Files
infrastructure/clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets.yaml
gitea-bot 2b964109c4 Automated Manifest Update (#4929)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `96eae46` (on `96eae46b5e53fce0c6d8a889e0e309f149806d6e`)
- **Charts Updated**: `kube-prometheus-stack`

### Update Details (2026-03-20 21:51 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `c1175d4` (on `c1175d4cbd0095bb5298039d31fb1ece43f7a309`)
- **Charts Updated**: `postiz`

### Update Details (2026-03-20 21:52 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `71eddc4` (on `71eddc44e349ab5fb7d21a25ed194b2439f524e3`)
- **Charts Updated**: `external-secrets`

Reviewed-on: #4929
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
2026-03-20 21:55:18 +00:00

55 lines
1.6 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: external-secrets
namespace: external-secrets
labels:
helm.sh/chart: external-secrets-2.2.0
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/version: "v2.2.0"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: external-secrets
template:
metadata:
labels:
helm.sh/chart: external-secrets-2.2.0
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/version: "v2.2.0"
app.kubernetes.io/managed-by: Helm
spec:
serviceAccountName: external-secrets
automountServiceAccountToken: true
hostNetwork: false
containers:
- name: external-secrets
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
image: ghcr.io/external-secrets/external-secrets:v2.2.0
imagePullPolicy: IfNotPresent
args:
- --concurrent=1
- --metrics-addr=:8080
- --loglevel=info
- --zap-time-encoding=epoch
ports:
- containerPort: 8080
protocol: TCP
name: metrics
dnsPolicy: ClusterFirst