##---
# Source: olm/templates/0000_30_13-packageserver.yaml
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
  name: v1alpha1.packages.apps.redhat.com
spec:
  caBundle: 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
  group: packages.apps.redhat.com
  groupPriorityMinimum: 2000
  versionPriority: 15
  service:
    name: package-server
    namespace: openshift-operator-lifecycle-manager
  version: v1alpha1
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest:system:auth-delegator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: packagemanifest-auth-reader
  namespace: kube-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: packagemanifest-view
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: admin
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: package-apiserver-clusterrolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: aggregated-apiserver-clusterrole
subjects:
- kind: ServiceAccount
  name: olm-operator-serviceaccount
  namespace: openshift-operator-lifecycle-manager
---
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: package-server-certs
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
data:
  tls.crt: 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
  tls.key: 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
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
  labels:
    app: package-server
spec:
  strategy:
    type: RollingUpdate
  replicas: 1
  selector:
    matchLabels:
      app: package-server
  template:
    metadata:
      labels:
        app: package-server
    spec:
      serviceAccountName: olm-operator-serviceaccount
      containers:
      - name: package-server
        command:
        - /bin/package-server
        - -v=4
        - --global-namespace
        - openshift-operator-lifecycle-manager
        - --debug
        image: quay.io/coreos/olm@sha256:f3b170c8c1cd29c5452afd961e73bada7402623310290926c649cce0b4310470
        imagePullPolicy: Always
        ports:
        - containerPort: 443
        volumeMounts:
        - name: certs
          mountPath: /apiserver.local.config/certificates
          readOnly: true
        livenessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
        readinessProbe:
            httpGet:
              scheme: HTTPS
              path: /healthz
              port: 443
      volumes:
      - name: certs
        secret:
          secretName: package-server-certs
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
      imagePullSecrets:
        - name: coreos-pull-secret
---
apiVersion: v1
kind: Service
metadata:
  name: package-server
  namespace: openshift-operator-lifecycle-manager
spec:
  ports:
  - port: 443
    protocol: TCP
    targetPort: 443
  selector:
    app: package-server
