apiVersion: apps/v1
kind: Deployment
metadata:
  name: rbac-query-proxy
spec:
  replicas: 1
  selector:
    matchLabels:
      app: rbac-query-proxy
  template:
    metadata:
      labels:
        app: rbac-query-proxy
    spec:
      serviceAccountName: rbac-query-proxy
      containers:
      - name: rbac-query-proxy
        image: quay.io/stolostron/rbac-query-proxy:2.3.0-SNAPSHOT-2021-04-14-20-44-29
        args:
        - "--listen-address=0.0.0.0:8080"
        - "--metrics-server=https://observability-observatorium-observatorium-api.open-cluster-management-observability.svc.cluster.local:8080"
        ports:
        - containerPort: 8080
          name: http
        volumeMounts:
        - name: ca-certs
          mountPath: /var/rbac_proxy/ca
        - name: client-certs
          mountPath: /var/rbac_proxy/certs
      volumes:
      - name: ca-certs
        secret:
          secretName: observability-server-certs
      - name: client-certs
        secret:
          secretName: observability-grafana-certs