apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/instance: production
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: petimeter
    app.kubernetes.io/version: 1.10.0
    helm.sh/chart: petimeter-0.2.0
  name: production-petimeter
  namespace: oceanbox
---
apiVersion: v1
data:
  appsettings.json: |
    ewogICAgIm9pZGMiOiB7CiAgICAgICAgImlzc3VlciI6ICJodHRwczovL2lkcC5vY2Vhbm
    JveC5pby9kZXgiLAogICAgICAgICJhdXRob3JpemF0aW9uX2VuZHBvaW50IjogImh0dHBz
    Oi8vaWRwLm9jZWFuYm94LmlvL2RleC9hdXRoIiwKICAgICAgICAidG9rZW5fZW5kcG9pbn
    QiOiAiaHR0cHM6Ly9pZHAub2NlYW5ib3guaW8vZGV4L3Rva2VuIiwKICAgICAgICAiandr
    c191cmkiOiAiaHR0cHM6Ly9pZHAub2NlYW5ib3guaW8vZGV4L2tleXMiLAogICAgICAgIC
    J1c2VyaW5mb19lbmRwb2ludCI6ICJodHRwczovL2lkcC5vY2VhbmJveC5pby9kZXgvdXNl
    cmluZm8iLAogICAgICAgICJkZXZpY2VfYXV0aG9yaXphdGlvbl9lbmRwb2ludCI6ICJodH
    RwczovL2lkcC5vY2VhbmJveC5pby9kZXgvZGV2aWNlL2NvZGUiLAogICAgICAgICJjbGll
    bnRJZCI6ICJwZXRpbWV0ZXIiLAogICAgICAgICJjbGllbnRTZWNyZXQiOiAia2tyS28zbW
    1tc2VNbm9yZjlxdzNla2xlZmtvT0tGTnMiLAogICAgICAgICJzY29wZXMiOiBbCiAgICAg
    ICAgICAgICJvcGVuaWQiLAogICAgICAgICAgICAiZW1haWwiLAogICAgICAgICAgICAib2
    ZmbGluZV9hY2Nlc3MiLAogICAgICAgICAgICAicHJvZmlsZSIKICAgICAgICBdCiAgICB9
    LAogICAgInNzbyI6IHsKICAgICAgICAiY29va2llRG9tYWluIjogIi5vY2VhbmJveC5pby
    IsCiAgICAgICAgInNpZ25lZE91dFJlZGlyZWN0VXJpIjogImh0dHBzOi8vaWRwLm9jZWFu
    Ym94LmlvL2RleC9zdGF0aWMvbG9nb3V0Lmh0bWwiLAogICAgICAgICJyZWRpcyI6ICJyZW
    Rpcy1tYXN0ZXIsdXNlcj1kZWZhdWx0LHBhc3N3b3JkPXltTDRkbE9CdlUiLAogICAgICAg
    ICJhcHBEb21haW4iOiAiYXRsYW50aXMiLAogICAgICAgICJkYXRhUHJvdGVjdGlvbktleX
    MiOiAiRGF0YVByb3RlY3Rpb24tS2V5cyIKICAgIH0sCiAgICAiYWxsb3dlZE9yaWdpbnMi
    OiBbCiAgICAgICAgImh0dHBzOi8vYXRsYW50aXMuc3ZjLm9jZWFuYm94LmlvIgogICAgXS
    wKICAgICJsb2dTZXJ2aWNlIiA6ICJodHRwczovL3NlcS5vY2VhbmJveC5pbyIsCiAgICAi
    bG9nQXBpS2V5IjogIldtWnBsRGVGb3hJSHBKUTVCaURrIiwKICAgICJkZXBsb3lLZXkiOi
    AicHJvZCIKfQ==
kind: Secret
metadata:
  name: production-petimeter-appsettings
  namespace: oceanbox
type: Opaque
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app.kubernetes.io/instance: production
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: petimeter
    app.kubernetes.io/version: 1.10.0
    helm.sh/chart: petimeter-0.2.0
  name: production-petimeter
  namespace: oceanbox
spec:
  ports:
  - name: http
    port: 8085
    protocol: TCP
    targetPort: http
  selector:
    app.kubernetes.io/instance: production
    app.kubernetes.io/name: petimeter
  type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: production
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: petimeter
    app.kubernetes.io/version: 1.10.0
    helm.sh/chart: petimeter-0.2.0
  name: production-petimeter
  namespace: oceanbox
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/instance: production
      app.kubernetes.io/name: petimeter
  template:
    metadata:
      annotations:
        dapr.io/app-id: production-petimeter
        dapr.io/app-port: "8000"
        dapr.io/config: tracing
        dapr.io/enabled: "true"
      labels:
        app.kubernetes.io/instance: production
        app.kubernetes.io/name: petimeter
    spec:
      containers:
      - env:
        - name: LOG_LEVEL
          value: "4"
        image: registry.gitlab.com/oceanbox/petimeter:v1.9.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
            path: /healthz
            port: http
        name: petimeter
        ports:
        - containerPort: 8085
          name: http
          protocol: TCP
        readinessProbe:
          httpGet:
            path: /healthz
            port: http
        resources: {}
        securityContext:
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsNonRoot: true
          runAsUser: 1000
        volumeMounts:
        - mountPath: /data
          name: data
        - mountPath: /app/appsettings.json
          name: appsettings
          readOnly: true
          subPath: appsettings.json
        - mountPath: /app/acl.json
          name: acl
          readOnly: true
          subPath: acl.json
      imagePullSecrets:
      - name: gitlab-pull-secret
      securityContext:
        fsGroup: 2000
      serviceAccountName: production-petimeter
      volumes:
      - emptyDir: {}
        name: data
      - name: appsettings
        secret:
          secretName: production-petimeter-appsettings
      - configMap:
          name: petimeter-acl
        name: acl