# GENERATED FILE: edits made by hand will not be preserved.
---
apiVersion: v1
kind: Service
metadata:
  annotations:
    a8r.io/bugs: https://github.com/datawire/ambassador/issues
    a8r.io/chat: http://a8r.io/Slack
    a8r.io/dependencies: {self.path.k8s}-redis.{self.namespace}
    a8r.io/description: The Ambassador Edge Stack goes beyond traditional API Gateways
      and Ingress Controllers with the advanced edge features needed to support developer
      self-service and full-cycle development.
    a8r.io/documentation: https://www.getambassador.io/docs/edge-stack/latest/
    a8r.io/owner: Ambassador Labs
    a8r.io/repository: github.com/datawire/ambassador
    a8r.io/support: https://www.getambassador.io/about-us/support/
  labels:
    app.kubernetes.io/component: ambassador-service
    app.kubernetes.io/instance: kat-ambassador
    app.kubernetes.io/managed-by: kat
    app.kubernetes.io/name: kat-ambassador
    app.kubernetes.io/part-of: kat-ambassador
    product: aes
  name: {self.path.k8s}
  namespace: {self.namespace}
spec:
  ports:
  - name: http
    port: 80
    targetPort: 8080
  - name: https
    port: 443
    targetPort: 8443
  {extra_ports}
  selector:
    profile: main
    service: {self.path.k8s}
  type: ClusterIP
---
apiVersion: v1
kind: Service
metadata:
  annotations:
    a8r.io/bugs: https://github.com/datawire/ambassador/issues
    a8r.io/chat: http://a8r.io/Slack
    a8r.io/dependencies: None
    a8r.io/description: The Ambassador Edge Stack admin service for internal use and
      health checks.
    a8r.io/documentation: https://www.getambassador.io/docs/edge-stack/latest/
    a8r.io/owner: Ambassador Labs
    a8r.io/repository: github.com/datawire/ambassador
    a8r.io/support: https://www.getambassador.io/about-us/support/
  labels:
    app.kubernetes.io/instance: kat-ambassador
    app.kubernetes.io/managed-by: kat
    app.kubernetes.io/name: kat-ambassador
    app.kubernetes.io/part-of: kat-ambassador
    product: aes
    service: ambassador-admin
  name: {self.path.k8s}-admin
  namespace: {self.namespace}
spec:
  ports:
  - name: ambassador-admin
    port: 8877
    protocol: TCP
    targetPort: admin
  - name: ambassador-snapshot
    port: 8005
    protocol: TCP
    targetPort: 8005
  selector:
    service: {self.path.k8s}
  type: ClusterIP
---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    checksum/config: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
  labels:
    app.kubernetes.io/instance: kat-ambassador
    app.kubernetes.io/managed-by: kat
    app.kubernetes.io/name: kat-ambassador
    app.kubernetes.io/part-of: kat-ambassador
    product: aes
    profile: main
    service: {self.path.k8s}
  name: {self.path.k8s}
  namespace: {self.namespace}
spec:
  containers:
  - env:
    - name: AMBASSADOR_GRPC_METRICS_SINK
      value: {self.path.k8s}-agent:80
    - name: HOST_IP
      valueFrom:
        fieldRef:
          fieldPath: status.hostIP
    - name: AMBASSADOR_NAMESPACE
      valueFrom:
        fieldRef:
          fieldPath: metadata.namespace
    - name: AGENT_CONFIG_RESOURCE_NAME
      value: {self.path.k8s}-agent-cloud-token
    - name: AMBASSADOR_CONFIG_BASE_DIR
      value: /tmp/ambassador
    - name: AMBASSADOR_ID
      value: {self.path.k8s}
    - name: AMBASSADOR_SNAPSHOT_COUNT
      value: "0"
    {envs}
    image: {images[emissary]}
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /ambassador/v0/check_alive
        port: admin
      initialDelaySeconds: 30
      periodSeconds: 3
    name: ambassador
    ports:
    - containerPort: 8080
      name: http
    - containerPort: 8443
      name: https
    - containerPort: 8877
      name: admin
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /ambassador/v0/check_ready
        port: admin
      initialDelaySeconds: 30
      periodSeconds: 3
    resources: null
    securityContext:
      {capabilities_block}
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
    volumeMounts:
    - mountPath: /tmp/ambassador-pod-info
      name: ambassador-pod-info
      readOnly: true
    - mountPath: /tmp/
      name: scratchpad
  dnsPolicy: ClusterFirst
  hostNetwork: false
  imagePullSecrets: []
  restartPolicy: Always
  securityContext:
    runAsUser: 8888
  serviceAccountName: {self.path.k8s}
  volumes:
  - downwardAPI:
      items:
      - fieldRef:
          fieldPath: metadata.labels
        path: labels
    name: ambassador-pod-info
  - emptyDir:
      medium: Memory
      sizeLimit: 45Mi
    name: scratchpad