webhook_test.yaml.snap 2.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. should match snapshot of default values:
  2. 1: |
  3. apiVersion: apps/v1
  4. kind: Deployment
  5. metadata:
  6. labels:
  7. app.kubernetes.io/instance: RELEASE-NAME
  8. app.kubernetes.io/managed-by: Helm
  9. app.kubernetes.io/name: external-secrets-webhook
  10. app.kubernetes.io/version: v0.8.3
  11. helm.sh/chart: external-secrets-0.8.3
  12. name: RELEASE-NAME-external-secrets-webhook
  13. namespace: NAMESPACE
  14. spec:
  15. replicas: 1
  16. revisionHistoryLimit: 10
  17. selector:
  18. matchLabels:
  19. app.kubernetes.io/instance: RELEASE-NAME
  20. app.kubernetes.io/name: external-secrets-webhook
  21. template:
  22. metadata:
  23. labels:
  24. app.kubernetes.io/instance: RELEASE-NAME
  25. app.kubernetes.io/name: external-secrets-webhook
  26. spec:
  27. automountServiceAccountToken: true
  28. containers:
  29. - args:
  30. - webhook
  31. - --port=10250
  32. - --dns-name=RELEASE-NAME-external-secrets-webhook.NAMESPACE.svc
  33. - --cert-dir=/tmp/certs
  34. - --check-interval=5m
  35. - --metrics-addr=:8080
  36. - --healthz-addr=:8081
  37. image: ghcr.io/external-secrets/external-secrets:v0.8.3
  38. imagePullPolicy: IfNotPresent
  39. name: webhook
  40. ports:
  41. - containerPort: 8080
  42. name: metrics
  43. protocol: TCP
  44. - containerPort: 10250
  45. name: webhook
  46. protocol: TCP
  47. readinessProbe:
  48. httpGet:
  49. path: /readyz
  50. port: 8081
  51. initialDelaySeconds: 20
  52. periodSeconds: 5
  53. securityContext:
  54. allowPrivilegeEscalation: false
  55. capabilities:
  56. drop:
  57. - ALL
  58. readOnlyRootFilesystem: true
  59. runAsNonRoot: true
  60. runAsUser: 1000
  61. seccompProfile:
  62. type: RuntimeDefault
  63. volumeMounts:
  64. - mountPath: /tmp/certs
  65. name: certs
  66. readOnly: true
  67. hostNetwork: false
  68. serviceAccountName: external-secrets-webhook
  69. volumes:
  70. - name: certs
  71. secret:
  72. secretName: RELEASE-NAME-external-secrets-webhook