Skip to content

Instantly share code, notes, and snippets.

@skonto
Last active July 12, 2023 19:18
Show Gist options
  • Save skonto/a0855313382ff762672d28630605232a to your computer and use it in GitHub Desktop.
Save skonto/a0855313382ff762672d28630605232a to your computer and use it in GitHub Desktop.
with anyuid
{
"apiVersion": "v1",
"items": [
{
"apiVersion": "v1",
"kind": "Pod",
"metadata": {
"annotations": {
"autoscaling.knative.dev/minScale": "1",
"autoscaling.knative.dev/target": "10",
"autoscaling.knative.dev/targetBurstCapacity": "0",
"k8s.ovn.org/pod-networks": "{\"default\":{\"ip_addresses\":[\"10.128.2.34/23\"],\"mac_address\":\"0a:58:0a:80:02:22\",\"gateway_ips\":[\"10.128.2.1\"],\"ip_address\":\"10.128.2.34/23\",\"gateway_ip\":\"10.128.2.1\"}}",
"k8s.v1.cni.cncf.io/network-status": "[{\n \"name\": \"ovn-kubernetes\",\n \"interface\": \"eth0\",\n \"ips\": [\n \"10.128.2.34\"\n ],\n \"mac\": \"0a:58:0a:80:02:22\",\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"kserve-demo/v2-4-istio-cni\",\n \"dns\": {}\n}]",
"k8s.v1.cni.cncf.io/networks": "v2-4-istio-cni",
"k8s.v1.cni.cncf.io/networks-status": "[{\n \"name\": \"ovn-kubernetes\",\n \"interface\": \"eth0\",\n \"ips\": [\n \"10.128.2.34\"\n ],\n \"mac\": \"0a:58:0a:80:02:22\",\n \"default\": true,\n \"dns\": {}\n},{\n \"name\": \"kserve-demo/v2-4-istio-cni\",\n \"dns\": {}\n}]",
"kubectl.kubernetes.io/default-container": "user-container",
"kubectl.kubernetes.io/default-logs-container": "user-container",
"openshift.io/scc": "anyuid",
"prometheus.io/path": "/stats/prometheus",
"prometheus.io/port": "15020",
"prometheus.io/scrape": "true",
"serving.knative.dev/creator": "system:admin",
"sidecar.istio.io/inject": "true",
"sidecar.istio.io/interceptionMode": "REDIRECT",
"sidecar.istio.io/rewriteAppHTTPProbers": "true",
"sidecar.istio.io/status": "{\"initContainers\":null,\"containers\":[\"istio-proxy\"],\"volumes\":[\"workload-socket\",\"credential-socket\",\"workload-certs\",\"istio-envoy\",\"istio-data\",\"istio-podinfo\",\"istiod-ca-cert\"],\"imagePullSecrets\":null,\"revision\":\"basic\"}",
"traffic.sidecar.istio.io/excludeInboundPorts": "15090,15021",
"traffic.sidecar.istio.io/includeInboundPorts": "*",
"traffic.sidecar.istio.io/includeOutboundIPRanges": "*"
},
"creationTimestamp": "2023-07-12T19:15:42Z",
"generateName": "helloworld-go-00001-deployment-f6ddd7d48-",
"labels": {
"app": "helloworld-go",
"failure-domain.beta.kubernetes.io/region": "us-west-2",
"failure-domain.beta.kubernetes.io/zone": "us-west-2b",
"knative.dev/usedByResource": "true",
"maistra-version": "2.4.0",
"pod-template-hash": "f6ddd7d48",
"security.istio.io/tlsMode": "istio",
"service.istio.io/canonical-name": "helloworld-go",
"service.istio.io/canonical-revision": "helloworld-go-00001",
"serving.knative.dev/configuration": "helloworld-go",
"serving.knative.dev/configurationGeneration": "1",
"serving.knative.dev/configurationUID": "455fbca1-0d2d-4660-848d-75695383b134",
"serving.knative.dev/revision": "helloworld-go-00001",
"serving.knative.dev/revisionUID": "5e5a7fd9-f2e2-4b0e-ad7d-62e19b6a9fd0",
"serving.knative.dev/service": "helloworld-go",
"serving.knative.dev/serviceUID": "7d1a9bf4-34c7-40ae-bf4a-5c06c4398ba1",
"topology.istio.io/subzone": "",
"topology.kubernetes.io/region": "us-west-2",
"topology.kubernetes.io/zone": "us-west-2b"
},
"name": "helloworld-go-00001-deployment-f6ddd7d48-zgw6l",
"namespace": "kserve-demo",
"ownerReferences": [
{
"apiVersion": "apps/v1",
"blockOwnerDeletion": true,
"controller": true,
"kind": "ReplicaSet",
"name": "helloworld-go-00001-deployment-f6ddd7d48",
"uid": "a2f030b2-01df-4d83-9df6-e512d24ad504"
}
],
"resourceVersion": "60199",
"uid": "2b031940-50bb-46cd-8287-3ff922fef58b"
},
"spec": {
"containers": [
{
"env": [
{
"name": "TARGET",
"value": "Go Sample v1"
},
{
"name": "PORT",
"value": "8080"
},
{
"name": "K_REVISION",
"value": "helloworld-go-00001"
},
{
"name": "K_CONFIGURATION",
"value": "helloworld-go"
},
{
"name": "K_SERVICE",
"value": "helloworld-go"
}
],
"image": "index.docker.io/skonto/helloworld-go@sha256:dd20d7659c16bdc58c09740a543ef3c36b7c04742a2b6b280a30c2a76dcf6c09",
"imagePullPolicy": "Always",
"lifecycle": {
"preStop": {
"httpGet": {
"path": "/wait-for-drain",
"port": 8022,
"scheme": "HTTP"
}
}
},
"name": "user-container",
"ports": [
{
"containerPort": 8080,
"name": "user-port",
"protocol": "TCP"
}
],
"resources": {
"requests": {
"cpu": "200m"
}
},
"securityContext": {
"capabilities": {
"drop": [
"MKNOD"
]
}
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "FallbackToLogsOnError",
"volumeMounts": [
{
"mountPath": "/var/run/secrets/kubernetes.io/serviceaccount",
"name": "kube-api-access-ss774",
"readOnly": true
}
]
},
{
"env": [
{
"name": "SERVING_NAMESPACE",
"value": "kserve-demo"
},
{
"name": "SERVING_SERVICE",
"value": "helloworld-go"
},
{
"name": "SERVING_CONFIGURATION",
"value": "helloworld-go"
},
{
"name": "SERVING_REVISION",
"value": "helloworld-go-00001"
},
{
"name": "QUEUE_SERVING_PORT",
"value": "8012"
},
{
"name": "QUEUE_SERVING_TLS_PORT",
"value": "8112"
},
{
"name": "CONTAINER_CONCURRENCY",
"value": "0"
},
{
"name": "REVISION_TIMEOUT_SECONDS",
"value": "300"
},
{
"name": "REVISION_RESPONSE_START_TIMEOUT_SECONDS",
"value": "0"
},
{
"name": "REVISION_IDLE_TIMEOUT_SECONDS",
"value": "0"
},
{
"name": "SERVING_POD",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.name"
}
}
},
{
"name": "SERVING_POD_IP",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "status.podIP"
}
}
},
{
"name": "SERVING_LOGGING_CONFIG"
},
{
"name": "SERVING_LOGGING_LEVEL"
},
{
"name": "SERVING_REQUEST_LOG_TEMPLATE",
"value": "{\"httpRequest\": {\"requestMethod\": \"{{.Request.Method}}\", \"requestUrl\": \"{{js .Request.RequestURI}}\", \"requestSize\": \"{{.Request.ContentLength}}\", \"status\": {{.Response.Code}}, \"responseSize\": \"{{.Response.Size}}\", \"userAgent\": \"{{js .Request.UserAgent}}\", \"remoteIp\": \"{{js .Request.RemoteAddr}}\", \"serverIp\": \"{{.Revision.PodIP}}\", \"referer\": \"{{js .Request.Referer}}\", \"latency\": \"{{.Response.Latency}}s\", \"protocol\": \"{{.Request.Proto}}\"}, \"traceId\": \"{{index .Request.Header \"X-B3-Traceid\"}}\"}"
},
{
"name": "SERVING_ENABLE_REQUEST_LOG",
"value": "false"
},
{
"name": "SERVING_REQUEST_METRICS_BACKEND",
"value": "prometheus"
},
{
"name": "TRACING_CONFIG_BACKEND",
"value": "none"
},
{
"name": "TRACING_CONFIG_ZIPKIN_ENDPOINT"
},
{
"name": "TRACING_CONFIG_DEBUG",
"value": "false"
},
{
"name": "TRACING_CONFIG_SAMPLE_RATE",
"value": "0.1"
},
{
"name": "USER_PORT",
"value": "8080"
},
{
"name": "SYSTEM_NAMESPACE",
"value": "knative-serving"
},
{
"name": "METRICS_DOMAIN",
"value": "knative.dev/internal/serving"
},
{
"name": "SERVING_READINESS_PROBE",
"value": "{\"tcpSocket\":{\"port\":8080,\"host\":\"127.0.0.1\"},\"successThreshold\":1}"
},
{
"name": "ENABLE_PROFILING",
"value": "false"
},
{
"name": "SERVING_ENABLE_PROBE_REQUEST_LOG",
"value": "false"
},
{
"name": "METRICS_COLLECTOR_ADDRESS"
},
{
"name": "CONCURRENCY_STATE_ENDPOINT"
},
{
"name": "CONCURRENCY_STATE_TOKEN_PATH",
"value": "/var/run/secrets/tokens/state-token"
},
{
"name": "HOST_IP",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "status.hostIP"
}
}
},
{
"name": "ENABLE_HTTP2_AUTO_DETECTION",
"value": "false"
}
],
"image": "registry.redhat.io/openshift-serverless-1/serving-queue-rhel8@sha256:a73df9030d510897c831b7dedd218b7c8fe5f065fa286257261aa7991e6a5aaa",
"imagePullPolicy": "IfNotPresent",
"name": "queue-proxy",
"ports": [
{
"containerPort": 8022,
"name": "http-queueadm",
"protocol": "TCP"
},
{
"containerPort": 9090,
"name": "http-autometric",
"protocol": "TCP"
},
{
"containerPort": 9091,
"name": "http-usermetric",
"protocol": "TCP"
},
{
"containerPort": 8012,
"name": "queue-port",
"protocol": "TCP"
},
{
"containerPort": 8112,
"name": "https-port",
"protocol": "TCP"
}
],
"readinessProbe": {
"failureThreshold": 3,
"httpGet": {
"httpHeaders": [
{
"name": "K-Network-Probe",
"value": "queue"
}
],
"path": "/app-health/queue-proxy/readyz",
"port": 15020,
"scheme": "HTTP"
},
"periodSeconds": 10,
"successThreshold": 1,
"timeoutSeconds": 1
},
"resources": {
"requests": {
"cpu": "25m"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL",
"MKNOD"
]
},
"readOnlyRootFilesystem": true,
"runAsNonRoot": true
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/var/run/secrets/kubernetes.io/serviceaccount",
"name": "kube-api-access-ss774",
"readOnly": true
}
]
},
{
"args": [
"proxy",
"sidecar",
"--domain",
"$(POD_NAMESPACE).svc.cluster.local",
"--proxyLogLevel=warning",
"--proxyComponentLogLevel=misc:error",
"--log_output_level=default:warn",
"--concurrency",
"2"
],
"env": [
{
"name": "JWT_POLICY",
"value": "first-party-jwt"
},
{
"name": "PILOT_CERT_PROVIDER",
"value": "istiod"
},
{
"name": "CA_ADDR",
"value": "istiod-basic.istio-system.svc:15012"
},
{
"name": "POD_NAME",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.name"
}
}
},
{
"name": "POD_NAMESPACE",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.namespace"
}
}
},
{
"name": "INSTANCE_IP",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "status.podIP"
}
}
},
{
"name": "SERVICE_ACCOUNT",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "spec.serviceAccountName"
}
}
},
{
"name": "HOST_IP",
"valueFrom": {
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "status.hostIP"
}
}
},
{
"name": "PROXY_CONFIG",
"value": "{\"discoveryAddress\":\"istiod-basic.istio-system.svc:15012\",\"tracing\":{\"zipkin\":{\"address\":\"jaeger-collector.istio-system.svc:9411\"}},\"proxyMetadata\":{\"ISTIO_META_DNS_AUTO_ALLOCATE\":\"true\",\"ISTIO_META_DNS_CAPTURE\":\"true\",\"PROXY_XDS_VIA_AGENT\":\"true\"}}\n"
},
{
"name": "ISTIO_META_POD_PORTS",
"value": "[\n {\"name\":\"user-port\",\"containerPort\":8080,\"protocol\":\"TCP\"}\n ,{\"name\":\"http-queueadm\",\"containerPort\":8022,\"protocol\":\"TCP\"}\n ,{\"name\":\"http-autometric\",\"containerPort\":9090,\"protocol\":\"TCP\"}\n ,{\"name\":\"http-usermetric\",\"containerPort\":9091,\"protocol\":\"TCP\"}\n ,{\"name\":\"queue-port\",\"containerPort\":8012,\"protocol\":\"TCP\"}\n ,{\"name\":\"https-port\",\"containerPort\":8112,\"protocol\":\"TCP\"}\n]"
},
{
"name": "ISTIO_META_APP_CONTAINERS",
"value": "user-container,queue-proxy"
},
{
"name": "ISTIO_META_CLUSTER_ID",
"value": "Kubernetes"
},
{
"name": "ISTIO_META_INTERCEPTION_MODE",
"value": "REDIRECT"
},
{
"name": "ISTIO_META_WORKLOAD_NAME",
"value": "helloworld-go-00001-deployment"
},
{
"name": "ISTIO_META_OWNER",
"value": "kubernetes://apis/apps/v1/namespaces/kserve-demo/deployments/helloworld-go-00001-deployment"
},
{
"name": "ISTIO_META_MESH_ID",
"value": "cluster.local"
},
{
"name": "TRUST_DOMAIN",
"value": "cluster.local"
},
{
"name": "ISTIO_META_DNS_AUTO_ALLOCATE",
"value": "true"
},
{
"name": "ISTIO_META_DNS_CAPTURE",
"value": "true"
},
{
"name": "PROXY_XDS_VIA_AGENT",
"value": "true"
},
{
"name": "ISTIO_KUBE_APP_PROBERS",
"value": "{\"/app-health/queue-proxy/readyz\":{\"httpGet\":{\"path\":\"/\",\"port\":8012,\"scheme\":\"HTTP\",\"httpHeaders\":[{\"name\":\"K-Network-Probe\",\"value\":\"queue\"}]},\"timeoutSeconds\":1}}"
}
],
"image": "registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:07e174d5df7062b5f398291aed31cd01b874c8a6491ba6148675955b9d77ac5b",
"imagePullPolicy": "IfNotPresent",
"name": "istio-proxy",
"ports": [
{
"containerPort": 15090,
"name": "http-envoy-prom",
"protocol": "TCP"
}
],
"readinessProbe": {
"failureThreshold": 30,
"httpGet": {
"path": "/healthz/ready",
"port": 15021,
"scheme": "HTTP"
},
"initialDelaySeconds": 1,
"periodSeconds": 2,
"successThreshold": 1,
"timeoutSeconds": 3
},
"resources": {
"limits": {
"cpu": "2",
"memory": "1Gi"
},
"requests": {
"cpu": "10m",
"memory": "128Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL",
"KILL",
"MKNOD",
"SETGID",
"SETUID"
]
},
"privileged": false,
"readOnlyRootFilesystem": true,
"runAsGroup": 1337,
"runAsNonRoot": true,
"runAsUser": 1337
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/var/run/secrets/workload-spiffe-uds",
"name": "workload-socket"
},
{
"mountPath": "/var/run/secrets/credential-uds",
"name": "credential-socket"
},
{
"mountPath": "/var/run/secrets/workload-spiffe-credentials",
"name": "workload-certs"
},
{
"mountPath": "/var/run/secrets/istio",
"name": "istiod-ca-cert"
},
{
"mountPath": "/var/lib/istio/data",
"name": "istio-data"
},
{
"mountPath": "/etc/istio/proxy",
"name": "istio-envoy"
},
{
"mountPath": "/etc/istio/pod",
"name": "istio-podinfo"
},
{
"mountPath": "/var/run/secrets/kubernetes.io/serviceaccount",
"name": "kube-api-access-ss774",
"readOnly": true
}
]
}
],
"dnsPolicy": "ClusterFirst",
"enableServiceLinks": false,
"imagePullSecrets": [
{
"name": "default-dockercfg-26kgc"
}
],
"nodeName": "ip-10-0-146-79.us-west-2.compute.internal",
"preemptionPolicy": "PreemptLowerPriority",
"priority": 0,
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"seLinuxOptions": {
"level": "s0:c26,c25"
}
},
"serviceAccount": "default",
"serviceAccountName": "default",
"terminationGracePeriodSeconds": 300,
"tolerations": [
{
"effect": "NoExecute",
"key": "node.kubernetes.io/not-ready",
"operator": "Exists",
"tolerationSeconds": 300
},
{
"effect": "NoExecute",
"key": "node.kubernetes.io/unreachable",
"operator": "Exists",
"tolerationSeconds": 300
},
{
"effect": "NoSchedule",
"key": "node.kubernetes.io/memory-pressure",
"operator": "Exists"
}
],
"volumes": [
{
"emptyDir": {},
"name": "workload-socket"
},
{
"emptyDir": {},
"name": "credential-socket"
},
{
"emptyDir": {},
"name": "workload-certs"
},
{
"emptyDir": {
"medium": "Memory"
},
"name": "istio-envoy"
},
{
"emptyDir": {},
"name": "istio-data"
},
{
"downwardAPI": {
"defaultMode": 420,
"items": [
{
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.labels"
},
"path": "labels"
},
{
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.annotations"
},
"path": "annotations"
}
]
},
"name": "istio-podinfo"
},
{
"configMap": {
"defaultMode": 420,
"name": "istio-ca-root-cert"
},
"name": "istiod-ca-cert"
},
{
"name": "kube-api-access-ss774",
"projected": {
"defaultMode": 420,
"sources": [
{
"serviceAccountToken": {
"expirationSeconds": 3607,
"path": "token"
}
},
{
"configMap": {
"items": [
{
"key": "ca.crt",
"path": "ca.crt"
}
],
"name": "kube-root-ca.crt"
}
},
{
"downwardAPI": {
"items": [
{
"fieldRef": {
"apiVersion": "v1",
"fieldPath": "metadata.namespace"
},
"path": "namespace"
}
]
}
},
{
"configMap": {
"items": [
{
"key": "service-ca.crt",
"path": "service-ca.crt"
}
],
"name": "openshift-service-ca.crt"
}
}
]
}
}
]
},
"status": {
"conditions": [
{
"lastProbeTime": null,
"lastTransitionTime": "2023-07-12T19:15:42Z",
"status": "True",
"type": "Initialized"
},
{
"lastProbeTime": null,
"lastTransitionTime": "2023-07-12T19:15:47Z",
"status": "True",
"type": "Ready"
},
{
"lastProbeTime": null,
"lastTransitionTime": "2023-07-12T19:15:47Z",
"status": "True",
"type": "ContainersReady"
},
{
"lastProbeTime": null,
"lastTransitionTime": "2023-07-12T19:15:42Z",
"status": "True",
"type": "PodScheduled"
}
],
"containerStatuses": [
{
"containerID": "cri-o://0c3d0fa2d926ea2451a4849f2d19a6f704f65c5cffbb26e18b365fff917e10ee",
"image": "registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:07e174d5df7062b5f398291aed31cd01b874c8a6491ba6148675955b9d77ac5b",
"imageID": "registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:07e174d5df7062b5f398291aed31cd01b874c8a6491ba6148675955b9d77ac5b",
"lastState": {},
"name": "istio-proxy",
"ready": true,
"restartCount": 0,
"started": true,
"state": {
"running": {
"startedAt": "2023-07-12T19:15:45Z"
}
}
},
{
"containerID": "cri-o://185c6c4c3f2c7de65524b99be6f543793f66d3804c622fcdbcc35d2d44ffafad",
"image": "registry.redhat.io/openshift-serverless-1/serving-queue-rhel8@sha256:a73df9030d510897c831b7dedd218b7c8fe5f065fa286257261aa7991e6a5aaa",
"imageID": "registry.redhat.io/openshift-serverless-1/serving-queue-rhel8@sha256:0c82cf0912a9a8a555a2dd7668a8b14132d368025644d1ed891001ff6088562f",
"lastState": {},
"name": "queue-proxy",
"ready": true,
"restartCount": 0,
"started": true,
"state": {
"running": {
"startedAt": "2023-07-12T19:15:45Z"
}
}
},
{
"containerID": "cri-o://25f68bd5ecc3f05e544b5df702b8428ea56f5501964cde2e5f20cb3cf2a48772",
"image": "docker.io/skonto/helloworld-go@sha256:dd20d7659c16bdc58c09740a543ef3c36b7c04742a2b6b280a30c2a76dcf6c09",
"imageID": "docker.io/skonto/helloworld-go@sha256:dd20d7659c16bdc58c09740a543ef3c36b7c04742a2b6b280a30c2a76dcf6c09",
"lastState": {},
"name": "user-container",
"ready": true,
"restartCount": 0,
"started": true,
"state": {
"running": {
"startedAt": "2023-07-12T19:15:45Z"
}
}
}
],
"hostIP": "10.0.146.79",
"phase": "Running",
"podIP": "10.128.2.34",
"podIPs": [
{
"ip": "10.128.2.34"
}
],
"qosClass": "Burstable",
"startTime": "2023-07-12T19:15:42Z"
}
}
],
"kind": "List",
"metadata": {
"resourceVersion": ""
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment