apiVersion: apps/v1
kind: Deployment
metadata:
  name: cert-manager-webhook-ovh
  namespace: cert-manager-ops
  labels:
    app: cert-manager-webhook-ovh
    app.kubernetes.io/name: cert-manager-webhook-ovh
    app.kubernetes.io/instance: cert-manager-webhook-ovh
spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      app: cert-manager-webhook-ovh
  template:
    metadata:
      labels:
        app: cert-manager-webhook-ovh
      annotations:
        {{- toYaml .Values.podAnnotations | nindent 8 }}
    spec:
      serviceAccountName: {{ .Values.serviceAccount.name }}
      containers:
        - name: webhook
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          args:
            - --v=2
            - --group-name={{ .Values.groupName }}
            - --secure-port=10250
            - --cert-dir=/tmp/cert-manager-webhook-ovh
          ports:
            - name: https
              containerPort: 10250
              protocol: TCP
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          volumeMounts:
            - name: certs
              mountPath: /tmp/cert-manager-webhook-ovh
              readOnly: false
      volumes:
        - name: certs
          emptyDir: {}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}