##---
# Source: olm/templates/0000_30_13-packageserver.yaml
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
  name: v1alpha1.packages.apps.redhat.com
spec:
  caBundle: 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
  group: packages.apps.redhat.com
  groupPriorityMinimum: 2000
  versionPriority: 15
  service:
    name: package-server
    namespace: openshift-operator-lifecycle-manager
  version: v1alpha1
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest:system:auth-delegator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: packagemanifest-auth-reader
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest-view
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: admin
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: package-apiserver-clusterrolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: aggregated-apiserver-clusterrole
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: package-server-certs
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
data:
  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURhakNDQWxLZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBREFjTVJvd0dBWURWUVFERXhGd1lXTnIKWVdkbExYTmxjblpsY2kxallUQWVGdzB4T0RFd01URXdNalV6TkRKYUZ3MHhPVEV3TVRFd01qVXpOREphTUJreApGekFWQmdOVkJBTVREbkJoWTJ0aFoyVXRjMlZ5ZG1WeU1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBCk1JSUJDZ0tDQVFFQTA2ZmJzQm1nS0Vyayt5QVltY1dRY0Z2REN6YjgyWG9ReVlveHNXdmdHeE1sRmh3OWtWemIKbERxWW9UNEFhN2lnU1FqWWFiMmdqRWpaTzl1cW9paFpVUEVvVXVKV1JNMnhXdUR1ZVFmekhsOSsveWhqN3VtNQpKRndWeHB3QUtURkk4UEZMdENpUElrdmZTWnA0U09DRGt6V00vYlZYalJJMnlvWlZEcCtNajdqajFHSVFia0R2CkFGZXRkeHA0UlpCRzhRVmtlSlJ3SzRHbk9tZlR4RGRIMDBCMEFyN3NnN1RzUXNoS0Y0N2w5dWxiNzM2aklMbWcKY0dmT1NyWGtJZmZnWC84anFCSExzMXgyOThzQVVkZkZ0VXJoWnJ6VzV5TDJ1OVpTQUc2d2hMVEtGci9VeHlYYgpLYU1qS2Y4SVVBUUE0U0V2cWFQZW45VzljVWYwZ1MwS3ZRSURBUUFCbzRHNU1JRzJNQTRHQTFVZER3RUIvd1FFCkF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJd0RBWURWUjBUQVFIL0JBSXcKQURCM0JnTlZIUkVFY0RCdWdqTndZV05yWVdkbExYTmxjblpsY2k1dmNHVnVjMmhwWm5RdGIzQmxjbUYwYjNJdApiR2xtWldONVkyeGxMVzFoYm1GblpYS0NOM0JoWTJ0aFoyVXRjMlZ5ZG1WeUxtOXdaVzV6YUdsbWRDMXZjR1Z5CllYUnZjaTFzYVdabFkzbGpiR1V0YldGdVlXZGxjaTV6ZG1Nd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFJTFYKLzFZQVNEYTVwRUd2WUhCeExpdWsweWZUUkRXMHB5TVhHejFTSnR1Ni8remY2NkZQcnZDc1V6bVREd0xPM3FSbgp1MFpsc3VzS0dJNUQ0RHVvTGhSNWJVSHFaYkZtV1UzMDhrRlR6VXo1VEZOWURCWDZVVkZHMW9zOElNUzVaZWJUClh2ODlLRFJSVGVtd0tuY2VwcXZCUm02ditXTXN2dUN2eUFDazh6cG5WQ1VtQ0F4QWR2Y0FYUC93RDRFU0gvQkoKWmd3MkF3TlRRYkMvTVRNOHVDZmJwYWhhUWhrbDBEcFYzTDlnVW14dnMwWVovNjVyeVp5aWFpSmlsZEZmV0lRQwp6bEhCcUxmdjZROUZBd01OYkZic05EaFhJTTlhY2Ztbng5WFFJTTlUc0k0eVZMZlBhSHpCb2h1Nm1HKzJNTzI3Cml1N1BiR042M0RqZWJ2SllCVTA9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
  tls.key: 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
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
spec:
  strategy:
    type: RollingUpdate
  replicas: 1
  selector:
    matchLabels:
      app: package-server
  template:
    metadata:
      labels:
        app: package-server
    spec:
      serviceAccountName: olm-operator-serviceaccount
      containers:
      - name: package-server
        command:
        - /bin/package-server
        - -v=4
        - --global-namespace
        - openshift-operator-lifecycle-manager
        - --debug
        image: quay.io/coreos/olm@sha256:f3b170c8c1cd29c5452afd961e73bada7402623310290926c649cce0b4310470
        imagePullPolicy: Always
        ports:
        - containerPort: 443
        volumeMounts:
        - name: certs
          mountPath: /apiserver.local.config/certificates
          readOnly: true
        livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
        readinessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
      volumes:
      - name: certs
        secret:
          secretName: package-server-certs
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
      imagePullSecrets:
        - name: coreos-pull-secret
---
apiVersion: v1
kind: Service
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
spec:
  ports:
  - port: 443
    protocol: TCP
    targetPort: 443
  selector:
    app: package-server
