github.com/GoogleContainerTools/kpt@v1.0.0-beta.50.0.20240520170205-c25345ffcbee/package-examples/cert-manager-basic/cert-manager/deployment-cert-manager.yaml (about)

     1  # Source: cert-manager/templates/deployment.yaml
     2  apiVersion: apps/v1
     3  kind: Deployment
     4  metadata:
     5    name: cert-manager
     6    namespace: "cert-manager"
     7    labels:
     8      app: cert-manager
     9      app.kubernetes.io/name: cert-manager
    10      app.kubernetes.io/instance: cert-manager
    11      app.kubernetes.io/component: "controller"
    12      app.kubernetes.io/version: "v1.8.2"
    13  spec:
    14    replicas: 1
    15    selector:
    16      matchLabels:
    17        app.kubernetes.io/name: cert-manager
    18        app.kubernetes.io/instance: cert-manager
    19        app.kubernetes.io/component: "controller"
    20    template:
    21      metadata:
    22        labels:
    23          app: cert-manager
    24          app.kubernetes.io/name: cert-manager
    25          app.kubernetes.io/instance: cert-manager
    26          app.kubernetes.io/component: "controller"
    27          app.kubernetes.io/version: "v1.8.2"
    28        annotations:
    29          prometheus.io/path: "/metrics"
    30          prometheus.io/scrape: 'true'
    31          prometheus.io/port: '9402'
    32      spec:
    33        serviceAccountName: cert-manager
    34        securityContext:
    35          
    36          runAsNonRoot: true
    37        containers:
    38          - name: cert-manager
    39            image: "quay.io/jetstack/cert-manager-controller:v1.8.2"
    40            imagePullPolicy: IfNotPresent
    41            args:
    42            - --v=2
    43            - --cluster-resource-namespace=$(POD_NAMESPACE)
    44            - --leader-election-namespace=kube-system
    45            ports:
    46            - containerPort: 9402
    47              name: http-metrics
    48              protocol: TCP
    49            securityContext:
    50              allowPrivilegeEscalation: false
    51            env:
    52            - name: POD_NAMESPACE
    53              valueFrom:
    54                fieldRef:
    55                  fieldPath: metadata.namespace
    56        nodeSelector:
    57          kubernetes.io/os: linux
    58