1apiVersion: apps/v1 2kind: Deployment 3metadata: 4 name: controller-manager 5 namespace: system 6spec: 7 template: 8 spec: 9 containers: 10 - name: manager 11 ports: 12 - containerPort: 9443 13 name: webhook-server 14 protocol: TCP 15 volumeMounts: 16 - mountPath: /tmp/k8s-webhook-server/serving-certs 17 name: cert 18 readOnly: true 19 volumes: 20 - name: cert 21 secret: 22 defaultMode: 420 23 secretName: webhook-server-cert