38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: istiod{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
istio.io/rev: {{ .Values.revision | default "default" }}
|
|
install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
|
|
operator.istio.io/component: "Pilot"
|
|
app: istiod
|
|
istio: pilot
|
|
release: {{ .Release.Name }}
|
|
spec:
|
|
ports:
|
|
- port: 15010
|
|
name: grpc-xds # plaintext
|
|
protocol: TCP
|
|
- port: 15012
|
|
name: https-dns # mTLS with k8s-signed cert
|
|
protocol: TCP
|
|
- port: 443
|
|
name: https-webhook # validation and injection
|
|
targetPort: 15017
|
|
protocol: TCP
|
|
- port: 15014
|
|
name: http-monitoring # prometheus stats
|
|
protocol: TCP
|
|
selector:
|
|
app: istiod
|
|
{{- if ne .Values.revision "" }}
|
|
istio.io/rev: {{ .Values.revision }}
|
|
{{- else }}
|
|
# Label used by the 'default' service. For versioned deployments we match with app and version.
|
|
# This avoids default deployment picking the canary
|
|
istio: pilot
|
|
{{- end }}
|
|
---
|