##---
# Source: olm/templates/0000_30_13-packageserver.yaml
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
  name: v1alpha1.packages.apps.redhat.com
spec:
  caBundle: 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
  group: packages.apps.redhat.com
  groupPriorityMinimum: 2000
  versionPriority: 15
  service:
    name: package-server
    namespace: openshift-operator-lifecycle-manager
  version: v1alpha1
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest:system:auth-delegator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: packagemanifest-auth-reader
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest-view
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: admin
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: package-apiserver-clusterrolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: aggregated-apiserver-clusterrole
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: package-server-certs
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
data:
  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURhakNDQWxLZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBREFjTVJvd0dBWURWUVFERXhGd1lXTnIKWVdkbExYTmxjblpsY2kxallUQWVGdzB4T0RFd01EZ3hPREk0TXpkYUZ3MHhPVEV3TURneE9ESTRNemRhTUJreApGekFWQmdOVkJBTVREbkJoWTJ0aFoyVXRjMlZ5ZG1WeU1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBCk1JSUJDZ0tDQVFFQTNqK1VIRXAyNDZycWVnQXMvMXE4NDU1VWVkbkl0Snk1REM0TUFIWENQY1E5MnBqWUNCbjMKLyt3YzJzS29JditZZkhmYzVlUStJWW4xMEFLMnlwMnIwelprMU9HSVYxN3VkakZMRmJObUhkK0tLWHNOSWFQeQpjN3JwR2tML294SC9XZ0g0b1M3R0xKN3RaME9EUTdZOXhYUVpDc0QxTENFRUdlUlBDNC9Ra3A2V2h5VHRFVHVWCmFSMlJrUVlPcHFjaDVlQ2FnWGZYeFBJMlJDLzB2bnJ2RmQvQklML09Yb2NtdnZjQ09BSUVRYWN2RnFwSnlNNUMKMW1kdVovR1o5V0E3dnJBbnNDcEhpQzBFTkxOZ25MYU55Y05WZXREWjlTVTRvUTFqNGpOR203R3dwajRNa0pRago0dnNLalRaS0RkSURxTEFacFp0T2VaUWEvRmI0YVpMd2Z3SURBUUFCbzRHNU1JRzJNQTRHQTFVZER3RUIvd1FFCkF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJd0RBWURWUjBUQVFIL0JBSXcKQURCM0JnTlZIUkVFY0RCdWdqTndZV05yWVdkbExYTmxjblpsY2k1dmNHVnVjMmhwWm5RdGIzQmxjbUYwYjNJdApiR2xtWldONVkyeGxMVzFoYm1GblpYS0NOM0JoWTJ0aFoyVXRjMlZ5ZG1WeUxtOXdaVzV6YUdsbWRDMXZjR1Z5CllYUnZjaTFzYVdabFkzbGpiR1V0YldGdVlXZGxjaTV6ZG1Nd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFCZ1IKeTRSOUNaWm5GZG1kMzRPOTlUYXRISVpuU3JBYjNBbFMzMUtDUXZ1Mi9uK1lqd29Tays2QjVzdGo4aVJiUGxmTwpGUmJQT1N1ZWY5WGh1OEV0STZhTnBHYUREdWhobnJOSy9veDMxTFpsMUdZaVg0V1JyTFEzejZDWG9QY1JFNmNZCnpqdC9TYTNGR3ZSeUNBalQvbVBkTnd6a3dMUXdqY3RWY1ZFMDdHbnlpSDZ0SW5UOTVZdFNlbG9IZ25Hb1AxK1oKenpxVHgyYlFrN3J3djAybVhmSDJxMktGMWRtYnZDMHVIZWJjRGd3MjMzY0dpamVTWXBzV1lkaW1CMWhXanZUSwo4eEtHMmFlQU8zOHE3cmxDVUxiTTB2b2FLK3ErMnYwS1o0OVhGWmFGR1JWbloyaXZ1c1UvOWFXQ1NyNUJCTzFvCm04WFVjTEhHUmxBaGkrK3prOFk9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
  tls.key: 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
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
spec:
  strategy:
    type: RollingUpdate
  replicas: 1
  selector:
    matchLabels:
      app: package-server
  template:
    metadata:
      labels:
        app: package-server
    spec:
      serviceAccountName: olm-operator-serviceaccount
      containers:
      - name: package-server
        command:
        - /bin/package-server
        - -v=4
        - --debug
        image: quay.io/coreos/package-server@sha256:cc18b5711fb2126329c969f077f67f41981c87f800f6b2ceae5981422c14917b
        imagePullPolicy: Always
        ports:
        - containerPort: 443
        volumeMounts:
        - name: certs
          mountPath: /apiserver.local.config/certificates
          readOnly: true
        livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
        readinessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
      volumes:
      - name: certs
        secret:
          secretName: package-server-certs
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
      imagePullSecrets:
        - name: coreos-pull-secret
---
apiVersion: v1
kind: Service
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
spec:
  ports:
  - port: 443
    protocol: TCP
    targetPort: 443
  selector:
    app: package-server
