apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    artifact.spinnaker.io/location: nginx-ingress
    artifact.spinnaker.io/name: nginx-ingress
    artifact.spinnaker.io/type: kubernetes/deployment
    artifact.spinnaker.io/version: ""
    deployment.kubernetes.io/revision: "1"
    moniker.spinnaker.io/application: kdp-core-nginx-ingress
    moniker.spinnaker.io/cluster: deployment nginx-ingress
  labels:
    app: nginx-ingress
    app.kubernetes.io/managed-by: spinnaker
    app.kubernetes.io/name: kdp-core-nginx-ingress
    app.kubernetes.io/version: 3.1.1
    helm.sh/chart: nginx-ingress-0.17.1
  name: nginx-ingress
  namespace: nginx-ingress
spec:
  progressDeadlineSeconds: 600
  replicas: 3
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: nginx-ingress
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      annotations:
        artifact.spinnaker.io/location: nginx-ingress
        artifact.spinnaker.io/name: nginx-ingress
        artifact.spinnaker.io/type: kubernetes/deployment
        artifact.spinnaker.io/version: ""
        moniker.spinnaker.io/application: kdp-core-nginx-ingress
        moniker.spinnaker.io/cluster: deployment nginx-ingress
      creationTimestamp: null
      labels:
        app: nginx-ingress
        app.kubernetes.io/managed-by: spinnaker
        app.kubernetes.io/name: kdp-core-nginx-ingress
    spec:
      automountServiceAccountToken: true
      containers:
        - args:
            - -nginx-plus=false
            - -nginx-reload-timeout=60000
            - -enable-app-protect=false
            - -enable-app-protect-dos=false
            - -nginx-configmaps=$(POD_NAMESPACE)/nginx-config
            - -default-server-tls-secret=nginx-ingress/nginx-ingress-secret
            - -ingress-class=nginx
            - -health-status=false
            - -health-status-uri=/nginx-health
            - -nginx-debug=false
            - -v=1
            - -nginx-status=false
            - -report-ingress-status
            - -external-service=nginx-ingress-external
            - -enable-leader-election=true
            - -leader-election-lock-name=kdp-core-nginx-ingress-leader-election
            - -enable-prometheus-metrics=false
            - -prometheus-metrics-listen-port=9113
            - -prometheus-tls-secret=
            - -enable-service-insight=false
            - -service-insight-listen-port=9114
            - -service-insight-tls-secret=
            - -enable-custom-resources=true
            - -enable-snippets=true
            - -include-year=false
            - -disable-ipv6=false
            - -enable-tls-passthrough=false
            - -enable-preview-policies=false
            - -enable-cert-manager=false
            - -enable-oidc=false
            - -enable-external-dns=false
            - -ready-status=true
            - -ready-status-port=8081
            - -enable-latency-metrics=false
          env:
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
          image: nginx/nginx-ingress:3.1.1
          imagePullPolicy: Always
          name: nginx-ingress
          ports:
            - containerPort: 80
              name: http
              protocol: TCP
            - containerPort: 443
              name: https
              protocol: TCP
            - containerPort: 8081
              name: readiness-port
              protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /nginx-ready
              port: readiness-port
              scheme: HTTP
            periodSeconds: 1
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 250m
              memory: 512Mi
            requests:
              cpu: 100m
              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              add:
                - NET_BIND_SERVICE
              drop:
                - ALL
            readOnlyRootFilesystem: false
            runAsNonRoot: true
            runAsUser: 101
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      priorityClassName: application-cluster-critical
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        seccompProfile:
          type: RuntimeDefault
      serviceAccount: nginx-ingress
      serviceAccountName: nginx-ingress
      terminationGracePeriodSeconds: 30