webhook_test.yaml.snap 3.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293
  1. should match snapshot of default values:
  2. 1: |
  3. apiVersion: apps/v1
  4. kind: Deployment
  5. metadata:
  6. labels:
  7. app.kubernetes.io/instance: RELEASE-NAME
  8. app.kubernetes.io/managed-by: Helm
  9. app.kubernetes.io/name: external-secrets-webhook
  10. app.kubernetes.io/version: v2.3.0
  11. helm.sh/chart: external-secrets-2.3.0
  12. name: RELEASE-NAME-external-secrets-webhook
  13. namespace: NAMESPACE
  14. spec:
  15. replicas: 1
  16. revisionHistoryLimit: 10
  17. selector:
  18. matchLabels:
  19. app.kubernetes.io/instance: RELEASE-NAME
  20. app.kubernetes.io/name: external-secrets-webhook
  21. template:
  22. metadata:
  23. labels:
  24. app.kubernetes.io/instance: RELEASE-NAME
  25. app.kubernetes.io/managed-by: Helm
  26. app.kubernetes.io/name: external-secrets-webhook
  27. app.kubernetes.io/version: v2.3.0
  28. helm.sh/chart: external-secrets-2.3.0
  29. spec:
  30. automountServiceAccountToken: true
  31. containers:
  32. - args:
  33. - webhook
  34. - --port=10250
  35. - --dns-name=RELEASE-NAME-external-secrets-webhook.NAMESPACE.svc
  36. - --cert-dir=/tmp/certs
  37. - --check-interval=5m
  38. - --metrics-addr=:8080
  39. - --healthz-addr=:8081
  40. - --loglevel=info
  41. - --zap-time-encoding=epoch
  42. image: ghcr.io/external-secrets/external-secrets:v2.3.0
  43. imagePullPolicy: IfNotPresent
  44. name: webhook
  45. ports:
  46. - containerPort: 8080
  47. name: metrics
  48. protocol: TCP
  49. - containerPort: 10250
  50. name: webhook
  51. protocol: TCP
  52. - containerPort: 8081
  53. protocol: TCP
  54. name: ready
  55. readinessProbe:
  56. httpGet:
  57. path: /readyz
  58. port: ready
  59. initialDelaySeconds: 20
  60. periodSeconds: 5
  61. securityContext:
  62. allowPrivilegeEscalation: false
  63. capabilities:
  64. drop:
  65. - ALL
  66. readOnlyRootFilesystem: true
  67. runAsNonRoot: true
  68. runAsUser: 1000
  69. seccompProfile:
  70. type: RuntimeDefault
  71. volumeMounts:
  72. - mountPath: /tmp/certs
  73. name: certs
  74. readOnly: true
  75. hostNetwork: false
  76. serviceAccountName: external-secrets-webhook
  77. volumes:
  78. - name: certs
  79. secret:
  80. secretName: RELEASE-NAME-external-secrets-webhook
  81. 2: |
  82. apiVersion: v1
  83. kind: Secret
  84. metadata:
  85. labels:
  86. app.kubernetes.io/instance: RELEASE-NAME
  87. app.kubernetes.io/managed-by: Helm
  88. app.kubernetes.io/name: external-secrets-webhook
  89. app.kubernetes.io/version: v2.3.0
  90. external-secrets.io/component: webhook
  91. helm.sh/chart: external-secrets-2.3.0
  92. name: RELEASE-NAME-external-secrets-webhook
  93. namespace: NAMESPACE