
apiVersion: apps/v1
kind: Deployment
metadata:
  name: buildpack-admission
  namespace: buildpack-admission
  labels:
    name: buildpack-admission
spec:
  replicas: 2
  selector:
    matchLabels:
      name: buildpack-admission
  template:
    metadata:
      name: buildpack-admission
      labels:
        name: buildpack-admission
    spec:
      containers:
        - name: webhook
          image: buildpack-admission
          env:
            - name: "DEBUG"
              value: "false"
            - name: "ALLOWEDDOMAINS"
              value: "harbor.toolforge.org,harbor.toolsbeta.wmflabs.org"
            - name: "SYSTEMUSERS"
              value: "system:serviceaccount:tekton-pipelines:tekton-pipelines-controller"
            - name: "BUILDID"
              value: "18282bf9728cca6ad2c5f0d1d76d593fe80e68ff-20220406_120211"
          resources:
            limits:
              memory: 50Mi
              cpu: 300m
            requests:
              memory: 50Mi
              cpu: 300m
          volumeMounts:
            - name: webhook-certs
              mountPath: /etc/webhook/certs
              readOnly: true
          securityContext:
            readOnlyRootFilesystem: true
      volumes:
        - name: webhook-certs
          secret:
            secretName: buildpack-admission-certs
