
apiVersion: batch/v1
kind: Job
metadata:
  name: istio-security-post-install
  namespace: default
  annotations:
    "helm.sh/hook": post-install
    "helm.sh/hook-delete-policy": hook-succeeded
  labels:
    app: istio-security
    chart: security-1.0.3
    release: istio
    heritage: Tiller
spec:
  template:
    metadata:
      name: istio-security-post-install
      labels:
        app: istio-security
        release: istio
    spec:
      serviceAccountName: istio-security-post-install-account
      containers:
        - name: hyperkube
          image: "quay.io/coreos/hyperkube:v1.7.6_coreos.0"
          command: [ "/bin/bash", "/tmp/security/run.sh", "/tmp/security/custom-resources.yaml" ]
          volumeMounts:
            - mountPath: "/tmp/security"
              name: tmp-configmap-security
      volumes:
        - name: tmp-configmap-security
          configMap:
            name: istio-security-custom-resources
      restartPolicy: OnFailure
