apiVersion: v1
kind: Namespace
metadata:
  name: tolerator
  labels:
    webhook: tolerator
    workload.edge.ncr.com: platform
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: tolerator
  namespace: tolerator
  labels:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: tolerator
  labels:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
rules:
- resources: ["mutatingwebhookconfigurations"]
  apiGroups: ["admissionregistration.k8s.io"]
  verbs: ["create", "get", "delete", "list", "patch", "update", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: tolerator
  labels:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
roleRef:
  name: tolerator
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: tolerator
  namespace: tolerator
  kind: ServiceAccount
---
apiVersion: v1
kind: Service
metadata:
  name: tolerator
  namespace: tolerator
  labels:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  selector:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  ports:
  - port: 443
    targetPort: 8443
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tolerator
  namespace: tolerator
  labels:
    app: tolerator
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  selector:
    matchLabels:
      app: tolerator
      platform.edge.ncr.com/component: tolerator
  template:
    metadata:
      labels:
        app: tolerator
        platform.edge.ncr.com/component: tolerator
      annotations:
        pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
        pallet.edge.ncr.com/name: tolerator
        pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
        pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
    spec:
      serviceAccountName: tolerator
      containers:
      - name: tolerator
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/tolerator@sha256:dc18625e666d0e829b91227bd0775e4b4160c0e82dfa1ae598e197114b6e6b48
        args:
        - -service-name=tolerator
        ports:
        - containerPort: 8443
        env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: cert
          readOnly: true
          mountPath: "/var/cert"
        lifecycle:
          preStop:
            exec:
              command: ["/bin/sh", "-c", "/prestop.sh"]
        imagePullPolicy: IfNotPresent
      volumes:
      - name: cert
        secret:
          secretName: tolerator-webhook-certificate
      imagePullSecrets:
      - name: edge-docker-pull-secret
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: tolerator-certificate
  namespace: tolerator
  labels:
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  dnsNames:
  - tolerator.tolerator.svc
  issuerRef:
    name: selfsigned
  secretName: tolerator-webhook-certificate
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: selfsigned
  namespace: tolerator
  labels:
    platform.edge.ncr.com/component: tolerator
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  selfSigned: {}
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: tolerator-webhook
  labels:
    platform.edge.ncr.com/component: tolerator
  annotations:
    cert-manager.io/inject-ca-from: tolerator/tolerator-certificate
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: tolerator
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
webhooks:
- name: tolerator.tolerator.svc
  admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: tolerator
      namespace: tolerator
      port: 443
      path: /inject
  failurePolicy: Ignore
  matchPolicy: Equivalent
  namespaceSelector:
    matchExpressions:
    - key: webhook
      operator: NotIn
      values:
      - tolerator
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - resources:
    - pods
    apiGroups:
    - ""
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    scope: '*'
  sideEffects: None