apiVersion: apps/v1
kind: Deployment
metadata:
  name: validation-webhook
  namespace: checkov-whorf
  labels:
    app: validate
spec:
  replicas: 1
  selector:
    matchLabels:
      app: validate
  template:
    metadata:
      labels:
        app: validate
    spec:
      containers:
      - name: webhook
        image: eurogig/whorf@sha256:a0f740b94aef6eaa62b6c50b20e97ac1a510bd529e354aaed8f5dd0e8d30212e
        ports:
        - containerPort: 443
        env:
        - name: LABEL
          value: development
        volumeMounts:
        - name: certs-volume
          readOnly: true
          mountPath: "/certs"
        - name: "config"
          mountPath: "/app/config"
        imagePullPolicy: Always
      volumes:
      - name: certs-volume
        secret:
          secretName: admission-tls
      - name: "config"
        configMap:
          name: "checkovconfig"
