apiVersion: apps/v1
kind: Deployment
metadata:
  name: ibm-common-service-operator
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      name: ibm-common-service-operator
  template:
    metadata:
      labels:
        name: ibm-common-service-operator
      annotations:
        description: The IBM Common Service Operator is used to deploy IBM Common Services
        operatorChannel: v3
        operatorVersion: 3.10.0
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/arch
                operator: In
                values:
                - amd64
                - ppc64le
                - s390x
      containers:
      - command:
        - /manager
        env:
        - name: OPERATOR_NAME
          value: ibm-common-service-operator
        - name: IBM_CS_WEBHOOK_IMAGE
          value: quay.io/opencloudio/ibm-cs-webhook:1.6.0
        - name: IBM_SECRETSHARE_OPERATOR_IMAGE
          value: quay.io/opencloudio/ibm-secretshare-operator:1.7.0
        image: siji/operator:cs
        imagePullPolicy: Always
        name: ibm-common-service-operator
        resources:
          limits:
            cpu: 500m
            memory: 512Mi
          requests:
            cpu: 100m
            memory: 200Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: ibm-common-service-operator
      serviceAccountName: ibm-common-service-operator
      terminationGracePeriodSeconds: 10
