Skip to content

Instantly share code, notes, and snippets.

@Jorgevillada
Created November 5, 2020 20:27
Show Gist options
  • Select an option

  • Save Jorgevillada/06de5a6474305788709feb9dad4a0b0d to your computer and use it in GitHub Desktop.

Select an option

Save Jorgevillada/06de5a6474305788709feb9dad4a0b0d to your computer and use it in GitHub Desktop.
kong_deployment.yaml
kind: Deployment
apiVersion: apps/v1
metadata:
name: kong-kong
namespace: gateway
selfLink: /apis/apps/v1/namespaces/gateway/deployments/kong-kong
uid: 8ea5bc8f-f1a5-45ed-a8bb-2a292d39c272
resourceVersion: '17017273'
generation: 73
creationTimestamp: '2020-09-24T01:23:12Z'
labels:
app.kubernetes.io/component: app
app.kubernetes.io/instance: kong
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: '2'
env: prod
helm.sh/chart: kong-1.9.1
annotations:
deployment.kubernetes.io/revision: '56'
kuma.io/gateway: enabled
meta.helm.sh/release-name: kong
meta.helm.sh/release-namespace: gateway
traffic.sidecar.istio.io/includeInboundPorts: ''
spec:
replicas: 2
selector:
matchLabels:
app.kubernetes.io/component: app
app.kubernetes.io/instance: kong
app.kubernetes.io/name: kong
template:
metadata:
creationTimestamp: null
labels:
app.kubernetes.io/component: app
app.kubernetes.io/instance: kong
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: '2'
env: prod
helm.sh/chart: kong-1.9.1
annotations:
kubectl.kubernetes.io/restartedAt: '2020-10-31T21:40:03-05:00'
prometheus.io/port: '9542'
prometheus.io/scrape: 'true'
spec:
volumes:
- name: kong-kong-prefix-dir
emptyDir: {}
- name: kong-kong-tmp
emptyDir: {}
- name: kong-kong-bash-wait-for-postgres
configMap:
name: kong-kong-bash-wait-for-postgres
defaultMode: 493
- name: custom-nginx-template-volume
configMap:
name: kong-kong-default-custom-server-blocks
defaultMode: 420
containers:
- name: ingress-controller
image: >-
kong-docker-kubernetes-ingress-controller.bintray.io/kong-ingress-controller:1.0.0
args:
- /kong-ingress-controller
env:
- name: POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: CONTROLLER_ELECTION_ID
value: kong-ingress-controller-leader-kong
- name: CONTROLLER_INGRESS_CLASS
value: kong
- name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY
value: 'true'
- name: CONTROLLER_KONG_URL
value: 'https://localhost:8444'
- name: CONTROLLER_KONG_ADMIN_URL
value: 'https://localhost:8444'
- name: CONTROLLER_PUBLISH_SERVICE
value: gateway/kong-kong-proxy
- name: CONTROLLER_SYNC_PERIOD
value: 3600s
- name: CONTROLLER_SYNC_RATE_LIMIT
value: '0.9'
resources:
limits:
memory: 200M
requests:
memory: 200M
livenessProbe:
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
readinessProbe:
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
imagePullPolicy: IfNotPresent
- name: proxy
image: 'kong:2.2.0'
ports:
- name: proxy
containerPort: 8000
protocol: TCP
- name: proxy-tls
containerPort: 8443
protocol: TCP
- name: metrics
containerPort: 9542
protocol: TCP
env:
- name: KONG_ADMIN_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_GUI_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_GUI_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_LISTEN
value: '127.0.0.1:8444 http2 ssl'
- name: KONG_CLUSTER_LISTEN
value: 'off'
- name: KONG_DATABASE
value: 'off'
- name: KONG_KIC
value: 'on'
- name: KONG_LUA_PACKAGE_PATH
value: /opt/?.lua;/opt/?/init.lua;;
- name: KONG_NGINX_HTTP_INCLUDE
value: /kong/servers.conf
- name: KONG_NGINX_WORKER_PROCESSES
value: '1'
- name: KONG_PLUGINS
value: bundled
- name: KONG_PORTAL_API_ACCESS_LOG
value: /dev/stdout
- name: KONG_PORTAL_API_ERROR_LOG
value: /dev/stderr
- name: KONG_PORT_MAPS
value: '80:8000, 443:8443'
- name: KONG_PREFIX
value: /kong_prefix/
- name: KONG_PROXY_ACCESS_LOG
value: /dev/stdout
- name: KONG_PROXY_ERROR_LOG
value: /dev/stderr
- name: KONG_PROXY_LISTEN
value: '0.0.0.0:8000, 0.0.0.0:8443 http2 ssl'
- name: KONG_STATUS_LISTEN
value: '0.0.0.0:8100'
- name: KONG_STREAM_LISTEN
value: 'off'
- name: KONG_NGINX_DAEMON
value: 'off'
- name: KONG_TRUSTED_IPS
value: '0.0.0.0/0,::/0'
- name: KONG_NGINX_HTTP_GZIP
value: 'on'
- name: KONG_NGINX_HTTP_GZIP_DISABLE
value: msie6
- name: KONG_NGINX_HTTP_GZIP_VARY
value: 'on'
- name: KONG_NGINX_HTTP_GZIP_PROXIED
value: any
- name: KONG_NGINX_HTTP_GZIP_COMP_LEVEL
value: '6'
- name: KONG_NGINX_HTTP_GZIP_BUFFERS
value: 16 8k
- name: KONG_NGINX_HTTP_GZIP_HTTP_VERSION
value: '1.1'
- name: KONG_NGINX_HTTP_GZIP_MIN_LENGTH
value: '256'
- name: KONG_NGINX_HTTP_GZIP_TYPES
value: >-
text/plain text/css application/json application/x-javascript
text/xml application/xml application/xml+rss text/javascript
application/vnd.ms-fontobject application/x-font-ttf
font/opentype image/svg+xml image/x-icon
- name: KONG_NGINX_MAIN_WORKER_RLIMIT_NOFILE
value: '4096'
- name: KONG_NGINX_EVENTS_WORKER_CONNECTIONS
value: '4096'
- name: KONG_WORKER_STATE_UPDATE_FREQUENCY
value: '3600'
- name: KONG_WORKER_CONSISTENCY
value: eventual
resources:
limits:
cpu: 500m
memory: 1500M
requests:
cpu: 500m
memory: 512M
volumeMounts:
- name: kong-kong-prefix-dir
mountPath: /kong_prefix/
- name: kong-kong-tmp
mountPath: /tmp
- name: custom-nginx-template-volume
mountPath: /kong
livenessProbe:
httpGet:
path: /status
port: metrics
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
readinessProbe:
httpGet:
path: /status
port: metrics
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
lifecycle:
preStop:
exec:
command:
- /bin/sh
- '-c'
- /bin/sleep 15 && kong quit
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
imagePullPolicy: IfNotPresent
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
serviceAccountName: kong-kong
serviceAccount: kong-kong
securityContext: {}
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: part-of
operator: In
values:
- system
schedulerName: default-scheduler
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 25%
maxSurge: 25%
revisionHistoryLimit: 10
progressDeadlineSeconds: 600
status:
observedGeneration: 73
replicas: 2
updatedReplicas: 2
readyReplicas: 2
availableReplicas: 2
conditions:
- type: Available
status: 'True'
lastUpdateTime: '2020-11-02T13:00:58Z'
lastTransitionTime: '2020-11-02T13:00:58Z'
reason: MinimumReplicasAvailable
message: Deployment has minimum availability.
- type: Progressing
status: 'True'
lastUpdateTime: '2020-11-05T03:48:13Z'
lastTransitionTime: '2020-09-24T01:23:12Z'
reason: NewReplicaSetAvailable
message: ReplicaSet "kong-kong-965c7874d" has successfully progressed.
collisionCount: 1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment