---
# Source: mariadb-operator/charts/mariadb-operator/templates/webhook/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mariadb-operator-webhook
  labels:
    helm.sh/chart: mariadb-operator-25.10.2
    app.kubernetes.io/name: mariadb-operator-webhook
    app.kubernetes.io/instance: mariadb-operator
    app.kubernetes.io/version: "25.10.2"
    app.kubernetes.io/managed-by: Helm
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: mariadb-operator-webhook
      app.kubernetes.io/instance: mariadb-operator
  template:
    metadata:
      labels:
        app.kubernetes.io/name: mariadb-operator-webhook
        app.kubernetes.io/instance: mariadb-operator
    spec:
      serviceAccountName: mariadb-operator-webhook
      automountServiceAccountToken: true
      hostNetwork: false
      containers:
        - image: "docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:25.10.2"
          imagePullPolicy: IfNotPresent
          name: webhook
          args:
            - webhook
            - --ca-cert-path=/tmp/k8s-webhook-server/certificate-authority/tls.crt
            - --cert-dir=/tmp/k8s-webhook-server/serving-certs
            - --dns-name=mariadb-operator-webhook.mariadb-operator.svc
            - --port=9443
            - --metrics-addr=:8080
            - --health-addr=:8081
            - --log-level=INFO
          ports:
            - containerPort: 9443
              protocol: TCP
              name: https
            - containerPort: 8080
              protocol: TCP
              name: metrics
            - containerPort: 8081
              protocol: TCP
              name: health
          volumeMounts:
            - mountPath: /tmp/k8s-webhook-server/certificate-authority
              name: ca
              readOnly: true
            - mountPath: /tmp/k8s-webhook-server/serving-certs
              name: cert
              readOnly: true
          readinessProbe:
            httpGet:
              path: /readyz
              port: 8081
            initialDelaySeconds: 20
            periodSeconds: 5
      volumes:
        - name: ca
          secret:
            defaultMode: 420
            secretName: mariadb-operator-webhook-ca
        - name: cert
          secret:
            defaultMode: 420
            secretName: mariadb-operator-webhook-cert