github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update Istio addon to 0.6.0 and mirror images in gcr

pull/8/head
Martin Ostrowski 2018-03-29 12:31:36 -07:00
parent cad4385cb0
commit 7d86ef87a7
2 changed files with 224 additions and 66 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

145
cluster/addons/istio/auth/istio-auth.yaml
View File

@ -8,6 +8,7 @@ kind: Namespace
metadata: metadata:
name: istio-system name: istio-system
labels: labels:
istio-injection: enabled
k8s-app: istio k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
@ -290,7 +291,7 @@ spec:
serviceAccountName: istio-mixer-service-account serviceAccountName: istio-mixer-service-account
containers: containers:
- name: statsd-to-prometheus - name: statsd-to-prometheus
image: prom/statsd-exporter:v0.5.0 image: gcr.io/istio-release/statsd-exporter:v0.5.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9102 - containerPort: 9102
@ -302,7 +303,7 @@ spec:
- name: config-volume - name: config-volume
mountPath: /etc/statsd mountPath: /etc/statsd
- name: mixer - name: mixer
image: gcr.io/istio-release/mixer:0.5.1 image: gcr.io/istio-release/mixer:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9091 - containerPort: 9091
@ -317,7 +318,7 @@ spec:
- -v - -v
- "2" - "2"
- name: istio-proxy - name: istio-proxy
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 15004 - containerPort: 15004
@ -593,6 +594,25 @@ spec:
version: v1alpha2 version: v1alpha2
--- ---
kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1
metadata:
name: solarwindses.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
package: solarwinds
istio: mixer-adapter
spec:
group: config.istio.io
names:
kind: solarwinds
plural: solarwindses
singular: solarwinds
scope: Namespaced
version: v1alpha2
---
kind: CustomResourceDefinition kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1 apiVersion: apiextensions.k8s.io/v1beta1
metadata: metadata:
@ -653,7 +673,7 @@ spec:
kind: CustomResourceDefinition kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1 apiVersion: apiextensions.k8s.io/v1beta1
metadata: metadata:
name: apikeies.config.istio.io name: apikeys.config.istio.io
labels: labels:
k8s-app: istio k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
@ -663,7 +683,7 @@ spec:
group: config.istio.io group: config.istio.io
names: names:
kind: apikey kind: apikey
plural: apikeies plural: apikeys
singular: apikey singular: apikey
scope: Namespaced scope: Namespaced
version: v1alpha2 version: v1alpha2
@ -1339,16 +1359,16 @@ spec:
attribute_bindings: attribute_bindings:
# Fill the new attributes from the adapter produced output. # Fill the new attributes from the adapter produced output.
# $out refers to an instance of OutputTemplate message # $out refers to an instance of OutputTemplate message
source.ip: $out.source_pod_ip source.ip: $out.source_pod_ip | ip("0.0.0.0")
source.labels: $out.source_labels source.labels: $out.source_labels | emptyStringMap()
source.namespace: $out.source_namespace source.namespace: $out.source_namespace | "default"
source.service: $out.source_service source.service: $out.source_service | "unknown"
source.serviceAccount: $out.source_service_account_name source.serviceAccount: $out.source_service_account_name | "unknown"
destination.ip: $out.destination_pod_ip destination.ip: $out.destination_pod_ip | ip("0.0.0.0")
destination.labels: $out.destination_labels destination.labels: $out.destination_labels | emptyStringMap()
destination.namespace: $out.destination_namespace destination.namespace: $out.destination_namespace | "default"
destination.service: $out.destination_service destination.service: $out.destination_service | "unknown"
destination.serviceAccount: $out.destination_service_account_name destination.serviceAccount: $out.destination_service_account_name | "unknown"
--- ---
################################ ################################
# Istio configMap cluster-wide # Istio configMap cluster-wide
@ -1378,8 +1398,9 @@ data:
enableTracing: true enableTracing: true
# #
# To disable the mixer completely (including metrics), comment out # To disable the mixer completely (including metrics), comment out
# the following line # the following lines
mixerAddress: istio-mixer.istio-system:15004 mixerCheckServer: istio-mixer.istio-system:15004
mixerReportServer: istio-mixer.istio-system:15004
# This is the ingress service name, update if you used a different name # This is the ingress service name, update if you used a different name
ingressService: istio-ingress ingressService: istio-ingress
# #
@ -1486,6 +1507,57 @@ spec:
scope: Namespaced scope: Namespaced
version: v1alpha2 version: v1alpha2
--- ---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: v1alpha2routerules.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: V1alpha2RouteRule
listKind: V1alpha2RouteRuleList
plural: v1alpha2routerules
singular: v1alpha2routerule
scope: Namespaced
version: v1alpha2
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: destinationrules.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: DestinationRule
listKind: DestinationRuleList
plural: destinationrules
singular: destinationrule
scope: Namespaced
version: v1alpha2
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: externalservices.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: ExternalService
listKind: ExternalServiceList
plural: externalservices
singular: externalservice
scope: Namespaced
version: v1alpha2
---
# Pilot service for discovery # Pilot service for discovery
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@ -1538,7 +1610,7 @@ spec:
serviceAccountName: istio-pilot-service-account serviceAccountName: istio-pilot-service-account
containers: containers:
- name: discovery - name: discovery
image: gcr.io/istio-release/pilot:0.5.1 image: gcr.io/istio-release/pilot:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: ["discovery", "-v", "2", "--admission-service", "istio-pilot"] args: ["discovery", "-v", "2", "--admission-service", "istio-pilot"]
ports: ports:
@ -1555,11 +1627,13 @@ spec:
fieldRef: fieldRef:
apiVersion: v1 apiVersion: v1
fieldPath: metadata.namespace fieldPath: metadata.namespace
- name: PILOT_THROTTLE
value: "200"
volumeMounts: volumeMounts:
- name: config-volume - name: config-volume
mountPath: /etc/istio/config mountPath: /etc/istio/config
- name: istio-proxy - name: istio-proxy
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 15003 - containerPort: 15003
@ -1639,7 +1713,7 @@ spec:
serviceAccountName: istio-ingress-service-account serviceAccountName: istio-ingress-service-account
containers: containers:
- name: istio-ingress - name: istio-ingress
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
args: args:
- proxy - proxy
- ingress - ingress
@ -1731,7 +1805,7 @@ spec:
serviceAccountName: istio-ca-service-account serviceAccountName: istio-ca-service-account
containers: containers:
- name: istio-ca - name: istio-ca
image: gcr.io/istio-release/istio-ca:0.5.1 image: gcr.io/istio-release/istio-ca:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command: ["/usr/local/bin/istio_ca"] command: ["/usr/local/bin/istio_ca"]
args: args:
@ -1776,21 +1850,16 @@ spec:
annotations: annotations:
sidecar.istio.io/inject: "false" sidecar.istio.io/inject: "false"
spec: spec:
serviceAccountName: grafana
containers: containers:
- name: grafana - name: grafana
image: gcr.io/istio-release/grafana:0.5.1 image: gcr.io/istio-release/grafana:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 3000 - containerPort: 3000
env: env:
- name: GRAFANA_PORT # Only put environment related config here. Generic Istio config
value: "3000" # should go in addons/grafana/grafana.ini.
- name: GF_AUTH_BASIC_ENABLED
value: "false"
- name: GF_AUTH_ANONYMOUS_ENABLED
value: "true"
- name: GF_AUTH_ANONYMOUS_ORG_ROLE
value: Admin
- name: GF_PATHS_DATA - name: GF_PATHS_DATA
value: /data/grafana value: /data/grafana
volumeMounts: volumeMounts:
@ -1800,6 +1869,15 @@ spec:
- name: grafana-data - name: grafana-data
emptyDir: {} emptyDir: {}
--- ---
apiVersion: v1
kind: ServiceAccount
metadata:
name: grafana
namespace: istio-system
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
---
--- ---
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
@ -2032,7 +2110,7 @@ spec:
serviceAccountName: prometheus serviceAccountName: prometheus
containers: containers:
- name: prometheus - name: prometheus
image: docker.io/prom/prometheus:v2.0.0 image: gcr.io/istio-release/prom/prometheus:v2.0.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- '--storage.tsdb.retention=6h' - '--storage.tsdb.retention=6h'
@ -2071,6 +2149,7 @@ rules:
- services - services
- endpoints - endpoints
- pods - pods
- nodes/proxy
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: resources:
@ -2114,7 +2193,7 @@ spec:
spec: spec:
containers: containers:
- name: servicegraph - name: servicegraph
image: gcr.io/istio-release/servicegraph:0.5.1 image: gcr.io/istio-release/servicegraph:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 8088 - containerPort: 8088
@ -2156,7 +2235,7 @@ spec:
spec: spec:
containers: containers:
- name: zipkin - name: zipkin
image: docker.io/openzipkin/zipkin:latest image: gcr.io/istio-release/zipkin:2.5.3
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9411 - containerPort: 9411

145
cluster/addons/istio/noauth/istio.yaml
View File

@ -8,6 +8,7 @@ kind: Namespace
metadata: metadata:
name: istio-system name: istio-system
labels: labels:
istio-injection: enabled
k8s-app: istio k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
--- ---
@ -290,7 +291,7 @@ spec:
serviceAccountName: istio-mixer-service-account serviceAccountName: istio-mixer-service-account
containers: containers:
- name: statsd-to-prometheus - name: statsd-to-prometheus
image: prom/statsd-exporter:v0.5.0 image: gcr.io/istio-release/statsd-exporter:v0.5.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9102 - containerPort: 9102
@ -302,7 +303,7 @@ spec:
- name: config-volume - name: config-volume
mountPath: /etc/statsd mountPath: /etc/statsd
- name: mixer - name: mixer
image: gcr.io/istio-release/mixer:0.5.1 image: gcr.io/istio-release/mixer:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9091 - containerPort: 9091
@ -317,7 +318,7 @@ spec:
- -v - -v
- "2" - "2"
- name: istio-proxy - name: istio-proxy
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 15004 - containerPort: 15004
@ -593,6 +594,25 @@ spec:
version: v1alpha2 version: v1alpha2
--- ---
kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1
metadata:
name: solarwindses.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
package: solarwinds
istio: mixer-adapter
spec:
group: config.istio.io
names:
kind: solarwinds
plural: solarwindses
singular: solarwinds
scope: Namespaced
version: v1alpha2
---
kind: CustomResourceDefinition kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1 apiVersion: apiextensions.k8s.io/v1beta1
metadata: metadata:
@ -653,7 +673,7 @@ spec:
kind: CustomResourceDefinition kind: CustomResourceDefinition
apiVersion: apiextensions.k8s.io/v1beta1 apiVersion: apiextensions.k8s.io/v1beta1
metadata: metadata:
name: apikeies.config.istio.io name: apikeys.config.istio.io
labels: labels:
k8s-app: istio k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile addonmanager.kubernetes.io/mode: Reconcile
@ -663,7 +683,7 @@ spec:
group: config.istio.io group: config.istio.io
names: names:
kind: apikey kind: apikey
plural: apikeies plural: apikeys
singular: apikey singular: apikey
scope: Namespaced scope: Namespaced
version: v1alpha2 version: v1alpha2
@ -1339,16 +1359,16 @@ spec:
attribute_bindings: attribute_bindings:
# Fill the new attributes from the adapter produced output. # Fill the new attributes from the adapter produced output.
# $out refers to an instance of OutputTemplate message # $out refers to an instance of OutputTemplate message
source.ip: $out.source_pod_ip source.ip: $out.source_pod_ip | ip("0.0.0.0")
source.labels: $out.source_labels source.labels: $out.source_labels | emptyStringMap()
source.namespace: $out.source_namespace source.namespace: $out.source_namespace | "default"
source.service: $out.source_service source.service: $out.source_service | "unknown"
source.serviceAccount: $out.source_service_account_name source.serviceAccount: $out.source_service_account_name | "unknown"
destination.ip: $out.destination_pod_ip destination.ip: $out.destination_pod_ip | ip("0.0.0.0")
destination.labels: $out.destination_labels destination.labels: $out.destination_labels | emptyStringMap()
destination.namespace: $out.destination_namespace destination.namespace: $out.destination_namespace | "default"
destination.service: $out.destination_service destination.service: $out.destination_service | "unknown"
destination.serviceAccount: $out.destination_service_account_name destination.serviceAccount: $out.destination_service_account_name | "unknown"
--- ---
################################ ################################
# Istio configMap cluster-wide # Istio configMap cluster-wide
@ -1378,8 +1398,9 @@ data:
enableTracing: true enableTracing: true
# #
# To disable the mixer completely (including metrics), comment out # To disable the mixer completely (including metrics), comment out
# the following line # the following lines
mixerAddress: istio-mixer.istio-system:15004 mixerCheckServer: istio-mixer.istio-system:15004
mixerReportServer: istio-mixer.istio-system:15004
# This is the ingress service name, update if you used a different name # This is the ingress service name, update if you used a different name
ingressService: istio-ingress ingressService: istio-ingress
# #
@ -1486,6 +1507,57 @@ spec:
scope: Namespaced scope: Namespaced
version: v1alpha2 version: v1alpha2
--- ---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: v1alpha2routerules.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: V1alpha2RouteRule
listKind: V1alpha2RouteRuleList
plural: v1alpha2routerules
singular: v1alpha2routerule
scope: Namespaced
version: v1alpha2
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: destinationrules.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: DestinationRule
listKind: DestinationRuleList
plural: destinationrules
singular: destinationrule
scope: Namespaced
version: v1alpha2
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: externalservices.config.istio.io
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
spec:
group: config.istio.io
names:
kind: ExternalService
listKind: ExternalServiceList
plural: externalservices
singular: externalservice
scope: Namespaced
version: v1alpha2
---
# Pilot service for discovery # Pilot service for discovery
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@ -1538,7 +1610,7 @@ spec:
serviceAccountName: istio-pilot-service-account serviceAccountName: istio-pilot-service-account
containers: containers:
- name: discovery - name: discovery
image: gcr.io/istio-release/pilot:0.5.1 image: gcr.io/istio-release/pilot:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: ["discovery", "-v", "2", "--admission-service", "istio-pilot"] args: ["discovery", "-v", "2", "--admission-service", "istio-pilot"]
ports: ports:
@ -1555,11 +1627,13 @@ spec:
fieldRef: fieldRef:
apiVersion: v1 apiVersion: v1
fieldPath: metadata.namespace fieldPath: metadata.namespace
- name: PILOT_THROTTLE
value: "200"
volumeMounts: volumeMounts:
- name: config-volume - name: config-volume
mountPath: /etc/istio/config mountPath: /etc/istio/config
- name: istio-proxy - name: istio-proxy
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 15003 - containerPort: 15003
@ -1639,7 +1713,7 @@ spec:
serviceAccountName: istio-ingress-service-account serviceAccountName: istio-ingress-service-account
containers: containers:
- name: istio-ingress - name: istio-ingress
image: gcr.io/istio-release/proxy:0.5.1 image: gcr.io/istio-release/proxy:0.6.0
args: args:
- proxy - proxy
- ingress - ingress
@ -1731,7 +1805,7 @@ spec:
serviceAccountName: istio-ca-service-account serviceAccountName: istio-ca-service-account
containers: containers:
- name: istio-ca - name: istio-ca
image: gcr.io/istio-release/istio-ca:0.5.1 image: gcr.io/istio-release/istio-ca:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command: ["/usr/local/bin/istio_ca"] command: ["/usr/local/bin/istio_ca"]
args: args:
@ -1776,21 +1850,16 @@ spec:
annotations: annotations:
sidecar.istio.io/inject: "false" sidecar.istio.io/inject: "false"
spec: spec:
serviceAccountName: grafana
containers: containers:
- name: grafana - name: grafana
image: gcr.io/istio-release/grafana:0.5.1 image: gcr.io/istio-release/grafana:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 3000 - containerPort: 3000
env: env:
- name: GRAFANA_PORT # Only put environment related config here. Generic Istio config
value: "3000" # should go in addons/grafana/grafana.ini.
- name: GF_AUTH_BASIC_ENABLED
value: "false"
- name: GF_AUTH_ANONYMOUS_ENABLED
value: "true"
- name: GF_AUTH_ANONYMOUS_ORG_ROLE
value: Admin
- name: GF_PATHS_DATA - name: GF_PATHS_DATA
value: /data/grafana value: /data/grafana
volumeMounts: volumeMounts:
@ -1800,6 +1869,15 @@ spec:
- name: grafana-data - name: grafana-data
emptyDir: {} emptyDir: {}
--- ---
apiVersion: v1
kind: ServiceAccount
metadata:
name: grafana
namespace: istio-system
labels:
k8s-app: istio
addonmanager.kubernetes.io/mode: Reconcile
---
--- ---
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
@ -2032,7 +2110,7 @@ spec:
serviceAccountName: prometheus serviceAccountName: prometheus
containers: containers:
- name: prometheus - name: prometheus
image: docker.io/prom/prometheus:v2.0.0 image: gcr.io/istio-release/prom/prometheus:v2.0.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- '--storage.tsdb.retention=6h' - '--storage.tsdb.retention=6h'
@ -2071,6 +2149,7 @@ rules:
- services - services
- endpoints - endpoints
- pods - pods
- nodes/proxy
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: resources:
@ -2114,7 +2193,7 @@ spec:
spec: spec:
containers: containers:
- name: servicegraph - name: servicegraph
image: gcr.io/istio-release/servicegraph:0.5.1 image: gcr.io/istio-release/servicegraph:0.6.0
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 8088 - containerPort: 8088
@ -2156,7 +2235,7 @@ spec:
spec: spec:
containers: containers:
- name: zipkin - name: zipkin
image: docker.io/openzipkin/zipkin:latest image: gcr.io/istio-release/zipkin:2.5.3
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- containerPort: 9411 - containerPort: 9411