apiVersion: apps/v1
kind: Deployment
metadata:
  name: display-webhook
  labels:
    app.kubernetes.io/name: display-webhook
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: display-webhook
  template:
    metadata:
      labels:
        app.kubernetes.io/name: display-webhook
      annotations:
        kubectl.kubernetes.io/default-container: display-webhook
    spec:
      serviceAccountName: display-webhook
      automountServiceAccountToken: true
      priorityClassName: edge-p5-non-critical-infra
      containers:
      - name: display-webhook
        image: bzl://cmd/sds/display/webhook:container_push
        ports:
        - name: webhook-server
          containerPort: 9443
        resources:
          limits:
            cpu: "10m"
            memory: "100Mi"
        volumeMounts:
        - name: webhook-certs
          readOnly: true
          mountPath: /tmp/k8s-webhook-server/serving-certs
      volumes:
      - name: webhook-certs
        secret:
          defaultMode: 420
          secretName: display-webhook-certs
      imagePullSecrets:
      - name: edge-docker-pull-secret