blob: 073a61b45736f807f8ae6159909ab96b874d5667 [file] [log] [blame]
Giorgi Lekveishvili84835c92023-06-20 19:00:15 +04001apiVersion: apps/v1
2kind: Deployment
3metadata:
4 name: {{ include "cert-manager-webhook-gandi.fullname" . }}
5 namespace: {{ .Values.certManager.namespace | quote }}
6 labels:
7 app: {{ include "cert-manager-webhook-gandi.name" . }}
8 chart: {{ include "cert-manager-webhook-gandi.chart" . }}
9 release: {{ .Release.Name }}
10 heritage: {{ .Release.Service }}
11spec:
12 replicas: {{ .Values.replicaCount }}
13 selector:
14 matchLabels:
15 app: {{ include "cert-manager-webhook-gandi.name" . }}
16 release: {{ .Release.Name }}
17 template:
18 metadata:
19 labels:
20 app: {{ include "cert-manager-webhook-gandi.name" . }}
21 release: {{ .Release.Name }}
22 spec:
23 serviceAccountName: {{ include "cert-manager-webhook-gandi.fullname" . }}
24 containers:
25 - name: {{ .Chart.Name }}
26 image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
27 imagePullPolicy: {{ .Values.image.pullPolicy }}
28 args:
29 - --tls-cert-file=/tls/tls.crt
30 - --tls-private-key-file=/tls/tls.key
31{{- if .Values.logLevel }}
32 - --v={{ .Values.logLevel }}
33{{- end }}
34 env:
35 - name: GROUP_NAME
36 value: {{ .Values.groupName | quote }}
37 ports:
38 - name: https
39 containerPort: 443
40 protocol: TCP
41 livenessProbe:
42 httpGet:
43 scheme: HTTPS
44 path: /healthz
45 port: https
46 readinessProbe:
47 httpGet:
48 scheme: HTTPS
49 path: /healthz
50 port: https
51 volumeMounts:
52 - name: certs
53 mountPath: /tls
54 readOnly: true
55 resources:
56{{ toYaml .Values.resources | indent 12 }}
57 volumes:
58 - name: certs
59 secret:
60 secretName: {{ include "cert-manager-webhook-gandi.servingCertificate" . }}
61 {{- with .Values.nodeSelector }}
62 nodeSelector:
63{{ toYaml . | indent 8 }}
64 {{- end }}
65 {{- with .Values.affinity }}
66 affinity:
67{{ toYaml . | indent 8 }}
68 {{- end }}
69 {{- with .Values.tolerations }}
70 tolerations:
71{{ toYaml . | indent 8 }}
72 {{- end }}