
| value: istiod.dubbo-system.svc:15012 |
| - name: POD_NAME |
| valueFrom: |
| fieldRef: |
| fieldPath: metadata.name |
| - name: POD_NAMESPACE |
| valueFrom: |
| fieldRef: |
| fieldPath: metadata.namespace |
| - name: INSTANCE_IP |
| valueFrom: |
| fieldRef: |
| fieldPath: status.podIP |
| - name: SERVICE_ACCOUNT |
| valueFrom: |
| fieldRef: |
| fieldPath: spec.serviceAccountName |
| - name: HOST_IP |
| valueFrom: |
| fieldRef: |
| fieldPath: status.hostIP |
| - name: PROXY_CONFIG |
| value: | |
| {} |
| - name: ISTIO_META_POD_PORTS |
| value: |- |
| [ |
| ] |
| - name: ISTIO_META_APP_CONTAINERS |
| value: traffic |
| - name: ISTIO_META_CLUSTER_ID |
| value: Kubernetes |
| - name: ISTIO_META_INTERCEPTION_MODE |
| value: REDIRECT |
| - name: ISTIO_META_WORKLOAD_NAME |
| value: grpc |
| - name: ISTIO_META_OWNER |
| value: kubernetes://apis/apps/v1/namespaces/default/deployments/grpc |
| - name: ISTIO_META_MESH_ID |
| value: cluster.local |
| - name: TRUST_DOMAIN |
| value: cluster.local |
| - name: ISTIO_META_DNS_CAPTURE |
| value: "false" |
| - name: DISABLE_ENVOY |
| value: "true" |
| image: apache/dubbo-agent:latest |
| name: istio-proxy |
| readinessProbe: |
| failureThreshold: 30 |
| httpGet: |
| path: /healthz/ready |
| port: 15020 |
| initialDelaySeconds: 1 |
| periodSeconds: 2 |
| timeoutSeconds: 3 |
| resources: |
| limits: |
| cpu: "2" |
| memory: 1Gi |
| requests: |
| cpu: 100m |
| memory: 128Mi |
| volumeMounts: |
| - mountPath: /var/run/secrets/workload-spiffe-uds |
| name: workload-socket |
| - mountPath: /var/run/secrets/workload-spiffe-credentials |
| name: workload-certs |
| - mountPath: /var/run/secrets/istio |
| name: istiod-ca-cert |
| - mountPath: /var/lib/istio/data |
| name: istio-data |
| - mountPath: /etc/istio/proxy |
| name: istio-xds |
| - mountPath: /var/run/secrets/tokens |
| name: istio-token |
| - mountPath: /etc/istio/pod |
| name: istio-podinfo |
| volumes: |
| - emptyDir: {} |
| name: workload-socket |
| - emptyDir: {} |
| name: workload-certs |
| - emptyDir: |
| medium: Memory |
| name: istio-xds |
| - emptyDir: {} |
| name: istio-data |
| - downwardAPI: |
| items: |
| - fieldRef: |
| fieldPath: metadata.labels |
| path: labels |
| - fieldRef: |
| fieldPath: metadata.annotations |
| path: annotations |
| name: istio-podinfo |
| - name: istio-token |
| projected: |
| sources: |
| - serviceAccountToken: |
| audience: istio-ca |
| expirationSeconds: 43200 |
| path: istio-token |
| - configMap: |
| name: istio-ca-root-cert |
| name: istiod-ca-cert |
| status: {} |
| --- |