helm/infrastructure/subcharts/kong/ci/__snapshots__/kong-ingress-4-values.snap

   1 [kong-ingress-4-values]
   2 SnapShot = """
   3 - object:
   4     apiVersion: admissionregistration.k8s.io/v1
   5     kind: ValidatingWebhookConfiguration
   6     metadata:
   7         labels:
   8             app.kubernetes.io/instance: chartsnap
   9             app.kubernetes.io/managed-by: Helm
  10             app.kubernetes.io/name: kong
  11             app.kubernetes.io/version: \"3.6\"
  12             helm.sh/chart: kong-2.38.0
  13         name: chartsnap-kong-validations
  14         namespace: default
  15     webhooks:
  16         - admissionReviewVersions:
  17             - v1beta1
  18           clientConfig:
  19             caBundle: '###DYNAMIC_FIELD###'
  20             service:
  21                 name: chartsnap-kong-validation-webhook
  22                 namespace: default
  23           failurePolicy: Ignore
  24           name: validations.kong.konghq.com
  25           objectSelector:
  26             matchExpressions:
  27                 - key: owner
  28                   operator: NotIn
  29                   values:
  30                     - helm
  31           rules:
  32             - apiGroups:
  33                 - configuration.konghq.com
  34               apiVersions:
  35                 - '*'
  36               operations:
  37                 - CREATE
  38                 - UPDATE
  39               resources:
  40                 - kongconsumers
  41                 - kongplugins
  42                 - kongclusterplugins
  43                 - kongingresses
  44             - apiGroups:
  45                 - \"\"
  46               apiVersions:
  47                 - v1
  48               operations:
  49                 - CREATE
  50                 - UPDATE
  51               resources:
  52                 - secrets
  53                 - services
  54             - apiGroups:
  55                 - networking.k8s.io
  56               apiVersions:
  57                 - v1
  58               operations:
  59                 - CREATE
  60                 - UPDATE
  61               resources:
  62                 - ingresses
  63             - apiGroups:
  64                 - gateway.networking.k8s.io
  65               apiVersions:
  66                 - v1alpha2
  67                 - v1beta1
  68                 - v1
  69               operations:
  70                 - CREATE
  71                 - UPDATE
  72               resources:
  73                 - gateways
  74                 - httproutes
  75           sideEffects: None
  76 - object:
  77     apiVersion: apps/v1
  78     kind: Deployment
  79     metadata:
  80         labels:
  81             app.kubernetes.io/component: app
  82             app.kubernetes.io/instance: chartsnap
  83             app.kubernetes.io/managed-by: Helm
  84             app.kubernetes.io/name: kong
  85             app.kubernetes.io/version: \"3.6\"
  86             helm.sh/chart: kong-2.38.0
  87         name: chartsnap-kong
  88         namespace: default
  89     spec:
  90         replicas: 1
  91         selector:
  92             matchLabels:
  93                 app.kubernetes.io/component: app
  94                 app.kubernetes.io/instance: chartsnap
  95                 app.kubernetes.io/name: kong
  96         template:
  97             metadata:
  98                 annotations:
  99                     kuma.io/gateway: enabled
 100                     kuma.io/service-account-token-volume: chartsnap-kong-token
 101                     traffic.sidecar.istio.io/includeInboundPorts: \"\"
 102                 labels:
 103                     app: chartsnap-kong
 104                     app.kubernetes.io/component: app
 105                     app.kubernetes.io/instance: chartsnap
 106                     app.kubernetes.io/managed-by: Helm
 107                     app.kubernetes.io/name: kong
 108                     app.kubernetes.io/version: \"3.6\"
 109                     helm.sh/chart: kong-2.38.0
 110                     version: \"3.6\"
 111             spec:
 112                 automountServiceAccountToken: false
 113                 containers:
 114                     - args: null
 115                       env:
 116                         - name: POD_NAME
 117                           valueFrom:
 118                             fieldRef:
 119                                 apiVersion: v1
 120                                 fieldPath: metadata.name
 121                         - name: POD_NAMESPACE
 122                           valueFrom:
 123                             fieldRef:
 124                                 apiVersion: v1
 125                                 fieldPath: metadata.namespace
 126                         - name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN
 127                           value: 0.0.0.0:8080
 128                         - name: CONTROLLER_ELECTION_ID
 129                           value: kong-ingress-controller-leader-kong
 130                         - name: CONTROLLER_INGRESS_CLASS
 131                           value: kong
 132                         - name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY
 133                           value: \"true\"
 134                         - name: CONTROLLER_KONG_ADMIN_URL
 135                           value: https://localhost:8444
 136                         - name: CONTROLLER_PUBLISH_SERVICE
 137                           value: default/chartsnap-kong-proxy
 138                       image: kong/kubernetes-ingress-controller:3.1
 139                       imagePullPolicy: IfNotPresent
 140                       livenessProbe:
 141                         failureThreshold: 3
 142                         httpGet:
 143                             path: /healthz
 144                             port: 10254
 145                             scheme: HTTP
 146                         initialDelaySeconds: 5
 147                         periodSeconds: 10
 148                         successThreshold: 1
 149                         timeoutSeconds: 5
 150                       name: ingress-controller
 151                       ports:
 152                         - containerPort: 8080
 153                           name: webhook
 154                           protocol: TCP
 155                         - containerPort: 10255
 156                           name: cmetrics
 157                           protocol: TCP
 158                         - containerPort: 10254
 159                           name: cstatus
 160                           protocol: TCP
 161                       readinessProbe:
 162                         failureThreshold: 3
 163                         httpGet:
 164                             path: /readyz
 165                             port: 10254
 166                             scheme: HTTP
 167                         initialDelaySeconds: 5
 168                         periodSeconds: 10
 169                         successThreshold: 1
 170                         timeoutSeconds: 5
 171                       resources: {}
 172                       securityContext:
 173                         allowPrivilegeEscalation: false
 174                         capabilities:
 175                             drop:
 176                                 - ALL
 177                         readOnlyRootFilesystem: true
 178                         runAsNonRoot: true
 179                         runAsUser: 1000
 180                         seccompProfile:
 181                             type: RuntimeDefault
 182                       volumeMounts:
 183                         - mountPath: /admission-webhook
 184                           name: webhook-cert
 185                           readOnly: true
 186                         - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
 187                           name: chartsnap-kong-token
 188                           readOnly: true
 189                     - env:
 190                         - name: KONG_ADMIN_ACCESS_LOG
 191                           value: /dev/stdout
 192                         - name: KONG_ADMIN_ERROR_LOG
 193                           value: /dev/stderr
 194                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 195                           value: /dev/stdout
 196                         - name: KONG_ADMIN_GUI_ERROR_LOG
 197                           value: /dev/stderr
 198                         - name: KONG_ADMIN_LISTEN
 199                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 200                         - name: KONG_CLUSTER_LISTEN
 201                           value: \"off\"
 202                         - name: KONG_DATABASE
 203                           value: \"off\"
 204                         - name: KONG_KIC
 205                           value: \"on\"
 206                         - name: KONG_LUA_PACKAGE_PATH
 207                           value: /opt/?.lua;/opt/?/init.lua;;
 208                         - name: KONG_NGINX_WORKER_PROCESSES
 209                           value: \"2\"
 210                         - name: KONG_PORTAL_API_ACCESS_LOG
 211                           value: /dev/stdout
 212                         - name: KONG_PORTAL_API_ERROR_LOG
 213                           value: /dev/stderr
 214                         - name: KONG_PORT_MAPS
 215                           value: 80:8000, 443:8443
 216                         - name: KONG_PREFIX
 217                           value: /kong_prefix/
 218                         - name: KONG_PROXY_ACCESS_LOG
 219                           value: /dev/stdout
 220                         - name: KONG_PROXY_ERROR_LOG
 221                           value: /dev/stderr
 222                         - name: KONG_PROXY_LISTEN
 223                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 224                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 225                           value: /dev/stdout basic
 226                         - name: KONG_PROXY_STREAM_ERROR_LOG
 227                           value: /dev/stderr
 228                         - name: KONG_ROUTER_FLAVOR
 229                           value: traditional
 230                         - name: KONG_STATUS_ACCESS_LOG
 231                           value: \"off\"
 232                         - name: KONG_STATUS_ERROR_LOG
 233                           value: /dev/stderr
 234                         - name: KONG_STATUS_LISTEN
 235                           value: 0.0.0.0:8100, [::]:8100
 236                         - name: KONG_STREAM_LISTEN
 237                           value: \"off\"
 238                         - name: KONG_NGINX_DAEMON
 239                           value: \"off\"
 240                       image: kong:3.6
 241                       imagePullPolicy: IfNotPresent
 242                       lifecycle:
 243                         preStop:
 244                             exec:
 245                                 command:
 246                                     - kong
 247                                     - quit
 248                                     - --wait=15
 249                       livenessProbe:
 250                         failureThreshold: 3
 251                         httpGet:
 252                             path: /status
 253                             port: status
 254                             scheme: HTTP
 255                         initialDelaySeconds: 5
 256                         periodSeconds: 10
 257                         successThreshold: 1
 258                         timeoutSeconds: 5
 259                       name: proxy
 260                       ports:
 261                         - containerPort: 8000
 262                           name: proxy
 263                           protocol: TCP
 264                         - containerPort: 8443
 265                           name: proxy-tls
 266                           protocol: TCP
 267                         - containerPort: 8100
 268                           name: status
 269                           protocol: TCP
 270                       readinessProbe:
 271                         failureThreshold: 3
 272                         httpGet:
 273                             path: /status/ready
 274                             port: status
 275                             scheme: HTTP
 276                         initialDelaySeconds: 5
 277                         periodSeconds: 10
 278                         successThreshold: 1
 279                         timeoutSeconds: 5
 280                       resources: {}
 281                       securityContext:
 282                         allowPrivilegeEscalation: false
 283                         capabilities:
 284                             drop:
 285                                 - ALL
 286                         readOnlyRootFilesystem: true
 287                         runAsNonRoot: true
 288                         runAsUser: 1000
 289                         seccompProfile:
 290                             type: RuntimeDefault
 291                       volumeMounts:
 292                         - mountPath: /kong_prefix/
 293                           name: chartsnap-kong-prefix-dir
 294                         - mountPath: /tmp
 295                           name: chartsnap-kong-tmp
 296                 initContainers:
 297                     - command:
 298                         - rm
 299                         - -vrf
 300                         - $KONG_PREFIX/pids
 301                       env:
 302                         - name: KONG_ADMIN_ACCESS_LOG
 303                           value: /dev/stdout
 304                         - name: KONG_ADMIN_ERROR_LOG
 305                           value: /dev/stderr
 306                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 307                           value: /dev/stdout
 308                         - name: KONG_ADMIN_GUI_ERROR_LOG
 309                           value: /dev/stderr
 310                         - name: KONG_ADMIN_LISTEN
 311                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 312                         - name: KONG_CLUSTER_LISTEN
 313                           value: \"off\"
 314                         - name: KONG_DATABASE
 315                           value: \"off\"
 316                         - name: KONG_KIC
 317                           value: \"on\"
 318                         - name: KONG_LUA_PACKAGE_PATH
 319                           value: /opt/?.lua;/opt/?/init.lua;;
 320                         - name: KONG_NGINX_WORKER_PROCESSES
 321                           value: \"2\"
 322                         - name: KONG_PORTAL_API_ACCESS_LOG
 323                           value: /dev/stdout
 324                         - name: KONG_PORTAL_API_ERROR_LOG
 325                           value: /dev/stderr
 326                         - name: KONG_PORT_MAPS
 327                           value: 80:8000, 443:8443
 328                         - name: KONG_PREFIX
 329                           value: /kong_prefix/
 330                         - name: KONG_PROXY_ACCESS_LOG
 331                           value: /dev/stdout
 332                         - name: KONG_PROXY_ERROR_LOG
 333                           value: /dev/stderr
 334                         - name: KONG_PROXY_LISTEN
 335                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 336                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 337                           value: /dev/stdout basic
 338                         - name: KONG_PROXY_STREAM_ERROR_LOG
 339                           value: /dev/stderr
 340                         - name: KONG_ROUTER_FLAVOR
 341                           value: traditional
 342                         - name: KONG_STATUS_ACCESS_LOG
 343                           value: \"off\"
 344                         - name: KONG_STATUS_ERROR_LOG
 345                           value: /dev/stderr
 346                         - name: KONG_STATUS_LISTEN
 347                           value: 0.0.0.0:8100, [::]:8100
 348                         - name: KONG_STREAM_LISTEN
 349                           value: \"off\"
 350                       image: kong:3.6
 351                       imagePullPolicy: IfNotPresent
 352                       name: clear-stale-pid
 353                       resources: {}
 354                       securityContext:
 355                         allowPrivilegeEscalation: false
 356                         capabilities:
 357                             drop:
 358                                 - ALL
 359                         readOnlyRootFilesystem: true
 360                         runAsNonRoot: true
 361                         runAsUser: 1000
 362                         seccompProfile:
 363                             type: RuntimeDefault
 364                       volumeMounts:
 365                         - mountPath: /kong_prefix/
 366                           name: chartsnap-kong-prefix-dir
 367                         - mountPath: /tmp
 368                           name: chartsnap-kong-tmp
 369                 securityContext: {}
 370                 serviceAccountName: chartsnap-kong
 371                 terminationGracePeriodSeconds: 30
 372                 volumes:
 373                     - emptyDir:
 374                         sizeLimit: 256Mi
 375                       name: chartsnap-kong-prefix-dir
 376                     - emptyDir:
 377                         sizeLimit: 1Gi
 378                       name: chartsnap-kong-tmp
 379                     - name: chartsnap-kong-token
 380                       projected:
 381                         sources:
 382                             - serviceAccountToken:
 383                                 expirationSeconds: 3607
 384                                 path: token
 385                             - configMap:
 386                                 items:
 387                                     - key: ca.crt
 388                                       path: ca.crt
 389                                 name: kube-root-ca.crt
 390                             - downwardAPI:
 391                                 items:
 392                                     - fieldRef:
 393                                         apiVersion: v1
 394                                         fieldPath: metadata.namespace
 395                                       path: namespace
 396                     - name: webhook-cert
 397                       secret:
 398                         secretName: chartsnap-kong-validation-webhook-keypair
 399 - object:
 400     apiVersion: networking.k8s.io/v1
 401     kind: Ingress
 402     metadata:
 403         labels:
 404             app.kubernetes.io/instance: chartsnap
 405             app.kubernetes.io/managed-by: Helm
 406             app.kubernetes.io/name: kong
 407             app.kubernetes.io/version: \"3.6\"
 408             helm.sh/chart: kong-2.38.0
 409         name: chartsnap-kong-proxy
 410         namespace: default
 411     spec:
 412         rules:
 413             - host: proxy.kong.example
 414               http:
 415                 paths:
 416                     - backend:
 417                         service:
 418                             name: chartsnap-kong-proxy
 419                             port:
 420                                 number: 443
 421                       path: /
 422                       pathType: ImplementationSpecific
 423             - host: proxy2.kong.example
 424               http:
 425                 paths:
 426                     - backend:
 427                         service:
 428                             name: chartsnap-kong-proxy
 429                             port:
 430                                 number: 443
 431                       path: /foo
 432                       pathType: Prefix
 433                     - backend:
 434                         service:
 435                             name: chartsnap-kong-proxy
 436                             port:
 437                                 number: 443
 438                       path: /bar
 439                       pathType: Prefix
 440             - host: proxy3.kong.example
 441               http:
 442                 paths:
 443                     - backend:
 444                         service:
 445                             name: chartsnap-kong-proxy
 446                             port:
 447                                 number: 443
 448                       path: /baz
 449                       pathType: Prefix
 450         tls:
 451             - hosts:
 452                 - proxy.kong.example
 453               secretName: proxy.kong.example.secret
 454             - hosts:
 455                 - proxy2.kong.example
 456                 - proxy3.kong.example
 457               secretName: proxy.kong.example.secret2
 458 - object:
 459     apiVersion: rbac.authorization.k8s.io/v1
 460     kind: ClusterRole
 461     metadata:
 462         labels:
 463             app.kubernetes.io/instance: chartsnap
 464             app.kubernetes.io/managed-by: Helm
 465             app.kubernetes.io/name: kong
 466             app.kubernetes.io/version: \"3.6\"
 467             helm.sh/chart: kong-2.38.0
 468         name: chartsnap-kong
 469     rules:
 470         - apiGroups:
 471             - configuration.konghq.com
 472           resources:
 473             - kongupstreampolicies
 474           verbs:
 475             - get
 476             - list
 477             - watch
 478         - apiGroups:
 479             - configuration.konghq.com
 480           resources:
 481             - kongupstreampolicies/status
 482           verbs:
 483             - get
 484             - patch
 485             - update
 486         - apiGroups:
 487             - configuration.konghq.com
 488           resources:
 489             - kongconsumergroups
 490           verbs:
 491             - get
 492             - list
 493             - watch
 494         - apiGroups:
 495             - configuration.konghq.com
 496           resources:
 497             - kongconsumergroups/status
 498           verbs:
 499             - get
 500             - patch
 501             - update
 502         - apiGroups:
 503             - \"\"
 504           resources:
 505             - events
 506           verbs:
 507             - create
 508             - patch
 509         - apiGroups:
 510             - \"\"
 511           resources:
 512             - nodes
 513           verbs:
 514             - list
 515             - watch
 516         - apiGroups:
 517             - \"\"
 518           resources:
 519             - pods
 520           verbs:
 521             - get
 522             - list
 523             - watch
 524         - apiGroups:
 525             - \"\"
 526           resources:
 527             - secrets
 528           verbs:
 529             - list
 530             - watch
 531         - apiGroups:
 532             - \"\"
 533           resources:
 534             - services
 535           verbs:
 536             - get
 537             - list
 538             - watch
 539         - apiGroups:
 540             - \"\"
 541           resources:
 542             - services/status
 543           verbs:
 544             - get
 545             - patch
 546             - update
 547         - apiGroups:
 548             - configuration.konghq.com
 549           resources:
 550             - ingressclassparameterses
 551           verbs:
 552             - get
 553             - list
 554             - watch
 555         - apiGroups:
 556             - configuration.konghq.com
 557           resources:
 558             - kongconsumers
 559           verbs:
 560             - get
 561             - list
 562             - watch
 563         - apiGroups:
 564             - configuration.konghq.com
 565           resources:
 566             - kongconsumers/status
 567           verbs:
 568             - get
 569             - patch
 570             - update
 571         - apiGroups:
 572             - configuration.konghq.com
 573           resources:
 574             - kongingresses
 575           verbs:
 576             - get
 577             - list
 578             - watch
 579         - apiGroups:
 580             - configuration.konghq.com
 581           resources:
 582             - kongingresses/status
 583           verbs:
 584             - get
 585             - patch
 586             - update
 587         - apiGroups:
 588             - configuration.konghq.com
 589           resources:
 590             - kongplugins
 591           verbs:
 592             - get
 593             - list
 594             - watch
 595         - apiGroups:
 596             - configuration.konghq.com
 597           resources:
 598             - kongplugins/status
 599           verbs:
 600             - get
 601             - patch
 602             - update
 603         - apiGroups:
 604             - configuration.konghq.com
 605           resources:
 606             - tcpingresses
 607           verbs:
 608             - get
 609             - list
 610             - watch
 611         - apiGroups:
 612             - configuration.konghq.com
 613           resources:
 614             - tcpingresses/status
 615           verbs:
 616             - get
 617             - patch
 618             - update
 619         - apiGroups:
 620             - configuration.konghq.com
 621           resources:
 622             - udpingresses
 623           verbs:
 624             - get
 625             - list
 626             - watch
 627         - apiGroups:
 628             - configuration.konghq.com
 629           resources:
 630             - udpingresses/status
 631           verbs:
 632             - get
 633             - patch
 634             - update
 635         - apiGroups:
 636             - extensions
 637           resources:
 638             - ingresses
 639           verbs:
 640             - get
 641             - list
 642             - watch
 643         - apiGroups:
 644             - extensions
 645           resources:
 646             - ingresses/status
 647           verbs:
 648             - get
 649             - patch
 650             - update
 651         - apiGroups:
 652             - networking.k8s.io
 653           resources:
 654             - ingresses
 655           verbs:
 656             - get
 657             - list
 658             - watch
 659         - apiGroups:
 660             - networking.k8s.io
 661           resources:
 662             - ingresses/status
 663           verbs:
 664             - get
 665             - patch
 666             - update
 667         - apiGroups:
 668             - discovery.k8s.io
 669           resources:
 670             - endpointslices
 671           verbs:
 672             - get
 673             - list
 674             - watch
 675         - apiGroups:
 676             - configuration.konghq.com
 677           resources:
 678             - konglicenses
 679           verbs:
 680             - get
 681             - list
 682             - watch
 683         - apiGroups:
 684             - configuration.konghq.com
 685           resources:
 686             - konglicenses/status
 687           verbs:
 688             - get
 689             - patch
 690             - update
 691         - apiGroups:
 692             - configuration.konghq.com
 693           resources:
 694             - kongvaults
 695           verbs:
 696             - get
 697             - list
 698             - watch
 699         - apiGroups:
 700             - configuration.konghq.com
 701           resources:
 702             - kongvaults/status
 703           verbs:
 704             - get
 705             - patch
 706             - update
 707         - apiGroups:
 708             - configuration.konghq.com
 709           resources:
 710             - kongclusterplugins
 711           verbs:
 712             - get
 713             - list
 714             - watch
 715         - apiGroups:
 716             - configuration.konghq.com
 717           resources:
 718             - kongclusterplugins/status
 719           verbs:
 720             - get
 721             - patch
 722             - update
 723         - apiGroups:
 724             - apiextensions.k8s.io
 725           resources:
 726             - customresourcedefinitions
 727           verbs:
 728             - list
 729             - watch
 730         - apiGroups:
 731             - networking.k8s.io
 732           resources:
 733             - ingressclasses
 734           verbs:
 735             - get
 736             - list
 737             - watch
 738 - object:
 739     apiVersion: rbac.authorization.k8s.io/v1
 740     kind: ClusterRoleBinding
 741     metadata:
 742         labels:
 743             app.kubernetes.io/instance: chartsnap
 744             app.kubernetes.io/managed-by: Helm
 745             app.kubernetes.io/name: kong
 746             app.kubernetes.io/version: \"3.6\"
 747             helm.sh/chart: kong-2.38.0
 748         name: chartsnap-kong
 749     roleRef:
 750         apiGroup: rbac.authorization.k8s.io
 751         kind: ClusterRole
 752         name: chartsnap-kong
 753     subjects:
 754         - kind: ServiceAccount
 755           name: chartsnap-kong
 756           namespace: default
 757 - object:
 758     apiVersion: rbac.authorization.k8s.io/v1
 759     kind: Role
 760     metadata:
 761         labels:
 762             app.kubernetes.io/instance: chartsnap
 763             app.kubernetes.io/managed-by: Helm
 764             app.kubernetes.io/name: kong
 765             app.kubernetes.io/version: \"3.6\"
 766             helm.sh/chart: kong-2.38.0
 767         name: chartsnap-kong
 768         namespace: default
 769     rules:
 770         - apiGroups:
 771             - \"\"
 772           resources:
 773             - configmaps
 774             - pods
 775             - secrets
 776             - namespaces
 777           verbs:
 778             - get
 779         - apiGroups:
 780             - \"\"
 781           resourceNames:
 782             - kong-ingress-controller-leader-kong-kong
 783           resources:
 784             - configmaps
 785           verbs:
 786             - get
 787             - update
 788         - apiGroups:
 789             - \"\"
 790           resources:
 791             - configmaps
 792           verbs:
 793             - create
 794         - apiGroups:
 795             - \"\"
 796             - coordination.k8s.io
 797           resources:
 798             - configmaps
 799             - leases
 800           verbs:
 801             - get
 802             - list
 803             - watch
 804             - create
 805             - update
 806             - patch
 807             - delete
 808         - apiGroups:
 809             - \"\"
 810           resources:
 811             - events
 812           verbs:
 813             - create
 814             - patch
 815         - apiGroups:
 816             - \"\"
 817           resources:
 818             - services
 819           verbs:
 820             - get
 821 - object:
 822     apiVersion: rbac.authorization.k8s.io/v1
 823     kind: RoleBinding
 824     metadata:
 825         labels:
 826             app.kubernetes.io/instance: chartsnap
 827             app.kubernetes.io/managed-by: Helm
 828             app.kubernetes.io/name: kong
 829             app.kubernetes.io/version: \"3.6\"
 830             helm.sh/chart: kong-2.38.0
 831         name: chartsnap-kong
 832         namespace: default
 833     roleRef:
 834         apiGroup: rbac.authorization.k8s.io
 835         kind: Role
 836         name: chartsnap-kong
 837     subjects:
 838         - kind: ServiceAccount
 839           name: chartsnap-kong
 840           namespace: default
 841 - object:
 842     apiVersion: v1
 843     data:
 844         tls.crt: '###DYNAMIC_FIELD###'
 845         tls.key: '###DYNAMIC_FIELD###'
 846     kind: Secret
 847     metadata:
 848         labels:
 849             app.kubernetes.io/instance: chartsnap
 850             app.kubernetes.io/managed-by: Helm
 851             app.kubernetes.io/name: kong
 852             app.kubernetes.io/version: \"3.6\"
 853             helm.sh/chart: kong-2.38.0
 854         name: chartsnap-kong-validation-webhook-ca-keypair
 855         namespace: default
 856     type: kubernetes.io/tls
 857 - object:
 858     apiVersion: v1
 859     data:
 860         tls.crt: '###DYNAMIC_FIELD###'
 861         tls.key: '###DYNAMIC_FIELD###'
 862     kind: Secret
 863     metadata:
 864         labels:
 865             app.kubernetes.io/instance: chartsnap
 866             app.kubernetes.io/managed-by: Helm
 867             app.kubernetes.io/name: kong
 868             app.kubernetes.io/version: \"3.6\"
 869             helm.sh/chart: kong-2.38.0
 870         name: chartsnap-kong-validation-webhook-keypair
 871         namespace: default
 872     type: kubernetes.io/tls
 873 - object:
 874     apiVersion: v1
 875     data:
 876         tls.crt: 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
 877         tls.key: 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
 878     kind: Secret
 879     metadata:
 880         name: kong.proxy.example.secret
 881     type: kubernetes.io/tls
 882 - object:
 883     apiVersion: v1
 884     data:
 885         tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURmakNDQW1ZQ0NRREVtWjF0cnJwaURqQU5CZ2txaGtpRzl3MEJBUXNGQURDQmdERUxNQWtHQTFVRUJoTUMKV0ZneEVqQVFCZ05WQkFnTUNWTjBZWFJsVG1GdFpURVJNQThHQTFVRUJ3d0lRMmwwZVU1aGJXVXhGREFTQmdOVgpCQW9NQzBOdmJYQmhibmxPWVcxbE1Sc3dHUVlEVlFRTERCSkRiMjF3WVc1NVUyVmpkR2x2Yms1aGJXVXhGekFWCkJnTlZCQU1NRGlvdWEyOXVaeTVsZUdGdGNHeGxNQjRYRFRJek1EWXlPVEE0TVRjek4xb1hEVE16TURZeU5qQTQKTVRjek4xb3dnWUF4Q3pBSkJnTlZCQVlUQWxoWU1SSXdFQVlEVlFRSURBbFRkR0YwWlU1aGJXVXhFVEFQQmdOVgpCQWNNQ0VOcGRIbE9ZVzFsTVJRd0VnWURWUVFLREF0RGIyMXdZVzU1VG1GdFpURWJNQmtHQTFVRUN3d1NRMjl0CmNHRnVlVk5sWTNScGIyNU9ZVzFsTVJjd0ZRWURWUVFEREE0cUxtdHZibWN1WlhoaGJYQnNaVENDQVNJd0RRWUoKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTDlSR1g1VytsRW8wcGg2eTJqeHN6TGZOcjMvNlpFOQpPR0pPMGl1WmpwRml2dHBya24ydDlqYTRaNUdYOGh4NUczS1FsRkhrVFBmV01BWmUzdldINTF0alZzYjZwY2UwCjlkMUo4WXNxWkh5RHVlUzBrS3RUbEFmc0F5MnVjL3ZvUUdmOTdZeUI2TlJ4TEJmNHBnSVJ4eHpGM3o0Q1ZOSTgKTzE5Ym1PYVo1Vkk1QWZpbENSMUI1ekxuN2VoeEJHOHhTQmRtQUg0eWFob2t5RXk2a0ZtRzJCaEtJWjdsL1BZYQpqbU1yQ3cwekRVampvblBublZTWTkxL0EwNUJVTVk5OEZsME00QVV5T1V3enBaajhqMXhLMTNqUVlGeXJwUHQwCklHNUdLR044akVCcnRkdGVlcGZIdFZuekFWYnhoT0hkcXZoUWhrSDJDSGVwOStIQkNIL25VL1VDQXdFQUFUQU4KQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBQkcxVVYyUFRJekhrNEt4cjBHT0NXalhjTTdKUU9hbUJQM3dZSCswRgpyc09YUG9IOHVLV25XYjhSSGE1MDhMenU4MGNzS1lYcnZ4SEhDcmcxdXJjRnl3bnNMaUtMNGhsQklTd2ZMNzFFClVXODhQdGYyWTdjTnJZRzNLc2MvMWVpait1RWd5bVdCbjkraVYzbzE5VERwRjlZZWZwYzNUUDJqMGhNUHcwMlgKa1gzSlh3b250NnBQaDhlQjhXRU1OZkF5NzZmb0lMcytVd0Fjck56QkpjSVZSTERoZWFNMFNFd0xCNUpuaWZ5ZwplRE1aSE56MkhLais0NU1wTzFOSDBtd3ZJRTRLQjNITUNSSlMybmZFbWVMcFdCMWpmZTV6T2o1bWhTeS82M0RVCldDQll1aUhtelFWaGxJS21lQzBlVmd3bGtkMTFrUDRNM1hoWnB6V09aQ1BoaGc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
 886         tls.key: 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
 887     kind: Secret
 888     metadata:
 889         name: kong.proxy.example.secret2
 890     type: kubernetes.io/tls
 891 - object:
 892     apiVersion: v1
 893     kind: Service
 894     metadata:
 895         labels:
 896             app.kubernetes.io/instance: chartsnap
 897             app.kubernetes.io/managed-by: Helm
 898             app.kubernetes.io/name: kong
 899             app.kubernetes.io/version: \"3.6\"
 900             helm.sh/chart: kong-2.38.0
 901         name: chartsnap-kong-manager
 902         namespace: default
 903     spec:
 904         ports:
 905             - name: kong-manager
 906               port: 8002
 907               protocol: TCP
 908               targetPort: 8002
 909             - name: kong-manager-tls
 910               port: 8445
 911               protocol: TCP
 912               targetPort: 8445
 913         selector:
 914             app.kubernetes.io/component: app
 915             app.kubernetes.io/instance: chartsnap
 916             app.kubernetes.io/name: kong
 917         type: NodePort
 918 - object:
 919     apiVersion: v1
 920     kind: Service
 921     metadata:
 922         labels:
 923             app.kubernetes.io/instance: chartsnap
 924             app.kubernetes.io/managed-by: Helm
 925             app.kubernetes.io/name: kong
 926             app.kubernetes.io/version: \"3.6\"
 927             enable-metrics: \"true\"
 928             helm.sh/chart: kong-2.38.0
 929         name: chartsnap-kong-proxy
 930         namespace: default
 931     spec:
 932         ports:
 933             - name: kong-proxy
 934               port: 80
 935               protocol: TCP
 936               targetPort: 8000
 937             - name: kong-proxy-tls
 938               port: 443
 939               protocol: TCP
 940               targetPort: 8443
 941         selector:
 942             app.kubernetes.io/component: app
 943             app.kubernetes.io/instance: chartsnap
 944             app.kubernetes.io/name: kong
 945         type: LoadBalancer
 946 - object:
 947     apiVersion: v1
 948     kind: Service
 949     metadata:
 950         labels:
 951             app.kubernetes.io/instance: chartsnap
 952             app.kubernetes.io/managed-by: Helm
 953             app.kubernetes.io/name: kong
 954             app.kubernetes.io/version: \"3.6\"
 955             helm.sh/chart: kong-2.38.0
 956         name: chartsnap-kong-validation-webhook
 957         namespace: default
 958     spec:
 959         ports:
 960             - name: webhook
 961               port: 443
 962               protocol: TCP
 963               targetPort: webhook
 964         selector:
 965             app.kubernetes.io/component: app
 966             app.kubernetes.io/instance: chartsnap
 967             app.kubernetes.io/managed-by: Helm
 968             app.kubernetes.io/name: kong
 969             app.kubernetes.io/version: \"3.6\"
 970             helm.sh/chart: kong-2.38.0
 971 - object:
 972     apiVersion: v1
 973     kind: ServiceAccount
 974     metadata:
 975         labels:
 976             app.kubernetes.io/instance: chartsnap
 977             app.kubernetes.io/managed-by: Helm
 978             app.kubernetes.io/name: kong
 979             app.kubernetes.io/version: \"3.6\"
 980             helm.sh/chart: kong-2.38.0
 981         name: chartsnap-kong
 982         namespace: default
 983 """