apiVersion: apps/v1 kind: Deployment metadata: name: {{ include "dnsimple-webhook.fullname" . }} labels: app: {{ include "dnsimple-webhook.name" . }} chart: {{ include "dnsimple-webhook.chart" . }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} spec: replicas: {{ .Values.replicaCount }} selector: matchLabels: app: {{ include "dnsimple-webhook.name" . }} release: {{ .Release.Name }} template: metadata: labels: app: {{ include "dnsimple-webhook.name" . }} release: {{ .Release.Name }} spec: serviceAccountName: {{ include "dnsimple-webhook.fullname" . }} containers: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} args: - --secure-port={{ .Values.containerport }} - --tls-cert-file=/tls/tls.crt - --tls-private-key-file=/tls/tls.key {{- if .Values.logLevel }} - --v={{ .Values.logLevel }} {{- end }} env: - name: GROUP_NAME value: {{ .Values.groupName | quote }} ports: - name: https containerPort: {{ .Values.containerport }} protocol: TCP livenessProbe: httpGet: scheme: HTTPS path: /healthz port: https readinessProbe: httpGet: scheme: HTTPS path: /healthz port: https volumeMounts: - name: certs mountPath: /tls readOnly: true resources: {{ toYaml .Values.resources | indent 12 }} volumes: - name: certs secret: secretName: {{ include "dnsimple-webhook.servingCertificate" . }} {{- with .Values.nodeSelector }} nodeSelector: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.affinity }} affinity: {{ toYaml . | indent 8 }} {{- end }} {{- with .Values.tolerations }} tolerations: {{ toYaml . | indent 8 }} {{- end }}