apiVersion: apps/v1
kind: Deployment
metadata:
  name: snapshot-controller-conversion-webhook
  namespace: snapshot-controller
  labels:
    helm.sh/chart: conversion-webhook-5.0.0
    app.kubernetes.io/name: conversion-webhook
    app.kubernetes.io/instance: snapshot-controller
    app.kubernetes.io/version: "v8.4.0"
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/name: conversion-webhook
      app.kubernetes.io/instance: snapshot-controller
  template:
    metadata:
      labels:
        app.kubernetes.io/name: conversion-webhook
        app.kubernetes.io/instance: snapshot-controller
    spec:
      serviceAccountName: snapshot-controller-conversion-webhook
      securityContext: {}
      containers:
        - name: "conversion-webhook"
          securityContext:
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 1000
          image: "ghcr.io/piraeusdatastore/snapshot-conversion-webhook:v8.4.0"
          imagePullPolicy: IfNotPresent
          args:
            - --tls-cert-file=/etc/webhook/tls.crt
            - --tls-private-key-file=/etc/webhook/tls.key
          ports:
            - name: https
              containerPort: 443
              protocol: TCP
          livenessProbe:
            httpGet:
              port: https
              path: /readyz
              scheme: HTTPS
          resources: {}
          volumeMounts:
            - name: tls
              mountPath: /etc/webhook
              readOnly: true
      hostNetwork: false
      dnsPolicy: ClusterFirst
      volumes:
        - name: tls
          secret:
            secretName: snapshot-controller-conversion-webhook