apiVersion: apps/v1
kind: StatefulSet
metadata:
  annotations:
    cnrm.cloud.google.com/version: 1.7.1
  labels:
    cnrm.cloud.google.com/component: cnrm-deletiondefender
    cnrm.cloud.google.com/system: "true"
  name: cnrm-deletiondefender
  namespace: cnrm-system
spec:
  selector:
    matchLabels:
      cnrm.cloud.google.com/component: cnrm-deletiondefender
      cnrm.cloud.google.com/system: "true"
  serviceName: cnrm-deletiondefender
  template:
    metadata:
      annotations:
        cnrm.cloud.google.com/version: 1.7.1
      labels:
        cnrm.cloud.google.com/component: cnrm-deletiondefender
        cnrm.cloud.google.com/system: "true"
    spec:
      containers:
      - args:
        - --stderrthreshold=INFO
        command:
        - /configconnector/deletiondefender
        image: gcr.io/cnrm-eap/deletiondefender:f190973
        imagePullPolicy: Always
        name: deletiondefender
        readinessProbe:
          exec:
            command:
            - cat
            - /tmp/ready
          initialDelaySeconds: 3
          periodSeconds: 3
        resources:
          limits:
            cpu: 100m
            memory: 256Mi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          privileged: false
          runAsNonRoot: true
          runAsUser: 1000
      serviceAccountName: cnrm-deletiondefender
      terminationGracePeriodSeconds: 10
