apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata:
  creationTimestamp: '2020-07-24T20:01:36Z'
  finalizers:
    - maistra.io/istio-operator
  generation: 7
  name: full-install
  namespace: istio-system
  resourceVersion: '164932682'
  selfLink: >-
    /apis/maistra.io/v2/namespaces/istio-system/servicemeshcontrolplanes/full-install
  uid: 048ef874-fa0b-4003-b403-3cf245ffc5f1
spec:
  security:
    dataPlane:
      mtls: true
  tracing:
    sampling: 10000
    type: Jaeger
  profiles:
    - default
  proxy:
    runtime:
      container:
        resources:
          limits:
            cpu: 200m
            memory: 128Mi
          requests:
            cpu: 10m
            memory: 40Mi
  gateways:
    egress:
      runtime:
        deployment:
          autoScaling:
            enabled: false
      service: {}
    ingress:
      runtime:
        deployment:
          autoScaling:
            enabled: true
      service: {}
  techPreview:
    global:
      configValidation: false
  addons:
    grafana:
      enabled: true
    jaeger:
      install:
        storage:
          type: Memory
    kiali:
      enabled: true
  version: v1.1
  runtime:
    components:
      mixer.policy:
        deployment:
          autoScaling:
            enabled: false
      mixer.telemetry:
        container:
          resources:
            limits:
              cpu: '2'
              memory: 4G
            requests:
              cpu: '1'
              memory: 1G
        deployment:
          autoScaling:
            enabled: false
      pilot:
        deployment:
          autoScaling:
            enabled: false
status:
  observedGeneration: 6
  annotations:
    alwaysReadyComponents: istio
    readyComponentCount: 9/11
  readiness:
    components:
      pending:
        - kiali
        - tracing
      ready:
        - galley
        - gateways
        - grafana
        - istio
        - mixer
        - pilot
        - prometheus
        - security
        - sidecarInjectorWebhook
      unready: []
  operatorVersion: 2.0.0-13.el8
  components:
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:02Z'
          message: Successfully reconciled
          reason: ReconcileSuccessful
          status: 'True'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:01:38Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: istio
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          message: >-
            admission webhook "validating-webhook.openpolicyagent.org" denied
            the request: "istio-citadel" (Type "Deployment") does not have a
            required label "app_cmdb_id". Please check your deployment to make
            sure you include an label in the metadata and pod definition.
            Contact the onboarding team for additional questions.
          reason: ReconcileError
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:01:40Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: security
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:02:37Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: prometheus
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:02:49Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: tracing
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:02:49Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: galley
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:02:59Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: mixer
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:03:03Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: pilot
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:03:11Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: gateways
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:03:17Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: sidecarInjectorWebhook
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:03:27Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: grafana
    - conditions:
        - lastTransitionTime: '2020-12-08T17:42:01Z'
          status: 'False'
          type: Reconciled
        - lastTransitionTime: '2020-07-24T20:03:37Z'
          message: Successfully installed all mesh components
          reason: InstallSuccessful
          status: 'True'
          type: Installed
      resource: kiali
  appliedSpec:
    security:
      dataPlane:
        mtls: true
    tracing:
      sampling: 10000
      type: Jaeger
    profiles:
      - default
    proxy:
      injection:
        autoInject: false
      networking:
        dns:
          refreshRate: 300s
        initialization:
          initContainer:
            runtime:
              imageName: >-
                registry.redhat.io/openshift-service-mesh/proxy-init-rhel7@sha256:30b471fe0d18811e87823e636529c2b1f7b9619517280769ac36bd48fe740ca4
      runtime:
        container:
          imageName: >-
            registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:dd99bc129bf35fa180bb7c2bdd7fc6bc3b9a92340d6c0a53e816aa0b736c432d
          resources:
            limits:
              cpu: 200m
              memory: 128Mi
            requests:
              cpu: 10m
              memory: 40Mi
    gateways:
      egress:
        enabled: true
        runtime:
          container:
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: false
        service: {}
      ingress:
        enabled: true
        runtime:
          container:
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: true
        service:
          type: ClusterIP
      openshiftRoute:
        enabled: false
    techPreview:
      gateways:
        istio-ingressgateway:
          ior_image: >-
            registry.redhat.io/openshift-service-mesh/ior-rhel8@sha256:d325748b2cb0cf5e92147dd0a7f36af72803a2f8810f15c399dfe58737015c37
      global:
        configValidation: false
        istioNamespace: istio-system
        operatorNamespace: openshift-operators
      istio_cni:
        istio_cni_network: v1-1-istio-cni
        repair:
          enabled: false
    addons:
      grafana:
        enabled: true
        install:
          service:
            ingress:
              enabled: true
            metadata:
              annotations:
                service.alpha.openshift.io/serving-cert-secret-name: grafana-tls
      jaeger:
        install:
          ingress:
            enabled: true
          storage:
            type: Memory
      kiali:
        enabled: true
        install:
          dashboard:
            viewOnly: false
          service:
            ingress:
              enabled: true
      prometheus:
        install:
          service:
            ingress:
              enabled: true
            metadata:
              annotations:
                service.alpha.openshift.io/serving-cert-secret-name: prometheus-tls
    version: v1.1
    runtime:
      components:
        security:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/citadel-rhel8@sha256:bb68a23483f9d9c7b1a7e4bcb4e7cc7d643c09715aa89595e94ca41d454c0251
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
        global.oauthproxy:
          container:
            imageName: >-
              quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97627f773f6af5ef82b1cd2d746060ca5dfaa336ea6894eaa8e9f25610fe0153
            imagePullPolicy: IfNotPresent
            imageRegistry: registry.redhat.io/openshift4
            imageTag: '4.2'
        grafana:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:7303554fe44476eea8e62174e2fbda2a501e81efcc9db5c503003dc91c9b77fa
        sidecarInjectorWebhook:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/sidecar-injector-rhel8@sha256:6d3825459fed9a11c17a2bf3ce58d8751a9238aafff75e9f9f09f6a6fe257614
        mixer:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/mixer-rhel8@sha256:0a3d171b5b78540f7bd136f4824307c57ed9e37ba6f396ab186a4e3e6d8b5608
        prometheus:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/prometheus-rhel8@sha256:7b91821c5c0a8be3f6748c426e24471e43ac3386fb6a4b06c6c09fcdf00cd1c0
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
        galley:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/galley-rhel8@sha256:ddeac47fe17ebb50e595ca30569d4a6cd18b1d437d72c66243d2cf90e0f4599c
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
        mixer.telemetry:
          container:
            resources:
              limits:
                cpu: '2'
                memory: 4G
              requests:
                cpu: '1'
                memory: 1G
          deployment:
            autoScaling:
              enabled: false
        3scale:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:2a15cb70a8a3290467f552821b50730fa7eaf6339f4f0fd9032cf2fe12d5c602
            imageRegistry: registry.redhat.io/openshift-service-mesh
            imageTag: 1.0.0
        mixer.policy:
          deployment:
            autoScaling:
              enabled: false
        pilot:
          container:
            imageName: >-
              registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:5ee734fe8134c3117439d2c005a94949a5d0fda4ab44b247baf1207037298b55
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: false
      defaults:
        container:
          imageRegistry: registry.redhat.io/openshift-service-mesh
          imageTag: 1.1.10
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
        deployment:
          podDisruption:
            enabled: false
  conditions:
    - lastTransitionTime: '2020-07-24T20:03:59Z'
      message: Successfully installed all mesh components
      reason: InstallSuccessful
      status: 'True'
      type: Installed
    - lastTransitionTime: '2020-12-08T17:42:01Z'
      message: >-
        Error processing component security: admission webhook
        "validating-webhook.openpolicyagent.org" denied the request:
        "istio-citadel" (Type "Deployment") does not have a required label
        "app_cmdb_id". Please check your deployment to make sure you include an
        label in the metadata and pod definition. Contact the onboarding team
        for additional questions.: error: admission webhook
        "validating-webhook.openpolicyagent.org" denied the request:
        "istio-citadel" (Type "Deployment") does not have a required label
        "app_cmdb_id". Please check your deployment to make sure you include an
        label in the metadata and pod definition. Contact the onboarding team
        for additional questions.
      reason: ReconcileError
      status: 'False'
      type: Reconciled
    - lastTransitionTime: '2020-12-08T17:42:01Z'
      message: >-
        Error processing component security: admission webhook
        "validating-webhook.openpolicyagent.org" denied the request:
        "istio-citadel" (Type "Deployment") does not have a required label
        "app_cmdb_id". Please check your deployment to make sure you include an
        label in the metadata and pod definition. Contact the onboarding team
        for additional questions.: error: admission webhook
        "validating-webhook.openpolicyagent.org" denied the request:
        "istio-citadel" (Type "Deployment") does not have a required label
        "app_cmdb_id". Please check your deployment to make sure you include an
        label in the metadata and pod definition. Contact the onboarding team
        for additional questions.
      reason: ReconcileError
      status: 'False'
      type: Ready
  chartVersion: 1.1.10
  appliedValues:
    istio:
      security:
        image: >-
          registry.redhat.io/openshift-service-mesh/citadel-rhel8@sha256:bb68a23483f9d9c7b1a7e4bcb4e7cc7d643c09715aa89595e94ca41d454c0251
        resources:
          limits: null
          requests:
            cpu: 10m
            memory: 128Mi
      kiali:
        dashboard:
          viewOnlyMode: false
        enabled: true
        ingress:
          enabled: true
      tracing:
        enabled: true
        ingress:
          enabled: true
        jaeger:
          template: all-in-one
        provider: jaeger
      global:
        proxy_init:
          image: >-
            registry.redhat.io/openshift-service-mesh/proxy-init-rhel7@sha256:30b471fe0d18811e87823e636529c2b1f7b9619517280769ac36bd48fe740ca4
        multiCluster:
          enabled: false
          multiClusterOverrides:
            expansionEnabled: null
            multiClusterEnabled: null
        defaultResources:
          limits: null
          requests:
            cpu: 10m
            memory: 128Mi
        istioNamespace: istio-system
        mtls:
          enabled: true
        proxy:
          autoInject: disabled
          dnsRefreshRate: 300s
          image: >-
            registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:dd99bc129bf35fa180bb7c2bdd7fc6bc3b9a92340d6c0a53e816aa0b736c432d
          resources:
            limits:
              cpu: 200m
              memory: 128Mi
            requests:
              cpu: 10m
              memory: 40Mi
          tracer: zipkin
        meshExpansion:
          enabled: false
          useILB: false
        hub: registry.redhat.io/openshift-service-mesh
        operatorNamespace: openshift-operators
        oauthproxy:
          hub: registry.redhat.io/openshift4
          image: >-
            quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97627f773f6af5ef82b1cd2d746060ca5dfaa336ea6894eaa8e9f25610fe0153
          imagePullPolicy: IfNotPresent
          tag: 4.2
        tag: 1.1.10
        configValidation: false
        defaultPodDisruptionBudget:
          enabled: false
        enableTracing: true
      grafana:
        enabled: true
        image: >-
          registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:7303554fe44476eea8e62174e2fbda2a501e81efcc9db5c503003dc91c9b77fa
        ingress:
          enabled: true
        service:
          annotations:
            service.alpha.openshift.io/serving-cert-secret-name: grafana-tls
      sidecarInjectorWebhook:
        enableNamespacesByDefault: true
        image: >-
          registry.redhat.io/openshift-service-mesh/sidecar-injector-rhel8@sha256:6d3825459fed9a11c17a2bf3ce58d8751a9238aafff75e9f9f09f6a6fe257614
      mixer:
        env:
          GODEBUG: null
        image: >-
          registry.redhat.io/openshift-service-mesh/mixer-rhel8@sha256:0a3d171b5b78540f7bd136f4824307c57ed9e37ba6f396ab186a4e3e6d8b5608
        policy:
          autoscaleEnabled: false
        telemetry:
          autoscaleEnabled: false
          resources:
            limits:
              cpu: '2'
              memory: 4G
            requests:
              cpu: '1'
              memory: 1G
      prometheus:
        image: >-
          registry.redhat.io/openshift-service-mesh/prometheus-rhel8@sha256:7b91821c5c0a8be3f6748c426e24471e43ac3386fb6a4b06c6c09fcdf00cd1c0
        ingress:
          enabled: true
        resources:
          limits: null
          requests:
            cpu: 10m
            memory: 128Mi
        service:
          annotations:
            service.alpha.openshift.io/serving-cert-secret-name: prometheus-tls
      galley:
        image: >-
          registry.redhat.io/openshift-service-mesh/galley-rhel8@sha256:ddeac47fe17ebb50e595ca30569d4a6cd18b1d437d72c66243d2cf90e0f4599c
        resources:
          limits: null
          requests:
            cpu: 10m
            memory: 128Mi
      gateways:
        istio-egressgateway:
          autoscaleEnabled: false
          enabled: true
          gatewayType: egress
          name: istio-egressgateway
          resources:
            limits: null
            requests:
              cpu: 10m
              memory: 128Mi
        istio-ingressgateway:
          autoscaleEnabled: true
          enabled: true
          gatewayType: ingress
          ior_enabled: false
          ior_image: >-
            registry.redhat.io/openshift-service-mesh/ior-rhel8@sha256:d325748b2cb0cf5e92147dd0a7f36af72803a2f8810f15c399dfe58737015c37
          name: istio-ingressgateway
          resources:
            limits: null
            requests:
              cpu: 10m
              memory: 128Mi
          type: ClusterIP
      istio_cni:
        enabled: true
        istio_cni_network: v1-1-istio-cni
        repair:
          enabled: false
      pilot:
        autoscaleEnabled: false
        env:
          GODEBUG: null
        image: >-
          registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:5ee734fe8134c3117439d2c005a94949a5d0fda4ab44b247baf1207037298b55
        resources:
          limits: null
          requests:
            cpu: 10m
            memory: 128Mi
        traceSampling: 100
    profiles:
      - default
    template: default
    threeScale:
      hub: registry.redhat.io/openshift-service-mesh
      image: >-
        registry.redhat.io/openshift-service-mesh/3scale-istio-adapter-rhel8@sha256:2a15cb70a8a3290467f552821b50730fa7eaf6339f4f0fd9032cf2fe12d5c602
      tag: 1.0.0
    version: v1.1
