Files
infrastructure/clusters/cl01tl/manifests/snapshot-controller/Deployment-snapshot-controller-conversion-webhook.yaml
gitea-bot 75b22b6592 Automated Manifest Update (#3221)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #3221
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
2026-01-16 00:11:33 +00:00

61 lines
1.8 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: snapshot-controller-conversion-webhook
namespace: snapshot-controller
labels:
helm.sh/chart: conversion-webhook-5.0.0
app.kubernetes.io/name: conversion-webhook
app.kubernetes.io/instance: snapshot-controller
app.kubernetes.io/version: "v8.4.0"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/name: conversion-webhook
app.kubernetes.io/instance: snapshot-controller
template:
metadata:
labels:
app.kubernetes.io/name: conversion-webhook
app.kubernetes.io/instance: snapshot-controller
spec:
serviceAccountName: snapshot-controller-conversion-webhook
securityContext: {}
containers:
- name: "conversion-webhook"
securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
image: "ghcr.io/piraeusdatastore/snapshot-conversion-webhook:v8.4.0"
imagePullPolicy: IfNotPresent
args:
- --tls-cert-file=/etc/webhook/tls.crt
- --tls-private-key-file=/etc/webhook/tls.key
ports:
- name: https
containerPort: 443
protocol: TCP
livenessProbe:
httpGet:
port: https
path: /readyz
scheme: HTTPS
resources: {}
volumeMounts:
- name: tls
mountPath: /etc/webhook
readOnly: true
hostNetwork: false
dnsPolicy: ClusterFirst
volumes:
- name: tls
secret:
secretName: snapshot-controller-conversion-webhook