Skip to content

Instantly share code, notes, and snippets.

@Ladicle
Last active December 7, 2017 01:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Ladicle/8ea73d991f074c80adf7c9b8d8eceb7f to your computer and use it in GitHub Desktop.
Save Ladicle/8ea73d991f074c80adf7c9b8d8eceb7f to your computer and use it in GitHub Desktop.
$ diff <normal-bookinfo-manifest> <istio-injected-manifest>
33a34,36
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
36a40
> strategy: {}
38a43,45
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
44,45c51
< - name: details
< image: istio/examples-bookinfo-details-v1:0.2.3
---
> - image: istio/examples-bookinfo-details-v1:0.2.3
46a53
> name: details
48a56,147
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - details
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
68a168,170
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
71a174
> strategy: {}
73a177,179
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
79,80c185
< - name: ratings
< image: istio/examples-bookinfo-ratings-v1:0.2.3
---
> - image: istio/examples-bookinfo-ratings-v1:0.2.3
81a187
> name: ratings
83a190,281
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - ratings
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
103a302,304
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
106a308
> strategy: {}
108a311,313
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
114,115c319
< - name: reviews
< image: istio/examples-bookinfo-reviews-v1:0.2.3
---
> - image: istio/examples-bookinfo-reviews-v1:0.2.3
116a321
> name: reviews
118a324,415
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - reviews
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
122a420,422
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
125a426
> strategy: {}
127a429,431
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
133,134c437
< - name: reviews
< image: istio/examples-bookinfo-reviews-v2:0.2.3
---
> - image: istio/examples-bookinfo-reviews-v2:0.2.3
135a439
> name: reviews
137a442,533
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - reviews
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
141a538,540
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
144a544
> strategy: {}
146a547,549
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
152,153c555
< - name: reviews
< image: istio/examples-bookinfo-reviews-v3:0.2.3
---
> - image: istio/examples-bookinfo-reviews-v3:0.2.3
154a557
> name: reviews
156a560,651
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - reviews
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
176a672,674
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
179a678
> strategy: {}
181a681,683
> annotations:
> sidecar.istio.io/status: injected-version-releng@0d29a2c0d15f-0.2.12-998e0e00d375688bcb2af042fc81a60ce5264009
> creationTimestamp: null
187,188c689
< - name: productpage
< image: istio/examples-bookinfo-productpage-v1:0.2.3
---
> - image: istio/examples-bookinfo-productpage-v1:0.2.3
189a691
> name: productpage
191a694,785
> resources: {}
> - args:
> - proxy
> - sidecar
> - -v
> - "2"
> - --configPath
> - /etc/istio/proxy
> - --binaryPath
> - /usr/local/bin/envoy
> - --serviceCluster
> - productpage
> - --drainDuration
> - 45s
> - --parentShutdownDuration
> - 1m0s
> - --discoveryAddress
> - istio-pilot.istio-system:8080
> - --discoveryRefreshDelay
> - 1s
> - --zipkinAddress
> - zipkin.istio-system:9411
> - --connectTimeout
> - 10s
> - --statsdUdpAddress
> - istio-mixer.istio-system:9125
> - --proxyAdminPort
> - "15000"
> env:
> - name: POD_NAME
> valueFrom:
> fieldRef:
> fieldPath: metadata.name
> - name: POD_NAMESPACE
> valueFrom:
> fieldRef:
> fieldPath: metadata.namespace
> - name: INSTANCE_IP
> valueFrom:
> fieldRef:
> fieldPath: status.podIP
> image: docker.io/istio/proxy_debug:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-proxy
> resources: {}
> securityContext:
> privileged: true
> readOnlyRootFilesystem: false
> runAsUser: 1337
> volumeMounts:
> - mountPath: /etc/istio/proxy
> name: istio-envoy
> - mountPath: /etc/certs/
> name: istio-certs
> readOnly: true
> initContainers:
> - args:
> - -p
> - "15001"
> - -u
> - "1337"
> image: docker.io/istio/proxy_init:0.2.12
> imagePullPolicy: IfNotPresent
> name: istio-init
> resources: {}
> securityContext:
> capabilities:
> add:
> - NET_ADMIN
> privileged: true
> - args:
> - -c
> - sysctl -w kernel.core_pattern=/etc/istio/proxy/core.%e.%p.%t && ulimit -c
> unlimited
> command:
> - /bin/sh
> image: alpine
> imagePullPolicy: IfNotPresent
> name: enable-core-dump
> resources: {}
> securityContext:
> privileged: true
> volumes:
> - emptyDir:
> medium: Memory
> sizeLimit: "0"
> name: istio-envoy
> - name: istio-certs
> secret:
> optional: true
> secretName: istio.default
> status: {}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment