Working ZK Istio

zk-client-svc.yml

apiVersion: v1
kind: Service
metadata:
  name: zk-client-svc
  namespace: core-applications
spec:
  ports:
  - port: 2181
    name: tcp
  selector:
    app: zk

zk-cm.yml

apiVersion: v1
kind: ConfigMap
metadata:
  name: zk-cm
  namespace: core-applications
data:
  jvm.heap: "1G"
  tick: "2000"
  init: "10"
  sync: "5"
  client.cnxns: "60"
  snap.retain: "3"
  purge.interval: "0"

zk-headless-svc.yml

apiVersion: v1
kind: Service
metadata:
  name: zk-headless
  namespace: core-applications
  labels:
    app: zk-headless
spec:
  ports:
  - port: 2888
    name: tcp-server
  - port: 3888
    name: tcp-leader-elec
  clusterIP: None
  selector:
    app: zk

zk-pdb.yml

apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
  name: zk-pdb
  namespace: core-applications
spec:
  selector:
    matchLabels:
      app: zk
  minAvailable: 3

zk-ss.yml

apiVersion: apps/v1beta1
kind: StatefulSet
metadata:
  creationTimestamp: null
  name: zk
  namespace: core-applications
spec:
  serviceName: zk-headless
  replicas: 5
  template:
    metadata:
      annotations:
        alpha.istio.io/sidecar: injected
        alpha.istio.io/version: jenkins@ubuntu-16-04-build-12ac793f80be71-0.1.6-dab2033
        pod.beta.kubernetes.io/init-containers: '[{"args":["-p","15001","-u","1337"],"image":"docker.io/istio/init:0.1","imagePullPolicy":"Always","name":"init","securityContext":{"capabilities":{"add":["NET_ADMIN"]}}},{"args":["-c","sysctl
          -w kernel.core_pattern=/tmp/core.%e.%p.%t \u0026\u0026 ulimit -c unlimited"],"command":["/bin/sh"],"image":"alpine","imagePullPolicy":"Always","name":"enable-core-dump","securityContext":{"privileged":true}}]'
      creationTimestamp: null
      labels:
        app: zk
    spec:
      terminationGracePeriodSeconds: 10
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
          - labelSelector:
              matchExpressions:
              - key: app
                operator: In
                values:
                - zk
            topologyKey: kubernetes.io/hostname
      containers:
      - name: pk-ubuntu-zookeeper
        securityContext:
          runAsUser: 1000
        image: quay.io/parkhubprime/pk-ubuntu-zookeeper:0.1.0
        imagePullPolicy: Always
        env:
        - name: ZK_REPLICAS
          value: "5"
        - name: ZK_HEAP_SIZE
          valueFrom:
            configMapKeyRef:
              key: jvm.heap
              name: zk-cm
        - name: ZK_TICK_TIME
          valueFrom:
            configMapKeyRef:
              key: tick
              name: zk-cm
        - name: ZK_INIT_LIMIT
          valueFrom:
            configMapKeyRef:
              key: init
              name: zk-cm
        - name: ZK_SYNC_LIMIT
          valueFrom:
            configMapKeyRef:
              key: tick
              name: zk-cm
        - name: ZK_MAX_CLIENT_CNXNS
          valueFrom:
            configMapKeyRef:
              key: client.cnxns
              name: zk-cm
        - name: ZK_SNAP_RETAIN_COUNT
          valueFrom:
            configMapKeyRef:
              key: snap.retain
              name: zk-cm
        - name: ZK_PURGE_INTERVAL
          valueFrom:
            configMapKeyRef:
              key: purge.interval
              name: zk-cm
        - name: ZK_CLIENT_PORT
          value: "2181"
        - name: ZK_SERVER_PORT
          value: "2888"
        - name: ZK_ELECTION_PORT
          value: "3888"
        livenessProbe:
          exec:
            command:
            - zkOk.sh
          initialDelaySeconds: 10
          timeoutSeconds: 5
        ports:
        - containerPort: 2181
          name: tcp-client
        - containerPort: 2888
          name: tcp-server
        - containerPort: 3888
          name: tcp-leader-elec
        readinessProbe:
          exec:
            command:
            - zkOk.sh
          initialDelaySeconds: 10
          timeoutSeconds: 5
        resources:
          requests:
            cpu: 500m
            memory: 2Gi
        volumeMounts:
        - mountPath: /var/lib/zookeeper
          name: datadir
      - args:
        - proxy
        - sidecar
        - -v
        - "2"
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: POD_IP
          valueFrom:
            fieldRef:
              fieldPath: status.podIP
        image: docker.io/istio/proxy_debug:0.1
        imagePullPolicy: Always
        name: proxy
        resources: {}
        securityContext:
          runAsUser: 1337
        volumeMounts:
        - mountPath: /etc/certs
          name: istio-certs
          readOnly: true
      volumes:
      - name: istio-certs
        secret:
          secretName: istio.default
  volumeClaimTemplates:
  - metadata:
      name: datadir
    spec:
      accessModes: 
        - ReadWriteOnce
      storageClassName: "high-throughput-hdd"
      resources:
        requests:
          storage: 500Gi
---