webhook_test.yaml.snap 2.8 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485
  1. should match snapshot of default values:
  2. 1: |
  3. apiVersion: apps/v1
  4. kind: Deployment
  5. metadata:
  6. labels:
  7. app.kubernetes.io/instance: RELEASE-NAME
  8. app.kubernetes.io/managed-by: Helm
  9. app.kubernetes.io/name: external-secrets-webhook
  10. app.kubernetes.io/version: v0.8.3
  11. helm.sh/chart: external-secrets-0.8.3
  12. name: RELEASE-NAME-external-secrets-webhook
  13. namespace: NAMESPACE
  14. spec:
  15. replicas: 1
  16. revisionHistoryLimit: 10
  17. selector:
  18. matchLabels:
  19. app.kubernetes.io/instance: RELEASE-NAME
  20. app.kubernetes.io/name: external-secrets-webhook
  21. template:
  22. metadata:
  23. labels:
  24. app.kubernetes.io/instance: RELEASE-NAME
  25. app.kubernetes.io/name: external-secrets-webhook
  26. spec:
  27. automountServiceAccountToken: true
  28. containers:
  29. - args:
  30. - webhook
  31. - --port=10250
  32. - --dns-name=RELEASE-NAME-external-secrets-webhook.NAMESPACE.svc
  33. - --cert-dir=/tmp/certs
  34. - --check-interval=5m
  35. - --metrics-addr=:8080
  36. - --healthz-addr=:8081
  37. image: ghcr.io/external-secrets/external-secrets:v0.8.3
  38. imagePullPolicy: IfNotPresent
  39. name: webhook
  40. ports:
  41. - containerPort: 8080
  42. name: metrics
  43. protocol: TCP
  44. - containerPort: 10250
  45. name: webhook
  46. protocol: TCP
  47. readinessProbe:
  48. httpGet:
  49. path: /readyz
  50. port: 8081
  51. initialDelaySeconds: 20
  52. periodSeconds: 5
  53. securityContext:
  54. allowPrivilegeEscalation: false
  55. capabilities:
  56. drop:
  57. - ALL
  58. readOnlyRootFilesystem: true
  59. runAsNonRoot: true
  60. runAsUser: 1000
  61. seccompProfile:
  62. type: RuntimeDefault
  63. volumeMounts:
  64. - mountPath: /tmp/certs
  65. name: certs
  66. readOnly: true
  67. hostNetwork: false
  68. serviceAccountName: external-secrets-webhook
  69. volumes:
  70. - name: certs
  71. secret:
  72. secretName: RELEASE-NAME-external-secrets-webhook
  73. 2: |
  74. apiVersion: v1
  75. kind: Secret
  76. metadata:
  77. labels:
  78. app.kubernetes.io/instance: RELEASE-NAME
  79. app.kubernetes.io/managed-by: Helm
  80. app.kubernetes.io/name: external-secrets-webhook
  81. app.kubernetes.io/version: v0.8.3
  82. external-secrets.io/component: webhook
  83. helm.sh/chart: external-secrets-0.8.3
  84. name: RELEASE-NAME-external-secrets-webhook
  85. namespace: NAMESPACE