apiVersion: apps/v1 kind: Deployment metadata: name: {{ include "cert-manager-webhook-manitu.fullname" . }} namespace: {{ .Release.Namespace }} labels: app: {{ include "cert-manager-webhook-manitu.name" . }} chart: {{ include "cert-manager-webhook-manitu.chart" . }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} spec: replicas: {{ .Values.replicaCount }} selector: matchLabels: app: {{ include "cert-manager-webhook-manitu.name" . }} release: {{ .Release.Name }} template: metadata: labels: app: {{ include "cert-manager-webhook-manitu.name" . }} release: {{ .Release.Name }} spec: serviceAccountName: {{ include "cert-manager-webhook-manitu.fullname" . }} containers: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} args: - --tls-cert-file=/tls/tls.crt - --tls-private-key-file=/tls/tls.key - --secure-port=8443 env: - name: GROUP_NAME value: {{ .Values.groupName | quote }} ports: - name: https containerPort: 8443 protocol: TCP livenessProbe: httpGet: scheme: HTTPS path: /healthz port: 8443 readinessProbe: httpGet: scheme: HTTPS path: /healthz port: 8443 volumeMounts: - name: certs mountPath: /tls readOnly: true resources: {{ toYaml .Values.resources | indent 12 }} volumes: - name: certs secret: secretName: {{ include "cert-manager-webhook-manitu.servingCertificate" . }} {{- with .Values.nodeSelector }} nodeSelector: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.affinity }} affinity: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.tolerations }} tolerations: {{ toYaml . | indent 8 }} {{- end }}