github.com/dmaizel/tests@v0.0.0-20210728163746-cae6a2d9cee8/kata-webhook/deploy/webhook.yaml (about)

     1  # Copyright (c) 2019 Intel Corporation
     2  #
     3  # SPDX-License-Identifier: Apache-2.0
     4  
     5  apiVersion: apps/v1
     6  kind: Deployment
     7  metadata:
     8    name: pod-annotate-webhook
     9    labels:
    10      app: pod-annotate-webhook
    11  spec:
    12    selector:
    13      matchLabels:
    14        app: pod-annotate-webhook
    15    replicas: 1
    16    template:
    17      metadata:
    18        labels:
    19          app: pod-annotate-webhook
    20      spec:
    21        containers:
    22          - name: pod-annotate-webhook
    23            image: quay.io/kata-containers/kata-webhook-example:latest
    24            imagePullPolicy: Always
    25            env:
    26              - name: RUNTIME_CLASS
    27                value: kata
    28            args:
    29              - -tls-cert-file=/etc/webhook/certs/cert.pem
    30              - -tls-key-file=/etc/webhook/certs/key.pem
    31              - -exclude-namespaces=rook-ceph-system,rook-ceph
    32            volumeMounts:
    33              - name: webhook-certs
    34                mountPath: /etc/webhook/certs
    35                readOnly: true
    36        volumes:
    37          - name: webhook-certs
    38            secret:
    39              secretName: pod-annotate-webhook-certs
    40  ---
    41  apiVersion: v1
    42  kind: Service
    43  metadata:
    44    name: pod-annotate-webhook
    45    labels:
    46      app: pod-annotate-webhook
    47  spec:
    48    ports:
    49    - port: 443
    50      targetPort: 8080
    51    selector:
    52      app: pod-annotate-webhook