apiVersion: v1
kind: Service
metadata:
  labels:
    app.kubernetes.io/instance: heimdall
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: heimdall
    app.kubernetes.io/version: 2.2.2
    helm.sh/chart: heimdall-8.4.2
  name: heimdall
spec:
  ports:
  - name: http
    port: 80
    protocol: TCP
    targetPort: http
  selector:
    app.kubernetes.io/instance: heimdall
    app.kubernetes.io/name: heimdall
  type: ClusterIP
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  labels:
    app.kubernetes.io/instance: heimdall
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: heimdall
    app.kubernetes.io/version: 2.2.2
    helm.sh/chart: heimdall-8.4.2
  name: heimdall-config
spec:
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
  storageClassName: openebs-3-replicas
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: heimdall
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: heimdall
    app.kubernetes.io/version: 2.2.2
    helm.sh/chart: heimdall-8.4.2
  name: heimdall
spec:
  replicas: 1
  revisionHistoryLimit: 3
  selector:
    matchLabels:
      app.kubernetes.io/instance: heimdall
      app.kubernetes.io/name: heimdall
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/instance: heimdall
        app.kubernetes.io/name: heimdall
    spec:
      automountServiceAccountToken: true
      containers:
      - env:
        - name: PGID
          value: "1000"
        - name: PUID
          value: "1000"
        - name: TZ
          value: CET
        image: lscr.io/linuxserver/heimdall:v2.6.3-ls302
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3
          initialDelaySeconds: 0
          periodSeconds: 10
          tcpSocket:
            port: 80
          timeoutSeconds: 1
        name: heimdall
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          initialDelaySeconds: 0
          periodSeconds: 10
          tcpSocket:
            port: 80
          timeoutSeconds: 1
        startupProbe:
          failureThreshold: 30
          initialDelaySeconds: 0
          periodSeconds: 5
          tcpSocket:
            port: 80
          timeoutSeconds: 1
        volumeMounts:
        - mountPath: /config
          name: config
        - mountPath: /etc/ssl/certs/my-root.crt
          name: ca-cert-volume
          subPath: root
        - mountPath: /etc/ssl/certs/my-k8s.crt
          name: ca-cert-volume
          subPath: k8s
        - mountPath: /etc/ssl/certs/my-xca.crt
          name: ca-cert-volume
          subPath: xca
      dnsPolicy: ClusterFirst
      enableServiceLinks: true
      serviceAccountName: default
      volumes:
      - name: config
        persistentVolumeClaim:
          claimName: heimdall-config
      - name: ca-cert-volume
        configMap:
          name: ca-certs