webhook_test.yaml.snap 3.0 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. should match snapshot of default values:
  2. 1: |
  3. apiVersion: apps/v1
  4. kind: Deployment
  5. metadata:
  6. labels:
  7. app.kubernetes.io/instance: RELEASE-NAME
  8. app.kubernetes.io/managed-by: Helm
  9. app.kubernetes.io/name: external-secrets-webhook
  10. app.kubernetes.io/version: v0.9.13
  11. helm.sh/chart: external-secrets-0.9.13
  12. name: RELEASE-NAME-external-secrets-webhook
  13. namespace: NAMESPACE
  14. spec:
  15. replicas: 1
  16. revisionHistoryLimit: 10
  17. selector:
  18. matchLabels:
  19. app.kubernetes.io/instance: RELEASE-NAME
  20. app.kubernetes.io/name: external-secrets-webhook
  21. template:
  22. metadata:
  23. labels:
  24. app.kubernetes.io/instance: RELEASE-NAME
  25. app.kubernetes.io/managed-by: Helm
  26. app.kubernetes.io/name: external-secrets-webhook
  27. app.kubernetes.io/version: v0.9.13
  28. helm.sh/chart: external-secrets-0.9.13
  29. spec:
  30. automountServiceAccountToken: true
  31. containers:
  32. - args:
  33. - webhook
  34. - --port=10250
  35. - --dns-name=RELEASE-NAME-external-secrets-webhook.NAMESPACE.svc
  36. - --cert-dir=/tmp/certs
  37. - --check-interval=5m
  38. - --metrics-addr=:8080
  39. - --healthz-addr=:8081
  40. image: ghcr.io/external-secrets/external-secrets:v0.9.13
  41. imagePullPolicy: IfNotPresent
  42. name: webhook
  43. ports:
  44. - containerPort: 8080
  45. name: metrics
  46. protocol: TCP
  47. - containerPort: 10250
  48. name: webhook
  49. protocol: TCP
  50. readinessProbe:
  51. httpGet:
  52. path: /readyz
  53. port: 8081
  54. initialDelaySeconds: 20
  55. periodSeconds: 5
  56. securityContext:
  57. allowPrivilegeEscalation: false
  58. capabilities:
  59. drop:
  60. - ALL
  61. readOnlyRootFilesystem: true
  62. runAsNonRoot: true
  63. runAsUser: 1000
  64. seccompProfile:
  65. type: RuntimeDefault
  66. volumeMounts:
  67. - mountPath: /tmp/certs
  68. name: certs
  69. readOnly: true
  70. hostNetwork: false
  71. serviceAccountName: external-secrets-webhook
  72. volumes:
  73. - name: certs
  74. secret:
  75. secretName: RELEASE-NAME-external-secrets-webhook
  76. 2: |
  77. apiVersion: v1
  78. kind: Secret
  79. metadata:
  80. labels:
  81. app.kubernetes.io/instance: RELEASE-NAME
  82. app.kubernetes.io/managed-by: Helm
  83. app.kubernetes.io/name: external-secrets-webhook
  84. app.kubernetes.io/version: v0.9.13
  85. external-secrets.io/component: webhook
  86. helm.sh/chart: external-secrets-0.9.13
  87. name: RELEASE-NAME-external-secrets-webhook
  88. namespace: NAMESPACE