# Source: hydra/charts/hydra-maester/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: hydra-maester
  labels:
    app.kubernetes.io/name: hydra-maester
    app.kubernetes.io/instance: hydra-master
    app.kubernetes.io/version: "v0.0.32"
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      control-plane: controller-manager
      app.kubernetes.io/name: hydra-maester
      app.kubernetes.io/instance: hydra
  template:
    metadata:
      labels:
        control-plane: controller-manager
        app.kubernetes.io/name: hydra-maester
        app.kubernetes.io/instance: hydra
      annotations:
    spec:
      containers:
      - name: hydra-maester
        image: reg.cadoles.com/proxy_cache/oryd/hydra-maester:v0.0.32
        imagePullPolicy: IfNotPresent
        envFrom:
        - configMapRef:
            name: hydra-maester-env
        command:
        - /manager
        args:
        - --metrics-addr=127.0.0.1:8080
        - --hydra-url=$(HYDRA_ADMIN_BASE_URL)
        - --hydra-port=$(HYDRA_ADMIN_PORT)
        - --endpoint=/admin/clients
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          runAsUser: 1000
      serviceAccountName: hydra-maester-account
      automountServiceAccountToken: true
      nodeSelector: