apiVersion: batch/v1
kind: Job
metadata:
  annotations:
    helm.sh/hook: post-install,post-upgrade
    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  labels:
    app: kube-prometheus-stack-admission-patch
    app.kubernetes.io/instance: RELEASE-NAME
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: kube-prometheus-stack
    app.kubernetes.io/version: 30.2.0
    chart: kube-prometheus-stack-30.2.0
    heritage: Helm
    release: RELEASE-NAME
  name: RELEASE-NAME-kube-promethe-admission-patch
  namespace: default
spec:
  template:
    metadata:
      labels:
        app: kube-prometheus-stack-admission-patch
        app.kubernetes.io/instance: RELEASE-NAME
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/part-of: kube-prometheus-stack
        app.kubernetes.io/version: 30.2.0
        chart: kube-prometheus-stack-30.2.0
        heritage: Helm
        release: RELEASE-NAME
      name: RELEASE-NAME-kube-promethe-admission-patch
    spec:
      containers:
      - args:
        - patch
        - --webhook-name=RELEASE-NAME-kube-promethe-admission
        - --namespace=default
        - --secret-name=RELEASE-NAME-kube-promethe-admission
        - --patch-failure-policy=Fail
        image: k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.0@sha256:f3b6b39a6062328c095337b4cadcefd1612348fdd5190b1dcbcb9b9e90bd8068
        imagePullPolicy: IfNotPresent
        name: patch
        resources: {}
      restartPolicy: OnFailure
      securityContext:
        runAsGroup: 2000
        runAsNonRoot: true
        runAsUser: 2000
      serviceAccountName: RELEASE-NAME-kube-promethe-admission
