apiVersion: apps/v1 kind: Deployment metadata: name: {{ include "cert-manager-webhook-njalla.fullname" . }} labels: app: {{ include "cert-manager-webhook-njalla.name" . }} chart: {{ include "cert-manager-webhook-njalla.chart" . }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} spec: replicas: {{ .Values.replicaCount }} selector: matchLabels: app: {{ include "cert-manager-webhook-njalla.name" . }} release: {{ .Release.Name }} template: metadata: labels: app: {{ include "cert-manager-webhook-njalla.name" . }} release: {{ .Release.Name }} spec: serviceAccountName: {{ include "cert-manager-webhook-njalla.fullname" . }} containers: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} args: - --tls-cert-file=/tls/tls.crt - --tls-private-key-file=/tls/tls.key env: - name: GROUP_NAME value: {{ .Values.groupName | quote }} ports: - name: https containerPort: 443 protocol: TCP livenessProbe: httpGet: scheme: HTTPS path: /healthz port: https readinessProbe: httpGet: scheme: HTTPS path: /healthz port: https volumeMounts: - name: certs mountPath: /tls readOnly: true resources: {{ toYaml .Values.resources | indent 12 }} volumes: - name: certs secret: secretName: {{ include "cert-manager-webhook-njalla.servingCertificate" . }} {{- with .Values.nodeSelector }} nodeSelector: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.affinity }} affinity: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.tolerations }} tolerations: {{ toYaml . | indent 8 }} {{- end }}