user.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: user
spec:
  selector:
    matchLabels:
      app: user
  replicas: 1
  template:
    metadata:
      labels:
        app: user
    spec:
      initContainers:
      - name: wait-for-postgres
        image: busybox
        env:
        - name: KONG_PG_HOST
          value: postgres
        - name: KONG_PG_PORT
          value: "5432"
        command: [ "/bin/sh", "-c", "until nc -zv $KONG_PG_HOST $KONG_PG_PORT -w1; do echo 'waiting for db'; sleep 1; done" ]
      - name: setup-network
        image: istio/proxy_init:1.0.4
        # TODO: This should be `-b *` and not `-b 8080`, the former results
        # in DB connection failure in Kong.
        args: [ "-p", "8000", "-u", "1337", "-m", "REDIRECT", "-i", "*", "-b", "8089"]
        securityContext:
          capabilities:
            add:
            - NET_ADMIN
      containers:
      - name: user
        image: mashape/kong-mesh-demo:user
      - name: kong
        image: mashape/kong-enterprise:mesh
        securityContext:
          capabilities:
            add:
            - NET_RAW
        env:
          - name: KONG_LOG_LEVEL
            value: debug
          - name: KONG_ORIGINS
            value: "http://user:8089=http://127.0.0.1:8089"
          - name: KONG_STREAM_LISTEN
            value: "0.0.0.0:7000 transparent"
          - name: KONG_PROXY_LISTEN
            value: "0.0.0.0:8000, 0.0.0.0:8443 ssl"
          - name: KONG_ADMIN_LISTEN
            value: "off"
          - name: KONG_PG_PASSWORD
            value: kong
          - name: KONG_PG_HOST
            value: postgres
          - name: KONG_PROXY_ACCESS_LOG
            value: "/dev/stdout"
          - name: KONG_ADMIN_ACCESS_LOG
            value: "/dev/stdout"
          - name: KONG_PROXY_ERROR_LOG
            value: "/dev/stderr"
          - name: KONG_ADMIN_ERROR_LOG
            value: "/dev/stderr"
        ports:
        - name: kongstream
          containerPort: 7000
          protocol: TCP
        - name: kongproxy
          containerPort: 8000
          protocol: TCP
        - name: kongproxyssl
          containerPort: 8443
          protocol: TCP
        - name: kongadmin
          containerPort: 8001
          protocol: TCP
        - name: kongadminssl
          containerPort: 8443
          protocol: TCP

---
apiVersion: v1
kind: Service
metadata:
  name: user
spec:
  type: NodePort
  ports:
  - name: user
    port: 8089
    targetPort: 8089
    protocol: TCP
  selector:
    app: user