apiVersion: apps/v1
kind: Deployment
metadata:
  name: edge-injector
  labels:
    platform.edge.ncr.com/component: edge-injector
spec:
  replicas: 1
  selector:
    matchLabels:
      platform.edge.ncr.com/component: edge-injector
  template:
    metadata:
      labels:
        platform.edge.ncr.com/component: edge-injector
    spec:
      serviceAccountName: edge-injector
      priorityClassName: edge-p2-critical-services
      containers:
      - name: edge-injector
        image: bzl://cmd/edge/edge-injector:container_push
        ports:
        - name: http
          protocol: TCP
          containerPort: 8443
        resources:
          limits:
            cpu: "100m"
        volumeMounts:
        - name: cert
          readOnly: true
          mountPath: "/var/cert"
        imagePullPolicy: IfNotPresent
      volumes:
      - name: cert
        secret:
          secretName: edge-injector