# GENERATED FILE: edits made by hand will not be preserved.
---
apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent
  namespace: default
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: emissary-ingress-agent
subjects:
- kind: ServiceAccount
  name: emissary-ingress-agent
  namespace: default
---
aggregationRule:
  clusterRoleSelectors:
  - matchLabels:
      rbac.getambassador.io/role-group: emissary-ingress-agent
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent
rules: []
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-pods
rules:
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-rollouts
rules:
- apiGroups:
  - argoproj.io
  resources:
  - rollouts
  - rollouts/status
  verbs:
  - get
  - list
  - watch
  - patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-applications
rules:
- apiGroups:
  - argoproj.io
  resources:
  - applications
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-deployments
rules:
- apiGroups:
  - apps
  - extensions
  resources:
  - deployments
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-endpoints
rules:
- apiGroups:
  - ""
  resources:
  - endpoints
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress-agent
  name: emissary-ingress-agent-configmaps
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent-config
  namespace: default
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent-config
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: emissary-ingress-agent-config
subjects:
- kind: ServiceAccount
  name: emissary-ingress-agent
  namespace: default
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress-agent
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
  name: emissary-ingress-agent
  namespace: default
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/instance: emissary-ingress
      app.kubernetes.io/name: emissary-ingress-agent
  template:
    metadata:
      labels:
        app.kubernetes.io/instance: emissary-ingress
        app.kubernetes.io/managed-by: getambassador.io
        app.kubernetes.io/name: emissary-ingress-agent
        app.kubernetes.io/part-of: emissary-ingress
        product: aes
    spec:
      containers:
      - command:
        - agent
        env:
        - name: AGENT_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: AGENT_CONFIG_RESOURCE_NAME
          value: emissary-ingress-agent-cloud-token
        - name: RPC_CONNECTION_ADDRESS
          value: https://app.getambassador.io/
        - name: AES_SNAPSHOT_URL
          value: http://emissary-ingress-admin.default:8005/snapshot-external
        image: $imageRepo$:$version$
        imagePullPolicy: IfNotPresent
        name: agent
        ports:
        - containerPort: 8080
          name: http
      serviceAccountName: emissary-ingress-agent