Skip to content

Instantly share code, notes, and snippets.

@MarkSRobinson

MarkSRobinson/pod-configuration.yaml Secret

Created August 3, 2021 21:36
Show Gist options
  • Save MarkSRobinson/702ae2c4ebb8f2a02509c72c30c80531 to your computer and use it in GitHub Desktop.
Save MarkSRobinson/702ae2c4ebb8f2a02509c72c30c80531 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
pod-configuration.yaml
apiVersion: v1
kind: Pod
metadata:
name: k6-grpc-sample-starter-sxlhs
generateName: k6-grpc-sample-starter-
namespace: team-namespace
selfLink: /api/v1/namespaces/deveff-team/pods/k6-grpc-sample-starter-sxlhs
uid: 98e21060-c058-4265-a085-de1f5b9ff25e
resourceVersion: '143231102'
creationTimestamp: '2021-08-03T21:32:24Z'
labels:
app: k6
controller-uid: b121721b-a5b4-4126-abf9-2140bf55841b
job-name: k6-grpc-sample-starter
k6_cr: k6-grpc-sample
linkerd.io/control-plane-ns: linkerd
linkerd.io/workload-ns: team-namespace
annotations:
jaeger.linkerd.io/tracing-enabled: 'true'
linkerd.io/created-by: linkerd/proxy-injector stable-2.10.2
linkerd.io/identity-mode: default
linkerd.io/proxy-version: ''
viz.linkerd.io/tap-enabled: 'true'
ownerReferences:
- apiVersion: batch/v1
kind: Job
name: k6-grpc-sample-starter
uid: b121721b-a5b4-4126-abf9-2140bf55841b
controller: true
blockOwnerDeletion: true
status:
phase: Running
conditions:
- type: Initialized
status: 'True'
lastProbeTime: null
lastTransitionTime: '2021-08-03T21:32:27Z'
- type: Ready
status: 'False'
lastProbeTime: null
lastTransitionTime: '2021-08-03T21:32:24Z'
reason: ContainersNotReady
message: 'containers with unready status: [k6-curl]'
- type: ContainersReady
status: 'False'
lastProbeTime: null
lastTransitionTime: '2021-08-03T21:32:24Z'
reason: ContainersNotReady
message: 'containers with unready status: [k6-curl]'
- type: PodScheduled
status: 'True'
lastProbeTime: null
lastTransitionTime: '2021-08-03T21:32:24Z'
hostIP: 10.105.6.170
podIP: 100.64.110.59
podIPs:
- ip: 100.64.110.59
startTime: '2021-08-03T21:32:24Z'
initContainerStatuses:
- name: linkerd-init
state:
terminated:
exitCode: 0
reason: Completed
startedAt: '2021-08-03T21:32:26Z'
finishedAt: '2021-08-03T21:32:26Z'
containerID: >-
docker://aee53f85a5c0abd19c1f3ae07166cdbec06d2b87b1dde9f7c6b821be6b13aa18
lastState: {}
ready: true
restartCount: 0
image: 'proxy-init:v1.3.11'
imageID: >-
docker-pullable://linkerd/proxy-init@sha256:9a7d17d2bce7274f5abfd611d34e24460a59c55e55ff93440c31ab6b60b542b2
containerID: >-
docker://aee53f85a5c0abd19c1f3ae07166cdbec06d2b87b1dde9f7c6b821be6b13aa18
containerStatuses:
- name: k6-curl
state:
terminated:
exitCode: 7
reason: Error
startedAt: '2021-08-03T21:32:28Z'
finishedAt: '2021-08-03T21:32:28Z'
containerID: >-
docker://3818eaba942b06aa466781f420c5e2818487bdc010ef32601ad2a3eccdcc8c72
lastState: {}
ready: false
restartCount: 0
image: 'radial/busyboxplus:curl'
imageID: >-
docker-pullable://radial/busyboxplus@sha256:a68c05ab1112fd90ad7b14985a48520e9d26dbbe00cb9c09aa79fdc0ef46b372
containerID: >-
docker://3818eaba942b06aa466781f420c5e2818487bdc010ef32601ad2a3eccdcc8c72
started: false
- name: linkerd-proxy
state:
running:
startedAt: '2021-08-03T21:32:28Z'
lastState: {}
ready: true
restartCount: 0
image: 'linkerd/proxy:stable-2.10.2'
imageID: >-
docker-pullable://linkerd/proxy@sha256:7dd7f009acc6b5662acd1166ef9e99be583ae63362c3643e163955870f304ef8
containerID: >-
docker://2eeb4dfb5ed706a2b6c2c88668478dacd22fa592e105d1a0a51a5aa60b3122e8
started: true
qosClass: Burstable
spec:
volumes:
- name: default-token-h8x44
secret:
secretName: default-token-h8x44
defaultMode: 420
- name: linkerd-proxy-init-xtables-lock
emptyDir: {}
- name: linkerd-identity-end-entity
emptyDir:
medium: Memory
- name: podinfo
downwardAPI:
items:
- path: labels
fieldRef:
apiVersion: v1
fieldPath: metadata.labels
defaultMode: 420
initContainers:
- name: linkerd-init
image: 'linkerd/proxy-init:v1.3.11'
args:
- '--incoming-proxy-port'
- '4143'
- '--outgoing-proxy-port'
- '4140'
- '--proxy-uid'
- '2102'
- '--inbound-ports-to-ignore'
- '4190,4191'
resources:
limits:
cpu: 100m
memory: 50Mi
requests:
cpu: 10m
memory: 10Mi
volumeMounts:
- name: linkerd-proxy-init-xtables-lock
mountPath: /run
- name: default-token-h8x44
readOnly: true
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
imagePullPolicy: IfNotPresent
securityContext:
capabilities:
add:
- NET_ADMIN
- NET_RAW
privileged: false
runAsUser: 0
runAsNonRoot: false
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
containers:
- name: k6-curl
image: 'radial/busyboxplus:curl'
command:
- sh
- '-c'
- >-
curl -X PATCH -H 'Content-Type: application/json'
http://100.64.110.231:6565/v1/status -d
'{"data":{"attributes":{"paused":false},"id":"default","type":"status"}}';curl
-X PATCH -H 'Content-Type: application/json'
http://100.64.110.195:6565/v1/status -d
'{"data":{"attributes":{"paused":false},"id":"default","type":"status"}}';curl
-X PATCH -H 'Content-Type: application/json'
http://100.64.110.179:6565/v1/status -d
'{"data":{"attributes":{"paused":false},"id":"default","type":"status"}}';curl
-X PATCH -H 'Content-Type: application/json'
http://100.64.110.113:6565/v1/status -d
'{"data":{"attributes":{"paused":false},"id":"default","type":"status"}}'
resources: {}
volumeMounts:
- name: default-token-h8x44
readOnly: true
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
imagePullPolicy: IfNotPresent
- name: linkerd-proxy
image: 'linkerd/proxy:stable-2.10.2'
ports:
- name: linkerd-proxy
containerPort: 4143
protocol: TCP
- name: linkerd-admin
containerPort: 4191
protocol: TCP
env:
- name: LINKERD2_PROXY_LOG
value: 'warn,linkerd=info'
- name: LINKERD2_PROXY_LOG_FORMAT
value: plain
- name: LINKERD2_PROXY_DESTINATION_SVC_ADDR
value: 'linkerd-dst-headless.linkerd.svc.cluster.local.:8086'
- name: LINKERD2_PROXY_DESTINATION_PROFILE_NETWORKS
value: '10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16'
- name: LINKERD2_PROXY_INBOUND_CONNECT_TIMEOUT
value: 100ms
- name: LINKERD2_PROXY_OUTBOUND_CONNECT_TIMEOUT
value: 1000ms
- name: LINKERD2_PROXY_CONTROL_LISTEN_ADDR
value: '0.0.0.0:4190'
- name: LINKERD2_PROXY_ADMIN_LISTEN_ADDR
value: '0.0.0.0:4191'
- name: LINKERD2_PROXY_OUTBOUND_LISTEN_ADDR
value: '127.0.0.1:4140'
- name: LINKERD2_PROXY_INBOUND_LISTEN_ADDR
value: '0.0.0.0:4143'
- name: LINKERD2_PROXY_DESTINATION_PROFILE_SUFFIXES
value: svc.cluster.local.
- name: LINKERD2_PROXY_INBOUND_ACCEPT_KEEPALIVE
value: 10000ms
- name: LINKERD2_PROXY_OUTBOUND_CONNECT_KEEPALIVE
value: 10000ms
- name: LINKERD2_PROXY_INBOUND_PORTS_DISABLE_PROTOCOL_DETECTION
value: '25,443,587,3306,5432,11211'
- name: _pod_ns
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: _pod_nodeName
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: LINKERD2_PROXY_DESTINATION_CONTEXT
value: |
{"ns":"$(_pod_ns)", "nodeName":"$(_pod_nodeName)"}
- name: LINKERD2_PROXY_IDENTITY_DIR
value: /var/run/linkerd/identity/end-entity
- name: LINKERD2_PROXY_IDENTITY_TRUST_ANCHORS
value: |
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
- name: LINKERD2_PROXY_IDENTITY_TOKEN_FILE
value: /var/run/secrets/kubernetes.io/serviceaccount/token
- name: LINKERD2_PROXY_IDENTITY_SVC_ADDR
value: 'linkerd-identity-headless.linkerd.svc.cluster.local.:8080'
- name: _pod_sa
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.serviceAccountName
- name: _l5d_ns
value: linkerd
- name: _l5d_trustdomain
value: cluster.local
- name: LINKERD2_PROXY_IDENTITY_LOCAL_NAME
value: >-
$(_pod_sa).$(_pod_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)
- name: LINKERD2_PROXY_IDENTITY_SVC_NAME
value: >-
linkerd-identity.$(_l5d_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)
- name: LINKERD2_PROXY_DESTINATION_SVC_NAME
value: >-
linkerd-destination.$(_l5d_ns).serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)
- name: LINKERD2_PROXY_TAP_SVC_NAME
value: >-
tap.linkerd-viz.serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)
- name: LINKERD2_PROXY_TRACE_ATTRIBUTES_PATH
value: /var/run/linkerd/podinfo/labels
- name: LINKERD2_PROXY_TRACE_COLLECTOR_SVC_ADDR
value: 'collector.linkerd-jaeger:55678'
- name: LINKERD2_PROXY_TRACE_COLLECTOR_SVC_NAME
value: >-
collector.linkerd-jaeger.serviceaccount.identity.$(_l5d_ns).$(_l5d_trustdomain)
resources:
limits:
memory: 250Mi
requests:
cpu: 100m
memory: 20Mi
volumeMounts:
- name: linkerd-identity-end-entity
mountPath: /var/run/linkerd/identity/end-entity
- name: default-token-h8x44
readOnly: true
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
- name: podinfo
mountPath: var/run/linkerd/podinfo
livenessProbe:
httpGet:
path: /live
port: 4191
scheme: HTTP
initialDelaySeconds: 10
timeoutSeconds: 1
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
readinessProbe:
httpGet:
path: /ready
port: 4191
scheme: HTTP
initialDelaySeconds: 2
timeoutSeconds: 1
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: FallbackToLogsOnError
imagePullPolicy: IfNotPresent
securityContext:
runAsUser: 2102
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
restartPolicy: Never
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
serviceAccountName: default
serviceAccount: default
nodeName: ip-10-105-6-170.ec2.internal
securityContext: {}
schedulerName: default-scheduler
tolerations:
- key: node.kubernetes.io/not-ready
operator: Exists
effect: NoExecute
tolerationSeconds: 300
- key: node.kubernetes.io/unreachable
operator: Exists
effect: NoExecute
tolerationSeconds: 300
priorityClassName: plaid-app-normal
priority: 10000
enableServiceLinks: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment