# Source: cert-manager/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
    name: cert-manager
    namespace: "cert-manager"
    labels:
        app: cert-manager
        app.kubernetes.io/name: cert-manager
        app.kubernetes.io/instance: cert-manager
        app.kubernetes.io/managed-by: Tiller
        helm.sh/chart: cert-manager-v0.12.0
spec:
    replicas: 1
    selector:
        matchLabels:
            app: cert-manager
            app.kubernetes.io/name: cert-manager
            app.kubernetes.io/instance: cert-manager
            app.kubernetes.io/managed-by: Tiller
    template:
        metadata:
            labels:
                app: cert-manager
                app.kubernetes.io/name: cert-manager
                app.kubernetes.io/instance: cert-manager
                app.kubernetes.io/managed-by: Tiller
                helm.sh/chart: cert-manager-v0.12.0
            annotations:
                prometheus.io/path: "/metrics"
                prometheus.io/scrape: 'true'
                prometheus.io/port: '9402'
        spec:
            serviceAccountName: cert-manager
            containers:
              - name: cert-manager
                image: "quay.io/jetstack/cert-manager-controller@sha256:eab95c0d67dfe5a0b0474e71a255e809965d2d000018a3f84df1d5ef27b12164"
                imagePullPolicy: IfNotPresent
                args:
                  - --v=2
                  - --cluster-resource-namespace=$(POD_NAMESPACE)
                  - --leader-election-namespace=kube-system
                  - --webhook-namespace=$(POD_NAMESPACE)
                  - --webhook-ca-secret=cert-manager-webhook-ca
                  - --webhook-serving-secret=cert-manager-webhook-tls
                  - --webhook-dns-names=cert-manager-webhook,cert-manager-webhook.cert-manager,cert-manager-webhook.cert-manager.svc
                ports:
                  - containerPort: 9402
                    protocol: TCP
                env:
                  - name: POD_NAMESPACE
                    valueFrom:
                        fieldRef:
                            fieldPath: metadata.namespace
                resources:
                    requests:
                        cpu: 10m
                        memory: 32Mi