github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/pkg/scanners/helm/test/testdata/expected/with-tarred-dep/templates/deployment.yaml (about)

     1  # Source: with-tarred-dep/templates/deployment.yaml
     2  apiVersion: apps/v1
     3  kind: Deployment
     4  metadata:
     5    name: with-tarred-dep
     6    labels:
     7      app.kubernetes.io/name: with-tarred-dep
     8      helm.sh/chart: with-tarred-dep-0.1.1
     9      app.kubernetes.io/instance: with-tarred-dep
    10      app.kubernetes.io/managed-by: Helm
    11  spec:
    12    replicas: 1
    13    selector:
    14      matchLabels:
    15        app.kubernetes.io/name: with-tarred-dep
    16        app.kubernetes.io/instance: with-tarred-dep
    17    template:
    18      metadata:
    19        labels:
    20          app.kubernetes.io/name: with-tarred-dep
    21          helm.sh/chart: with-tarred-dep-0.1.1
    22          app.kubernetes.io/instance: with-tarred-dep
    23          app.kubernetes.io/managed-by: Helm
    24      spec:
    25        containers:
    26          - name: metadata-service
    27            env:
    28              - name: METADATASERVICE_UPSTREAM_API_URL
    29                value: ''
    30              - name: METADATASERVICE_OIDC_AUDIENCE
    31                value: ""
    32              - name: METADATASERVICE_OIDC_ISSUER
    33                value: ""
    34              - name: METADATASERVICE_OIDC_JWKSURI
    35                value: ""
    36              - name: METADATASERVICE_OIDC_CLAIMS_ROLES
    37                value: ""
    38              - name: METADATASERVICE_OIDC_CLAIMS_USERNAME
    39                value: ""
    40              - name: METADATASERVICE_DB_URI
    41                valueFrom:
    42                  secretKeyRef:
    43                    name: with-tarred-dep-dbconn
    44                    key: uri
    45            image: "ghcr.io/metal-toolbox/hollow-metadataservice:v0.0.1"
    46            imagePullPolicy: Always
    47            volumeMounts:
    48              - name: dbcerts
    49                mountPath: "/dbcerts"
    50                readOnly: true
    51            ports:
    52              - name: http
    53                containerPort: 8000
    54                protocol: TCP
    55            livenessProbe:
    56              httpGet:
    57                path: /healthz/liveness
    58                port: http
    59              initialDelaySeconds: 5
    60              timeoutSeconds: 2
    61            readinessProbe:
    62              httpGet:
    63                path: /healthz/readiness
    64                port: http
    65              initialDelaySeconds: 5
    66              timeoutSeconds: 2
    67            resources:
    68              limits:
    69                cpu: 4
    70                memory: 4Gi
    71              requests:
    72                cpu: 4
    73                memory: 4Gi
    74        volumes:
    75          - name: dbcerts
    76            secret:
    77              secretName: with-tarred-dep-crdb-ca
    78              defaultMode: 0400