##---
# Source: olm/templates/22-packageserver.yaml
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
  name: v1alpha1.packages.apps.redhat.com
spec:
  caBundle: "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"
  group: packages.apps.redhat.com
  groupPriorityMinimum: 2000
  versionPriority: 15
  service:
    name: package-server
    namespace: operator-lifecycle-manager
  version: v1alpha1
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest:system:auth-delegator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: packagemanifest-auth-reader
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest-view
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: admin
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: package-apiserver-clusterrolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: aggregated-apiserver-clusterrole
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: operator-lifecycle-manager
---
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: package-server-certs
  namespace: operator-lifecycle-manager
  labels:
    app: package-server
data:
  tls.crt: "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"
  tls.key: "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"
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: package-server
  namespace: operator-lifecycle-manager
  labels:
    app: package-server
spec:
  strategy:
    type: RollingUpdate
  replicas: 1
  selector:
    matchLabels:
      app: package-server
  template:
    metadata:
      labels:
        app: package-server
    spec:
      serviceAccountName: olm-operator-serviceaccount
      containers:
      - name: package-server
        command:
        - /bin/package-server
        - -v=4
        - --debug
        image: quay.io/coreos/package-server@sha256:66513e76ac0443b6ecec3138a88fa6850a98b1db95400f2f83f6012bee693c6f
        imagePullPolicy: Always
        ports:
        - containerPort: 443
        volumeMounts:
        - name: certs
          mountPath: /apiserver.local.config/certificates
          readOnly: true
        livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
        readinessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
      volumes:
      - name: certs
        secret:
          secretName: package-server-certs
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
      imagePullSecrets:
        - name: coreos-pull-secret
---
apiVersion: v1
kind: Service
metadata:
  name: package-server
  namespace: operator-lifecycle-manager
spec:
  ports:
  - port: 443
    protocol: TCP
    targetPort: 443
  selector:
    app: package-server
