helm/infrastructure/subcharts/kong/ci/__snapshots__/test5-values.snap

   1 [test5-values]
   2 SnapShot = """
   3 - object:
   4     apiVersion: admissionregistration.k8s.io/v1
   5     kind: ValidatingWebhookConfiguration
   6     metadata:
   7         labels:
   8             app.kubernetes.io/instance: chartsnap
   9             app.kubernetes.io/managed-by: Helm
  10             app.kubernetes.io/name: kong
  11             app.kubernetes.io/version: \"3.6\"
  12             helm.sh/chart: kong-2.38.0
  13         name: chartsnap-kong-validations
  14         namespace: default
  15     webhooks:
  16         - admissionReviewVersions:
  17             - v1beta1
  18           clientConfig:
  19             caBundle: '###DYNAMIC_FIELD###'
  20             service:
  21                 name: chartsnap-kong-validation-webhook
  22                 namespace: default
  23           failurePolicy: Ignore
  24           name: validations.kong.konghq.com
  25           objectSelector:
  26             matchExpressions:
  27                 - key: owner
  28                   operator: NotIn
  29                   values:
  30                     - helm
  31           rules:
  32             - apiGroups:
  33                 - configuration.konghq.com
  34               apiVersions:
  35                 - '*'
  36               operations:
  37                 - CREATE
  38                 - UPDATE
  39               resources:
  40                 - kongconsumers
  41                 - kongplugins
  42                 - kongclusterplugins
  43                 - kongingresses
  44             - apiGroups:
  45                 - \"\"
  46               apiVersions:
  47                 - v1
  48               operations:
  49                 - CREATE
  50                 - UPDATE
  51               resources:
  52                 - secrets
  53                 - services
  54             - apiGroups:
  55                 - networking.k8s.io
  56               apiVersions:
  57                 - v1
  58               operations:
  59                 - CREATE
  60                 - UPDATE
  61               resources:
  62                 - ingresses
  63             - apiGroups:
  64                 - gateway.networking.k8s.io
  65               apiVersions:
  66                 - v1alpha2
  67                 - v1beta1
  68                 - v1
  69               operations:
  70                 - CREATE
  71                 - UPDATE
  72               resources:
  73                 - gateways
  74                 - httproutes
  75           sideEffects: None
  76 - object:
  77     apiVersion: apps/v1
  78     kind: Deployment
  79     metadata:
  80         labels:
  81             app.kubernetes.io/component: app
  82             app.kubernetes.io/instance: chartsnap
  83             app.kubernetes.io/managed-by: Helm
  84             app.kubernetes.io/name: kong
  85             app.kubernetes.io/version: \"3.6\"
  86             helm.sh/chart: kong-2.38.0
  87         name: chartsnap-kong
  88         namespace: default
  89     spec:
  90         replicas: 1
  91         selector:
  92             matchLabels:
  93                 app.kubernetes.io/component: app
  94                 app.kubernetes.io/instance: chartsnap
  95                 app.kubernetes.io/name: kong
  96         strategy:
  97             rollingUpdate:
  98                 maxSurge: 1
  99                 maxUnavailable: 0
 100             type: RollingUpdate
 101         template:
 102             metadata:
 103                 annotations:
 104                     kuma.io/gateway: enabled
 105                     kuma.io/service-account-token-volume: chartsnap-kong-token
 106                     traffic.sidecar.istio.io/includeInboundPorts: \"\"
 107                 labels:
 108                     app: chartsnap-kong
 109                     app.kubernetes.io/component: app
 110                     app.kubernetes.io/instance: chartsnap
 111                     app.kubernetes.io/managed-by: Helm
 112                     app.kubernetes.io/name: kong
 113                     app.kubernetes.io/version: \"3.6\"
 114                     helm.sh/chart: kong-2.38.0
 115                     version: \"3.6\"
 116             spec:
 117                 automountServiceAccountToken: false
 118                 containers:
 119                     - args: null
 120                       env:
 121                         - name: POD_NAME
 122                           valueFrom:
 123                             fieldRef:
 124                                 apiVersion: v1
 125                                 fieldPath: metadata.name
 126                         - name: POD_NAMESPACE
 127                           valueFrom:
 128                             fieldRef:
 129                                 apiVersion: v1
 130                                 fieldPath: metadata.namespace
 131                         - name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN
 132                           value: 0.0.0.0:8080
 133                         - name: CONTROLLER_ANONYMOUS_REPORTS
 134                           value: \"false\"
 135                         - name: CONTROLLER_ELECTION_ID
 136                           value: kong-ingress-controller-leader-kong
 137                         - name: CONTROLLER_INGRESS_CLASS
 138                           value: kong
 139                         - name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY
 140                           value: \"true\"
 141                         - name: CONTROLLER_KONG_ADMIN_URL
 142                           value: https://localhost:8444
 143                         - name: CONTROLLER_PUBLISH_SERVICE
 144                           value: default/chartsnap-kong-proxy
 145                       image: kong/kubernetes-ingress-controller:3.1
 146                       imagePullPolicy: IfNotPresent
 147                       livenessProbe:
 148                         failureThreshold: 3
 149                         httpGet:
 150                             path: /healthz
 151                             port: 10254
 152                             scheme: HTTP
 153                         initialDelaySeconds: 5
 154                         periodSeconds: 10
 155                         successThreshold: 1
 156                         timeoutSeconds: 5
 157                       name: ingress-controller
 158                       ports:
 159                         - containerPort: 8080
 160                           name: webhook
 161                           protocol: TCP
 162                         - containerPort: 10255
 163                           name: cmetrics
 164                           protocol: TCP
 165                         - containerPort: 10254
 166                           name: cstatus
 167                           protocol: TCP
 168                       readinessProbe:
 169                         failureThreshold: 3
 170                         httpGet:
 171                             path: /readyz
 172                             port: 10254
 173                             scheme: HTTP
 174                         initialDelaySeconds: 5
 175                         periodSeconds: 10
 176                         successThreshold: 1
 177                         timeoutSeconds: 5
 178                       resources: {}
 179                       securityContext:
 180                         allowPrivilegeEscalation: false
 181                         capabilities:
 182                             drop:
 183                                 - ALL
 184                         readOnlyRootFilesystem: true
 185                         runAsNonRoot: true
 186                         runAsUser: 1000
 187                         seccompProfile:
 188                             type: RuntimeDefault
 189                       volumeMounts:
 190                         - mountPath: /admission-webhook
 191                           name: webhook-cert
 192                           readOnly: true
 193                         - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
 194                           name: chartsnap-kong-token
 195                           readOnly: true
 196                     - env:
 197                         - name: CLIENT_ID
 198                           value: exampleId
 199                         - name: KONG_ADMIN_ACCESS_LOG
 200                           value: /dev/stdout
 201                         - name: KONG_ADMIN_API_URI
 202                           value: http://
 203                         - name: KONG_ADMIN_ERROR_LOG
 204                           value: /dev/stderr
 205                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 206                           value: /dev/stdout
 207                         - name: KONG_ADMIN_GUI_API_URL
 208                           value: http://
 209                         - name: KONG_ADMIN_GUI_ERROR_LOG
 210                           value: /dev/stderr
 211                         - name: KONG_ADMIN_LISTEN
 212                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 213                         - name: KONG_ANONYMOUS_REPORTS
 214                           value: \"off\"
 215                         - name: KONG_CLUSTER_LISTEN
 216                           value: \"off\"
 217                         - name: KONG_DATABASE
 218                           value: postgres
 219                         - name: KONG_KIC
 220                           value: \"on\"
 221                         - name: KONG_LUA_PACKAGE_PATH
 222                           value: /opt/?.lua;/opt/?/init.lua;;
 223                         - name: KONG_NGINX_WORKER_PROCESSES
 224                           value: \"2\"
 225                         - name: KONG_PG_HOST
 226                           value: chartsnap-postgresql
 227                         - name: KONG_PG_PASSWORD
 228                           valueFrom:
 229                             secretKeyRef:
 230                                 key: password
 231                                 name: chartsnap-postgresql
 232                         - name: KONG_PG_PORT
 233                           value: \"5432\"
 234                         - name: KONG_PORTAL_API_ACCESS_LOG
 235                           value: /dev/stdout
 236                         - name: KONG_PORTAL_API_ERROR_LOG
 237                           value: /dev/stderr
 238                         - name: KONG_PORT_MAPS
 239                           value: 80:8000, 443:8443
 240                         - name: KONG_PREFIX
 241                           value: /kong_prefix/
 242                         - name: KONG_PROXY_ACCESS_LOG
 243                           value: /dev/stdout
 244                         - name: KONG_PROXY_ERROR_LOG
 245                           value: /dev/stderr
 246                         - name: KONG_PROXY_LISTEN
 247                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 248                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 249                           value: /dev/stdout basic
 250                         - name: KONG_PROXY_STREAM_ERROR_LOG
 251                           value: /dev/stderr
 252                         - name: KONG_ROUTER_FLAVOR
 253                           value: traditional
 254                         - name: KONG_STATUS_ACCESS_LOG
 255                           value: \"off\"
 256                         - name: KONG_STATUS_ERROR_LOG
 257                           value: /dev/stderr
 258                         - name: KONG_STATUS_LISTEN
 259                           value: 0.0.0.0:8100, [::]:8100
 260                         - name: KONG_STREAM_LISTEN
 261                           value: \"off\"
 262                         - name: KONG_NGINX_DAEMON
 263                           value: \"off\"
 264                       image: kong:3.6
 265                       imagePullPolicy: IfNotPresent
 266                       lifecycle:
 267                         preStop:
 268                             exec:
 269                                 command:
 270                                     - kong
 271                                     - quit
 272                                     - --wait=15
 273                       livenessProbe:
 274                         failureThreshold: 3
 275                         httpGet:
 276                             path: /status
 277                             port: status
 278                             scheme: HTTP
 279                         initialDelaySeconds: 5
 280                         periodSeconds: 10
 281                         successThreshold: 1
 282                         timeoutSeconds: 5
 283                       name: proxy
 284                       ports:
 285                         - containerPort: 8000
 286                           name: proxy
 287                           protocol: TCP
 288                         - containerPort: 8443
 289                           name: proxy-tls
 290                           protocol: TCP
 291                         - containerPort: 8100
 292                           name: status
 293                           protocol: TCP
 294                       readinessProbe:
 295                         failureThreshold: 3
 296                         httpGet:
 297                             path: /status/ready
 298                             port: status
 299                             scheme: HTTP
 300                         initialDelaySeconds: 5
 301                         periodSeconds: 10
 302                         successThreshold: 1
 303                         timeoutSeconds: 5
 304                       resources: {}
 305                       securityContext:
 306                         allowPrivilegeEscalation: false
 307                         capabilities:
 308                             drop:
 309                                 - ALL
 310                         readOnlyRootFilesystem: true
 311                         runAsNonRoot: true
 312                         runAsUser: 1000
 313                         seccompProfile:
 314                             type: RuntimeDefault
 315                       volumeMounts:
 316                         - mountPath: /kong_prefix/
 317                           name: chartsnap-kong-prefix-dir
 318                         - mountPath: /tmp
 319                           name: chartsnap-kong-tmp
 320                 initContainers:
 321                     - command:
 322                         - rm
 323                         - -vrf
 324                         - $KONG_PREFIX/pids
 325                       env:
 326                         - name: CLIENT_ID
 327                           value: exampleId
 328                         - name: KONG_ADMIN_ACCESS_LOG
 329                           value: /dev/stdout
 330                         - name: KONG_ADMIN_API_URI
 331                           value: http://
 332                         - name: KONG_ADMIN_ERROR_LOG
 333                           value: /dev/stderr
 334                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 335                           value: /dev/stdout
 336                         - name: KONG_ADMIN_GUI_API_URL
 337                           value: http://
 338                         - name: KONG_ADMIN_GUI_ERROR_LOG
 339                           value: /dev/stderr
 340                         - name: KONG_ADMIN_LISTEN
 341                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 342                         - name: KONG_ANONYMOUS_REPORTS
 343                           value: \"off\"
 344                         - name: KONG_CLUSTER_LISTEN
 345                           value: \"off\"
 346                         - name: KONG_DATABASE
 347                           value: postgres
 348                         - name: KONG_KIC
 349                           value: \"on\"
 350                         - name: KONG_LUA_PACKAGE_PATH
 351                           value: /opt/?.lua;/opt/?/init.lua;;
 352                         - name: KONG_NGINX_WORKER_PROCESSES
 353                           value: \"2\"
 354                         - name: KONG_PG_HOST
 355                           value: chartsnap-postgresql
 356                         - name: KONG_PG_PASSWORD
 357                           valueFrom:
 358                             secretKeyRef:
 359                                 key: password
 360                                 name: chartsnap-postgresql
 361                         - name: KONG_PG_PORT
 362                           value: \"5432\"
 363                         - name: KONG_PORTAL_API_ACCESS_LOG
 364                           value: /dev/stdout
 365                         - name: KONG_PORTAL_API_ERROR_LOG
 366                           value: /dev/stderr
 367                         - name: KONG_PORT_MAPS
 368                           value: 80:8000, 443:8443
 369                         - name: KONG_PREFIX
 370                           value: /kong_prefix/
 371                         - name: KONG_PROXY_ACCESS_LOG
 372                           value: /dev/stdout
 373                         - name: KONG_PROXY_ERROR_LOG
 374                           value: /dev/stderr
 375                         - name: KONG_PROXY_LISTEN
 376                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 377                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 378                           value: /dev/stdout basic
 379                         - name: KONG_PROXY_STREAM_ERROR_LOG
 380                           value: /dev/stderr
 381                         - name: KONG_ROUTER_FLAVOR
 382                           value: traditional
 383                         - name: KONG_STATUS_ACCESS_LOG
 384                           value: \"off\"
 385                         - name: KONG_STATUS_ERROR_LOG
 386                           value: /dev/stderr
 387                         - name: KONG_STATUS_LISTEN
 388                           value: 0.0.0.0:8100, [::]:8100
 389                         - name: KONG_STREAM_LISTEN
 390                           value: \"off\"
 391                       image: kong:3.6
 392                       imagePullPolicy: IfNotPresent
 393                       name: clear-stale-pid
 394                       resources: {}
 395                       securityContext:
 396                         allowPrivilegeEscalation: false
 397                         capabilities:
 398                             drop:
 399                                 - ALL
 400                         readOnlyRootFilesystem: true
 401                         runAsNonRoot: true
 402                         runAsUser: 1000
 403                         seccompProfile:
 404                             type: RuntimeDefault
 405                       volumeMounts:
 406                         - mountPath: /kong_prefix/
 407                           name: chartsnap-kong-prefix-dir
 408                         - mountPath: /tmp
 409                           name: chartsnap-kong-tmp
 410                     - args:
 411                         - /bin/bash
 412                         - -c
 413                         - export KONG_NGINX_DAEMON=on KONG_PREFIX=`mktemp -d` KONG_KEYRING_ENABLED=off; until kong start; do echo 'waiting for db'; sleep 1; done; kong stop
 414                       env:
 415                         - name: CLIENT_ID
 416                           value: exampleId
 417                         - name: KONG_ADMIN_ACCESS_LOG
 418                           value: /dev/stdout
 419                         - name: KONG_ADMIN_API_URI
 420                           value: http://
 421                         - name: KONG_ADMIN_ERROR_LOG
 422                           value: /dev/stderr
 423                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 424                           value: /dev/stdout
 425                         - name: KONG_ADMIN_GUI_API_URL
 426                           value: http://
 427                         - name: KONG_ADMIN_GUI_ERROR_LOG
 428                           value: /dev/stderr
 429                         - name: KONG_ADMIN_LISTEN
 430                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 431                         - name: KONG_ANONYMOUS_REPORTS
 432                           value: \"off\"
 433                         - name: KONG_CLUSTER_LISTEN
 434                           value: \"off\"
 435                         - name: KONG_DATABASE
 436                           value: postgres
 437                         - name: KONG_KIC
 438                           value: \"on\"
 439                         - name: KONG_LUA_PACKAGE_PATH
 440                           value: /opt/?.lua;/opt/?/init.lua;;
 441                         - name: KONG_NGINX_WORKER_PROCESSES
 442                           value: \"2\"
 443                         - name: KONG_PG_HOST
 444                           value: chartsnap-postgresql
 445                         - name: KONG_PG_PASSWORD
 446                           valueFrom:
 447                             secretKeyRef:
 448                                 key: password
 449                                 name: chartsnap-postgresql
 450                         - name: KONG_PG_PORT
 451                           value: \"5432\"
 452                         - name: KONG_PORTAL_API_ACCESS_LOG
 453                           value: /dev/stdout
 454                         - name: KONG_PORTAL_API_ERROR_LOG
 455                           value: /dev/stderr
 456                         - name: KONG_PORT_MAPS
 457                           value: 80:8000, 443:8443
 458                         - name: KONG_PREFIX
 459                           value: /kong_prefix/
 460                         - name: KONG_PROXY_ACCESS_LOG
 461                           value: /dev/stdout
 462                         - name: KONG_PROXY_ERROR_LOG
 463                           value: /dev/stderr
 464                         - name: KONG_PROXY_LISTEN
 465                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 466                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 467                           value: /dev/stdout basic
 468                         - name: KONG_PROXY_STREAM_ERROR_LOG
 469                           value: /dev/stderr
 470                         - name: KONG_ROUTER_FLAVOR
 471                           value: traditional
 472                         - name: KONG_STATUS_ACCESS_LOG
 473                           value: \"off\"
 474                         - name: KONG_STATUS_ERROR_LOG
 475                           value: /dev/stderr
 476                         - name: KONG_STATUS_LISTEN
 477                           value: 0.0.0.0:8100, [::]:8100
 478                         - name: KONG_STREAM_LISTEN
 479                           value: \"off\"
 480                       image: kong:3.6
 481                       imagePullPolicy: IfNotPresent
 482                       name: wait-for-db
 483                       resources: {}
 484                       securityContext:
 485                         allowPrivilegeEscalation: false
 486                         capabilities:
 487                             drop:
 488                                 - ALL
 489                         readOnlyRootFilesystem: true
 490                         runAsNonRoot: true
 491                         runAsUser: 1000
 492                         seccompProfile:
 493                             type: RuntimeDefault
 494                       volumeMounts:
 495                         - mountPath: /kong_prefix/
 496                           name: chartsnap-kong-prefix-dir
 497                         - mountPath: /tmp
 498                           name: chartsnap-kong-tmp
 499                 securityContext: {}
 500                 serviceAccountName: chartsnap-kong
 501                 terminationGracePeriodSeconds: 30
 502                 volumes:
 503                     - emptyDir:
 504                         sizeLimit: 256Mi
 505                       name: chartsnap-kong-prefix-dir
 506                     - emptyDir:
 507                         sizeLimit: 1Gi
 508                       name: chartsnap-kong-tmp
 509                     - name: chartsnap-kong-token
 510                       projected:
 511                         sources:
 512                             - serviceAccountToken:
 513                                 expirationSeconds: 3607
 514                                 path: token
 515                             - configMap:
 516                                 items:
 517                                     - key: ca.crt
 518                                       path: ca.crt
 519                                 name: kube-root-ca.crt
 520                             - downwardAPI:
 521                                 items:
 522                                     - fieldRef:
 523                                         apiVersion: v1
 524                                         fieldPath: metadata.namespace
 525                                       path: namespace
 526                     - configMap:
 527                         defaultMode: 493
 528                         name: chartsnap-kong-bash-wait-for-postgres
 529                       name: chartsnap-kong-bash-wait-for-postgres
 530                     - name: webhook-cert
 531                       secret:
 532                         secretName: chartsnap-kong-validation-webhook-keypair
 533 - object:
 534     apiVersion: apps/v1
 535     kind: StatefulSet
 536     metadata:
 537         annotations: null
 538         labels:
 539             app.kubernetes.io/component: primary
 540             app.kubernetes.io/instance: chartsnap
 541             app.kubernetes.io/managed-by: Helm
 542             app.kubernetes.io/name: postgresql
 543             helm.sh/chart: postgresql-11.9.13
 544         name: chartsnap-postgresql
 545         namespace: default
 546     spec:
 547         replicas: 1
 548         selector:
 549             matchLabels:
 550                 app.kubernetes.io/component: primary
 551                 app.kubernetes.io/instance: chartsnap
 552                 app.kubernetes.io/name: postgresql
 553         serviceName: chartsnap-postgresql-hl
 554         template:
 555             metadata:
 556                 annotations: null
 557                 labels:
 558                     app.kubernetes.io/component: primary
 559                     app.kubernetes.io/instance: chartsnap
 560                     app.kubernetes.io/managed-by: Helm
 561                     app.kubernetes.io/name: postgresql
 562                     helm.sh/chart: postgresql-11.9.13
 563                 name: chartsnap-postgresql
 564             spec:
 565                 affinity:
 566                     nodeAffinity: null
 567                     podAffinity: null
 568                     podAntiAffinity:
 569                         preferredDuringSchedulingIgnoredDuringExecution:
 570                             - podAffinityTerm:
 571                                 labelSelector:
 572                                     matchLabels:
 573                                         app.kubernetes.io/component: primary
 574                                         app.kubernetes.io/instance: chartsnap
 575                                         app.kubernetes.io/name: postgresql
 576                                 namespaces:
 577                                     - default
 578                                 topologyKey: kubernetes.io/hostname
 579                               weight: 1
 580                 containers:
 581                     - env:
 582                         - name: BITNAMI_DEBUG
 583                           value: \"false\"
 584                         - name: POSTGRESQL_PORT_NUMBER
 585                           value: \"5432\"
 586                         - name: POSTGRESQL_VOLUME_DIR
 587                           value: /bitnami/postgresql
 588                         - name: PGDATA
 589                           value: /bitnami/postgresql/data
 590                         - name: POSTGRES_USER
 591                           value: kong
 592                         - name: POSTGRES_POSTGRES_PASSWORD
 593                           valueFrom:
 594                             secretKeyRef:
 595                                 key: postgres-password
 596                                 name: chartsnap-postgresql
 597                         - name: POSTGRES_PASSWORD
 598                           valueFrom:
 599                             secretKeyRef:
 600                                 key: password
 601                                 name: chartsnap-postgresql
 602                         - name: POSTGRES_DB
 603                           value: kong
 604                         - name: POSTGRESQL_ENABLE_LDAP
 605                           value: \"no\"
 606                         - name: POSTGRESQL_ENABLE_TLS
 607                           value: \"no\"
 608                         - name: POSTGRESQL_LOG_HOSTNAME
 609                           value: \"false\"
 610                         - name: POSTGRESQL_LOG_CONNECTIONS
 611                           value: \"false\"
 612                         - name: POSTGRESQL_LOG_DISCONNECTIONS
 613                           value: \"false\"
 614                         - name: POSTGRESQL_PGAUDIT_LOG_CATALOG
 615                           value: \"off\"
 616                         - name: POSTGRESQL_CLIENT_MIN_MESSAGES
 617                           value: error
 618                         - name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
 619                           value: pgaudit
 620                       image: docker.io/bitnami/postgresql:13.11.0-debian-11-r20
 621                       imagePullPolicy: IfNotPresent
 622                       livenessProbe:
 623                         exec:
 624                             command:
 625                                 - /bin/sh
 626                                 - -c
 627                                 - exec pg_isready -U \"kong\" -d \"dbname=kong\" -h 127.0.0.1 -p 5432
 628                         failureThreshold: 6
 629                         initialDelaySeconds: 30
 630                         periodSeconds: 10
 631                         successThreshold: 1
 632                         timeoutSeconds: 5
 633                       name: postgresql
 634                       ports:
 635                         - containerPort: 5432
 636                           name: tcp-postgresql
 637                       readinessProbe:
 638                         exec:
 639                             command:
 640                                 - /bin/sh
 641                                 - -c
 642                                 - -e
 643                                 - |
 644                                   exec pg_isready -U \"kong\" -d \"dbname=kong\" -h 127.0.0.1 -p 5432
 645                                   [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
 646                         failureThreshold: 6
 647                         initialDelaySeconds: 5
 648                         periodSeconds: 10
 649                         successThreshold: 1
 650                         timeoutSeconds: 5
 651                       resources:
 652                         limits: {}
 653                         requests:
 654                             cpu: 250m
 655                             memory: 256Mi
 656                       securityContext:
 657                         runAsUser: 1001
 658                       volumeMounts:
 659                         - mountPath: /dev/shm
 660                           name: dshm
 661                         - mountPath: /bitnami/postgresql
 662                           name: data
 663                 hostIPC: false
 664                 hostNetwork: false
 665                 initContainers: null
 666                 securityContext:
 667                     fsGroup: 1001
 668                 serviceAccountName: default
 669                 volumes:
 670                     - emptyDir:
 671                         medium: Memory
 672                       name: dshm
 673         updateStrategy:
 674             rollingUpdate: {}
 675             type: RollingUpdate
 676         volumeClaimTemplates:
 677             - metadata:
 678                 name: data
 679               spec:
 680                 accessModes:
 681                     - ReadWriteOnce
 682                 resources:
 683                     requests:
 684                         storage: 8Gi
 685 - object:
 686     apiVersion: batch/v1
 687     kind: Job
 688     metadata:
 689         annotations:
 690             argocd.argoproj.io/hook: Sync
 691             argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
 692         labels:
 693             app.kubernetes.io/component: init-migrations
 694             app.kubernetes.io/instance: chartsnap
 695             app.kubernetes.io/managed-by: Helm
 696             app.kubernetes.io/name: kong
 697             app.kubernetes.io/version: \"3.6\"
 698             helm.sh/chart: kong-2.38.0
 699         name: chartsnap-kong-init-migrations
 700         namespace: default
 701     spec:
 702         backoffLimit: null
 703         template:
 704             metadata:
 705                 annotations:
 706                     kuma.io/service-account-token-volume: chartsnap-kong-token
 707                     sidecar.istio.io/inject: \"false\"
 708                 labels:
 709                     app.kubernetes.io/component: init-migrations
 710                     app.kubernetes.io/instance: chartsnap
 711                     app.kubernetes.io/managed-by: Helm
 712                     app.kubernetes.io/name: kong
 713                     app.kubernetes.io/version: \"3.6\"
 714                     helm.sh/chart: kong-2.38.0
 715                 name: kong-init-migrations
 716             spec:
 717                 automountServiceAccountToken: false
 718                 containers:
 719                     - args:
 720                         - kong
 721                         - migrations
 722                         - bootstrap
 723                       env:
 724                         - name: CLIENT_ID
 725                           value: exampleId
 726                         - name: KONG_ADMIN_ACCESS_LOG
 727                           value: /dev/stdout
 728                         - name: KONG_ADMIN_API_URI
 729                           value: http://
 730                         - name: KONG_ADMIN_ERROR_LOG
 731                           value: /dev/stderr
 732                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 733                           value: /dev/stdout
 734                         - name: KONG_ADMIN_GUI_API_URL
 735                           value: http://
 736                         - name: KONG_ADMIN_GUI_ERROR_LOG
 737                           value: /dev/stderr
 738                         - name: KONG_ADMIN_LISTEN
 739                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 740                         - name: KONG_ANONYMOUS_REPORTS
 741                           value: \"off\"
 742                         - name: KONG_CLUSTER_LISTEN
 743                           value: \"off\"
 744                         - name: KONG_DATABASE
 745                           value: postgres
 746                         - name: KONG_KIC
 747                           value: \"on\"
 748                         - name: KONG_LUA_PACKAGE_PATH
 749                           value: /opt/?.lua;/opt/?/init.lua;;
 750                         - name: KONG_NGINX_WORKER_PROCESSES
 751                           value: \"2\"
 752                         - name: KONG_PG_HOST
 753                           value: chartsnap-postgresql
 754                         - name: KONG_PG_PASSWORD
 755                           valueFrom:
 756                             secretKeyRef:
 757                                 key: password
 758                                 name: chartsnap-postgresql
 759                         - name: KONG_PG_PORT
 760                           value: \"5432\"
 761                         - name: KONG_PORTAL_API_ACCESS_LOG
 762                           value: /dev/stdout
 763                         - name: KONG_PORTAL_API_ERROR_LOG
 764                           value: /dev/stderr
 765                         - name: KONG_PORT_MAPS
 766                           value: 80:8000, 443:8443
 767                         - name: KONG_PREFIX
 768                           value: /kong_prefix/
 769                         - name: KONG_PROXY_ACCESS_LOG
 770                           value: /dev/stdout
 771                         - name: KONG_PROXY_ERROR_LOG
 772                           value: /dev/stderr
 773                         - name: KONG_PROXY_LISTEN
 774                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 775                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 776                           value: /dev/stdout basic
 777                         - name: KONG_PROXY_STREAM_ERROR_LOG
 778                           value: /dev/stderr
 779                         - name: KONG_ROUTER_FLAVOR
 780                           value: traditional
 781                         - name: KONG_STATUS_ACCESS_LOG
 782                           value: \"off\"
 783                         - name: KONG_STATUS_ERROR_LOG
 784                           value: /dev/stderr
 785                         - name: KONG_STATUS_LISTEN
 786                           value: 0.0.0.0:8100, [::]:8100
 787                         - name: KONG_STREAM_LISTEN
 788                           value: \"off\"
 789                         - name: KONG_NGINX_DAEMON
 790                           value: \"off\"
 791                       image: kong:3.6
 792                       imagePullPolicy: IfNotPresent
 793                       name: kong-migrations
 794                       resources: {}
 795                       securityContext:
 796                         allowPrivilegeEscalation: false
 797                         capabilities:
 798                             drop:
 799                                 - ALL
 800                         readOnlyRootFilesystem: true
 801                         runAsNonRoot: true
 802                         runAsUser: 1000
 803                         seccompProfile:
 804                             type: RuntimeDefault
 805                       volumeMounts:
 806                         - mountPath: /kong_prefix/
 807                           name: chartsnap-kong-prefix-dir
 808                         - mountPath: /tmp
 809                           name: chartsnap-kong-tmp
 810                 initContainers:
 811                     - command:
 812                         - bash
 813                         - /wait_postgres/wait.sh
 814                       env:
 815                         - name: CLIENT_ID
 816                           value: exampleId
 817                         - name: KONG_ADMIN_ACCESS_LOG
 818                           value: /dev/stdout
 819                         - name: KONG_ADMIN_API_URI
 820                           value: http://
 821                         - name: KONG_ADMIN_ERROR_LOG
 822                           value: /dev/stderr
 823                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 824                           value: /dev/stdout
 825                         - name: KONG_ADMIN_GUI_API_URL
 826                           value: http://
 827                         - name: KONG_ADMIN_GUI_ERROR_LOG
 828                           value: /dev/stderr
 829                         - name: KONG_ADMIN_LISTEN
 830                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 831                         - name: KONG_ANONYMOUS_REPORTS
 832                           value: \"off\"
 833                         - name: KONG_CLUSTER_LISTEN
 834                           value: \"off\"
 835                         - name: KONG_DATABASE
 836                           value: postgres
 837                         - name: KONG_KIC
 838                           value: \"on\"
 839                         - name: KONG_LUA_PACKAGE_PATH
 840                           value: /opt/?.lua;/opt/?/init.lua;;
 841                         - name: KONG_NGINX_WORKER_PROCESSES
 842                           value: \"2\"
 843                         - name: KONG_PG_HOST
 844                           value: chartsnap-postgresql
 845                         - name: KONG_PG_PASSWORD
 846                           valueFrom:
 847                             secretKeyRef:
 848                                 key: password
 849                                 name: chartsnap-postgresql
 850                         - name: KONG_PG_PORT
 851                           value: \"5432\"
 852                         - name: KONG_PORTAL_API_ACCESS_LOG
 853                           value: /dev/stdout
 854                         - name: KONG_PORTAL_API_ERROR_LOG
 855                           value: /dev/stderr
 856                         - name: KONG_PORT_MAPS
 857                           value: 80:8000, 443:8443
 858                         - name: KONG_PREFIX
 859                           value: /kong_prefix/
 860                         - name: KONG_PROXY_ACCESS_LOG
 861                           value: /dev/stdout
 862                         - name: KONG_PROXY_ERROR_LOG
 863                           value: /dev/stderr
 864                         - name: KONG_PROXY_LISTEN
 865                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
 866                         - name: KONG_PROXY_STREAM_ACCESS_LOG
 867                           value: /dev/stdout basic
 868                         - name: KONG_PROXY_STREAM_ERROR_LOG
 869                           value: /dev/stderr
 870                         - name: KONG_ROUTER_FLAVOR
 871                           value: traditional
 872                         - name: KONG_STATUS_ACCESS_LOG
 873                           value: \"off\"
 874                         - name: KONG_STATUS_ERROR_LOG
 875                           value: /dev/stderr
 876                         - name: KONG_STATUS_LISTEN
 877                           value: 0.0.0.0:8100, [::]:8100
 878                         - name: KONG_STREAM_LISTEN
 879                           value: \"off\"
 880                         - name: KONG_NGINX_DAEMON
 881                           value: \"off\"
 882                       image: kong:3.6
 883                       imagePullPolicy: IfNotPresent
 884                       name: wait-for-postgres
 885                       resources: {}
 886                       volumeMounts:
 887                         - mountPath: /wait_postgres
 888                           name: chartsnap-kong-bash-wait-for-postgres
 889                 restartPolicy: OnFailure
 890                 securityContext: {}
 891                 serviceAccountName: chartsnap-kong
 892                 volumes:
 893                     - emptyDir:
 894                         sizeLimit: 256Mi
 895                       name: chartsnap-kong-prefix-dir
 896                     - emptyDir:
 897                         sizeLimit: 1Gi
 898                       name: chartsnap-kong-tmp
 899                     - name: chartsnap-kong-token
 900                       projected:
 901                         sources:
 902                             - serviceAccountToken:
 903                                 expirationSeconds: 3607
 904                                 path: token
 905                             - configMap:
 906                                 items:
 907                                     - key: ca.crt
 908                                       path: ca.crt
 909                                 name: kube-root-ca.crt
 910                             - downwardAPI:
 911                                 items:
 912                                     - fieldRef:
 913                                         apiVersion: v1
 914                                         fieldPath: metadata.namespace
 915                                       path: namespace
 916                     - configMap:
 917                         defaultMode: 493
 918                         name: chartsnap-kong-bash-wait-for-postgres
 919                       name: chartsnap-kong-bash-wait-for-postgres
 920                     - name: webhook-cert
 921                       secret:
 922                         secretName: chartsnap-kong-validation-webhook-keypair
 923 - object:
 924     apiVersion: batch/v1
 925     kind: Job
 926     metadata:
 927         annotations:
 928             helm.sh/hook: post-upgrade
 929             helm.sh/hook-delete-policy: before-hook-creation
 930         labels:
 931             app.kubernetes.io/component: post-upgrade-migrations
 932             app.kubernetes.io/instance: chartsnap
 933             app.kubernetes.io/managed-by: Helm
 934             app.kubernetes.io/name: kong
 935             app.kubernetes.io/version: \"3.6\"
 936             helm.sh/chart: kong-2.38.0
 937         name: chartsnap-kong-post-upgrade-migrations
 938         namespace: default
 939     spec:
 940         backoffLimit: null
 941         template:
 942             metadata:
 943                 annotations:
 944                     kuma.io/service-account-token-volume: chartsnap-kong-token
 945                     sidecar.istio.io/inject: \"false\"
 946                 labels:
 947                     app.kubernetes.io/component: post-upgrade-migrations
 948                     app.kubernetes.io/instance: chartsnap
 949                     app.kubernetes.io/managed-by: Helm
 950                     app.kubernetes.io/name: kong
 951                     app.kubernetes.io/version: \"3.6\"
 952                     helm.sh/chart: kong-2.38.0
 953                 name: kong-post-upgrade-migrations
 954             spec:
 955                 automountServiceAccountToken: false
 956                 containers:
 957                     - args:
 958                         - kong
 959                         - migrations
 960                         - finish
 961                       env:
 962                         - name: CLIENT_ID
 963                           value: exampleId
 964                         - name: KONG_ADMIN_ACCESS_LOG
 965                           value: /dev/stdout
 966                         - name: KONG_ADMIN_API_URI
 967                           value: http://
 968                         - name: KONG_ADMIN_ERROR_LOG
 969                           value: /dev/stderr
 970                         - name: KONG_ADMIN_GUI_ACCESS_LOG
 971                           value: /dev/stdout
 972                         - name: KONG_ADMIN_GUI_API_URL
 973                           value: http://
 974                         - name: KONG_ADMIN_GUI_ERROR_LOG
 975                           value: /dev/stderr
 976                         - name: KONG_ADMIN_LISTEN
 977                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
 978                         - name: KONG_ANONYMOUS_REPORTS
 979                           value: \"off\"
 980                         - name: KONG_CLUSTER_LISTEN
 981                           value: \"off\"
 982                         - name: KONG_DATABASE
 983                           value: postgres
 984                         - name: KONG_KIC
 985                           value: \"on\"
 986                         - name: KONG_LUA_PACKAGE_PATH
 987                           value: /opt/?.lua;/opt/?/init.lua;;
 988                         - name: KONG_NGINX_WORKER_PROCESSES
 989                           value: \"2\"
 990                         - name: KONG_PG_HOST
 991                           value: chartsnap-postgresql
 992                         - name: KONG_PG_PASSWORD
 993                           valueFrom:
 994                             secretKeyRef:
 995                                 key: password
 996                                 name: chartsnap-postgresql
 997                         - name: KONG_PG_PORT
 998                           value: \"5432\"
 999                         - name: KONG_PORTAL_API_ACCESS_LOG
1000                           value: /dev/stdout
1001                         - name: KONG_PORTAL_API_ERROR_LOG
1002                           value: /dev/stderr
1003                         - name: KONG_PORT_MAPS
1004                           value: 80:8000, 443:8443
1005                         - name: KONG_PREFIX
1006                           value: /kong_prefix/
1007                         - name: KONG_PROXY_ACCESS_LOG
1008                           value: /dev/stdout
1009                         - name: KONG_PROXY_ERROR_LOG
1010                           value: /dev/stderr
1011                         - name: KONG_PROXY_LISTEN
1012                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
1013                         - name: KONG_PROXY_STREAM_ACCESS_LOG
1014                           value: /dev/stdout basic
1015                         - name: KONG_PROXY_STREAM_ERROR_LOG
1016                           value: /dev/stderr
1017                         - name: KONG_ROUTER_FLAVOR
1018                           value: traditional
1019                         - name: KONG_STATUS_ACCESS_LOG
1020                           value: \"off\"
1021                         - name: KONG_STATUS_ERROR_LOG
1022                           value: /dev/stderr
1023                         - name: KONG_STATUS_LISTEN
1024                           value: 0.0.0.0:8100, [::]:8100
1025                         - name: KONG_STREAM_LISTEN
1026                           value: \"off\"
1027                         - name: KONG_NGINX_DAEMON
1028                           value: \"off\"
1029                       image: kong:3.6
1030                       imagePullPolicy: IfNotPresent
1031                       name: kong-post-upgrade-migrations
1032                       resources: {}
1033                       securityContext:
1034                         allowPrivilegeEscalation: false
1035                         capabilities:
1036                             drop:
1037                                 - ALL
1038                         readOnlyRootFilesystem: true
1039                         runAsNonRoot: true
1040                         runAsUser: 1000
1041                         seccompProfile:
1042                             type: RuntimeDefault
1043                       volumeMounts:
1044                         - mountPath: /kong_prefix/
1045                           name: chartsnap-kong-prefix-dir
1046                         - mountPath: /tmp
1047                           name: chartsnap-kong-tmp
1048                 initContainers:
1049                     - command:
1050                         - bash
1051                         - /wait_postgres/wait.sh
1052                       env:
1053                         - name: CLIENT_ID
1054                           value: exampleId
1055                         - name: KONG_ADMIN_ACCESS_LOG
1056                           value: /dev/stdout
1057                         - name: KONG_ADMIN_API_URI
1058                           value: http://
1059                         - name: KONG_ADMIN_ERROR_LOG
1060                           value: /dev/stderr
1061                         - name: KONG_ADMIN_GUI_ACCESS_LOG
1062                           value: /dev/stdout
1063                         - name: KONG_ADMIN_GUI_API_URL
1064                           value: http://
1065                         - name: KONG_ADMIN_GUI_ERROR_LOG
1066                           value: /dev/stderr
1067                         - name: KONG_ADMIN_LISTEN
1068                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
1069                         - name: KONG_ANONYMOUS_REPORTS
1070                           value: \"off\"
1071                         - name: KONG_CLUSTER_LISTEN
1072                           value: \"off\"
1073                         - name: KONG_DATABASE
1074                           value: postgres
1075                         - name: KONG_KIC
1076                           value: \"on\"
1077                         - name: KONG_LUA_PACKAGE_PATH
1078                           value: /opt/?.lua;/opt/?/init.lua;;
1079                         - name: KONG_NGINX_WORKER_PROCESSES
1080                           value: \"2\"
1081                         - name: KONG_PG_HOST
1082                           value: chartsnap-postgresql
1083                         - name: KONG_PG_PASSWORD
1084                           valueFrom:
1085                             secretKeyRef:
1086                                 key: password
1087                                 name: chartsnap-postgresql
1088                         - name: KONG_PG_PORT
1089                           value: \"5432\"
1090                         - name: KONG_PORTAL_API_ACCESS_LOG
1091                           value: /dev/stdout
1092                         - name: KONG_PORTAL_API_ERROR_LOG
1093                           value: /dev/stderr
1094                         - name: KONG_PORT_MAPS
1095                           value: 80:8000, 443:8443
1096                         - name: KONG_PREFIX
1097                           value: /kong_prefix/
1098                         - name: KONG_PROXY_ACCESS_LOG
1099                           value: /dev/stdout
1100                         - name: KONG_PROXY_ERROR_LOG
1101                           value: /dev/stderr
1102                         - name: KONG_PROXY_LISTEN
1103                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
1104                         - name: KONG_PROXY_STREAM_ACCESS_LOG
1105                           value: /dev/stdout basic
1106                         - name: KONG_PROXY_STREAM_ERROR_LOG
1107                           value: /dev/stderr
1108                         - name: KONG_ROUTER_FLAVOR
1109                           value: traditional
1110                         - name: KONG_STATUS_ACCESS_LOG
1111                           value: \"off\"
1112                         - name: KONG_STATUS_ERROR_LOG
1113                           value: /dev/stderr
1114                         - name: KONG_STATUS_LISTEN
1115                           value: 0.0.0.0:8100, [::]:8100
1116                         - name: KONG_STREAM_LISTEN
1117                           value: \"off\"
1118                         - name: KONG_NGINX_DAEMON
1119                           value: \"off\"
1120                       image: kong:3.6
1121                       imagePullPolicy: IfNotPresent
1122                       name: wait-for-postgres
1123                       resources: {}
1124                       volumeMounts:
1125                         - mountPath: /wait_postgres
1126                           name: chartsnap-kong-bash-wait-for-postgres
1127                 restartPolicy: OnFailure
1128                 securityContext: {}
1129                 serviceAccountName: chartsnap-kong
1130                 volumes:
1131                     - emptyDir:
1132                         sizeLimit: 256Mi
1133                       name: chartsnap-kong-prefix-dir
1134                     - emptyDir:
1135                         sizeLimit: 1Gi
1136                       name: chartsnap-kong-tmp
1137                     - name: chartsnap-kong-token
1138                       projected:
1139                         sources:
1140                             - serviceAccountToken:
1141                                 expirationSeconds: 3607
1142                                 path: token
1143                             - configMap:
1144                                 items:
1145                                     - key: ca.crt
1146                                       path: ca.crt
1147                                 name: kube-root-ca.crt
1148                             - downwardAPI:
1149                                 items:
1150                                     - fieldRef:
1151                                         apiVersion: v1
1152                                         fieldPath: metadata.namespace
1153                                       path: namespace
1154                     - configMap:
1155                         defaultMode: 493
1156                         name: chartsnap-kong-bash-wait-for-postgres
1157                       name: chartsnap-kong-bash-wait-for-postgres
1158                     - name: webhook-cert
1159                       secret:
1160                         secretName: chartsnap-kong-validation-webhook-keypair
1161 - object:
1162     apiVersion: batch/v1
1163     kind: Job
1164     metadata:
1165         annotations:
1166             argocd.argoproj.io/hook: Sync
1167             argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
1168             helm.sh/hook: pre-upgrade
1169             helm.sh/hook-delete-policy: before-hook-creation
1170         labels:
1171             app.kubernetes.io/component: pre-upgrade-migrations
1172             app.kubernetes.io/instance: chartsnap
1173             app.kubernetes.io/managed-by: Helm
1174             app.kubernetes.io/name: kong
1175             app.kubernetes.io/version: \"3.6\"
1176             helm.sh/chart: kong-2.38.0
1177         name: chartsnap-kong-pre-upgrade-migrations
1178         namespace: default
1179     spec:
1180         backoffLimit: null
1181         template:
1182             metadata:
1183                 annotations:
1184                     kuma.io/service-account-token-volume: chartsnap-kong-token
1185                     sidecar.istio.io/inject: \"false\"
1186                 labels:
1187                     app.kubernetes.io/component: pre-upgrade-migrations
1188                     app.kubernetes.io/instance: chartsnap
1189                     app.kubernetes.io/managed-by: Helm
1190                     app.kubernetes.io/name: kong
1191                     app.kubernetes.io/version: \"3.6\"
1192                     helm.sh/chart: kong-2.38.0
1193                 name: kong-pre-upgrade-migrations
1194             spec:
1195                 automountServiceAccountToken: false
1196                 containers:
1197                     - args:
1198                         - kong
1199                         - migrations
1200                         - up
1201                       env:
1202                         - name: CLIENT_ID
1203                           value: exampleId
1204                         - name: KONG_ADMIN_ACCESS_LOG
1205                           value: /dev/stdout
1206                         - name: KONG_ADMIN_API_URI
1207                           value: http://
1208                         - name: KONG_ADMIN_ERROR_LOG
1209                           value: /dev/stderr
1210                         - name: KONG_ADMIN_GUI_ACCESS_LOG
1211                           value: /dev/stdout
1212                         - name: KONG_ADMIN_GUI_API_URL
1213                           value: http://
1214                         - name: KONG_ADMIN_GUI_ERROR_LOG
1215                           value: /dev/stderr
1216                         - name: KONG_ADMIN_LISTEN
1217                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
1218                         - name: KONG_ANONYMOUS_REPORTS
1219                           value: \"off\"
1220                         - name: KONG_CLUSTER_LISTEN
1221                           value: \"off\"
1222                         - name: KONG_DATABASE
1223                           value: postgres
1224                         - name: KONG_KIC
1225                           value: \"on\"
1226                         - name: KONG_LUA_PACKAGE_PATH
1227                           value: /opt/?.lua;/opt/?/init.lua;;
1228                         - name: KONG_NGINX_WORKER_PROCESSES
1229                           value: \"2\"
1230                         - name: KONG_PG_HOST
1231                           value: chartsnap-postgresql
1232                         - name: KONG_PG_PASSWORD
1233                           valueFrom:
1234                             secretKeyRef:
1235                                 key: password
1236                                 name: chartsnap-postgresql
1237                         - name: KONG_PG_PORT
1238                           value: \"5432\"
1239                         - name: KONG_PORTAL_API_ACCESS_LOG
1240                           value: /dev/stdout
1241                         - name: KONG_PORTAL_API_ERROR_LOG
1242                           value: /dev/stderr
1243                         - name: KONG_PORT_MAPS
1244                           value: 80:8000, 443:8443
1245                         - name: KONG_PREFIX
1246                           value: /kong_prefix/
1247                         - name: KONG_PROXY_ACCESS_LOG
1248                           value: /dev/stdout
1249                         - name: KONG_PROXY_ERROR_LOG
1250                           value: /dev/stderr
1251                         - name: KONG_PROXY_LISTEN
1252                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
1253                         - name: KONG_PROXY_STREAM_ACCESS_LOG
1254                           value: /dev/stdout basic
1255                         - name: KONG_PROXY_STREAM_ERROR_LOG
1256                           value: /dev/stderr
1257                         - name: KONG_ROUTER_FLAVOR
1258                           value: traditional
1259                         - name: KONG_STATUS_ACCESS_LOG
1260                           value: \"off\"
1261                         - name: KONG_STATUS_ERROR_LOG
1262                           value: /dev/stderr
1263                         - name: KONG_STATUS_LISTEN
1264                           value: 0.0.0.0:8100, [::]:8100
1265                         - name: KONG_STREAM_LISTEN
1266                           value: \"off\"
1267                         - name: KONG_NGINX_DAEMON
1268                           value: \"off\"
1269                       image: kong:3.6
1270                       imagePullPolicy: IfNotPresent
1271                       name: kong-upgrade-migrations
1272                       resources: {}
1273                       securityContext:
1274                         allowPrivilegeEscalation: false
1275                         capabilities:
1276                             drop:
1277                                 - ALL
1278                         readOnlyRootFilesystem: true
1279                         runAsNonRoot: true
1280                         runAsUser: 1000
1281                         seccompProfile:
1282                             type: RuntimeDefault
1283                       volumeMounts:
1284                         - mountPath: /kong_prefix/
1285                           name: chartsnap-kong-prefix-dir
1286                         - mountPath: /tmp
1287                           name: chartsnap-kong-tmp
1288                 initContainers:
1289                     - command:
1290                         - bash
1291                         - /wait_postgres/wait.sh
1292                       env:
1293                         - name: CLIENT_ID
1294                           value: exampleId
1295                         - name: KONG_ADMIN_ACCESS_LOG
1296                           value: /dev/stdout
1297                         - name: KONG_ADMIN_API_URI
1298                           value: http://
1299                         - name: KONG_ADMIN_ERROR_LOG
1300                           value: /dev/stderr
1301                         - name: KONG_ADMIN_GUI_ACCESS_LOG
1302                           value: /dev/stdout
1303                         - name: KONG_ADMIN_GUI_API_URL
1304                           value: http://
1305                         - name: KONG_ADMIN_GUI_ERROR_LOG
1306                           value: /dev/stderr
1307                         - name: KONG_ADMIN_LISTEN
1308                           value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
1309                         - name: KONG_ANONYMOUS_REPORTS
1310                           value: \"off\"
1311                         - name: KONG_CLUSTER_LISTEN
1312                           value: \"off\"
1313                         - name: KONG_DATABASE
1314                           value: postgres
1315                         - name: KONG_KIC
1316                           value: \"on\"
1317                         - name: KONG_LUA_PACKAGE_PATH
1318                           value: /opt/?.lua;/opt/?/init.lua;;
1319                         - name: KONG_NGINX_WORKER_PROCESSES
1320                           value: \"2\"
1321                         - name: KONG_PG_HOST
1322                           value: chartsnap-postgresql
1323                         - name: KONG_PG_PASSWORD
1324                           valueFrom:
1325                             secretKeyRef:
1326                                 key: password
1327                                 name: chartsnap-postgresql
1328                         - name: KONG_PG_PORT
1329                           value: \"5432\"
1330                         - name: KONG_PORTAL_API_ACCESS_LOG
1331                           value: /dev/stdout
1332                         - name: KONG_PORTAL_API_ERROR_LOG
1333                           value: /dev/stderr
1334                         - name: KONG_PORT_MAPS
1335                           value: 80:8000, 443:8443
1336                         - name: KONG_PREFIX
1337                           value: /kong_prefix/
1338                         - name: KONG_PROXY_ACCESS_LOG
1339                           value: /dev/stdout
1340                         - name: KONG_PROXY_ERROR_LOG
1341                           value: /dev/stderr
1342                         - name: KONG_PROXY_LISTEN
1343                           value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
1344                         - name: KONG_PROXY_STREAM_ACCESS_LOG
1345                           value: /dev/stdout basic
1346                         - name: KONG_PROXY_STREAM_ERROR_LOG
1347                           value: /dev/stderr
1348                         - name: KONG_ROUTER_FLAVOR
1349                           value: traditional
1350                         - name: KONG_STATUS_ACCESS_LOG
1351                           value: \"off\"
1352                         - name: KONG_STATUS_ERROR_LOG
1353                           value: /dev/stderr
1354                         - name: KONG_STATUS_LISTEN
1355                           value: 0.0.0.0:8100, [::]:8100
1356                         - name: KONG_STREAM_LISTEN
1357                           value: \"off\"
1358                         - name: KONG_NGINX_DAEMON
1359                           value: \"off\"
1360                       image: kong:3.6
1361                       imagePullPolicy: IfNotPresent
1362                       name: wait-for-postgres
1363                       resources: {}
1364                       volumeMounts:
1365                         - mountPath: /wait_postgres
1366                           name: chartsnap-kong-bash-wait-for-postgres
1367                 restartPolicy: OnFailure
1368                 securityContext: {}
1369                 serviceAccountName: chartsnap-kong
1370                 volumes:
1371                     - emptyDir:
1372                         sizeLimit: 256Mi
1373                       name: chartsnap-kong-prefix-dir
1374                     - emptyDir:
1375                         sizeLimit: 1Gi
1376                       name: chartsnap-kong-tmp
1377                     - name: chartsnap-kong-token
1378                       projected:
1379                         sources:
1380                             - serviceAccountToken:
1381                                 expirationSeconds: 3607
1382                                 path: token
1383                             - configMap:
1384                                 items:
1385                                     - key: ca.crt
1386                                       path: ca.crt
1387                                 name: kube-root-ca.crt
1388                             - downwardAPI:
1389                                 items:
1390                                     - fieldRef:
1391                                         apiVersion: v1
1392                                         fieldPath: metadata.namespace
1393                                       path: namespace
1394                     - configMap:
1395                         defaultMode: 493
1396                         name: chartsnap-kong-bash-wait-for-postgres
1397                       name: chartsnap-kong-bash-wait-for-postgres
1398                     - name: webhook-cert
1399                       secret:
1400                         secretName: chartsnap-kong-validation-webhook-keypair
1401 - object:
1402     apiVersion: networking.k8s.io/v1
1403     kind: Ingress
1404     metadata:
1405         labels:
1406             app.kubernetes.io/instance: chartsnap
1407             app.kubernetes.io/managed-by: Helm
1408             app.kubernetes.io/name: kong
1409             app.kubernetes.io/version: \"3.6\"
1410             helm.sh/chart: kong-2.38.0
1411         name: chartsnap-kong-proxy
1412         namespace: default
1413     spec:
1414         rules:
1415             - host: proxy.kong.example
1416               http:
1417                 paths:
1418                     - backend:
1419                         service:
1420                             name: chartsnap-kong-proxy
1421                             port:
1422                                 number: 443
1423                       path: /
1424                       pathType: ImplementationSpecific
1425 - object:
1426     apiVersion: rbac.authorization.k8s.io/v1
1427     kind: ClusterRole
1428     metadata:
1429         labels:
1430             app.kubernetes.io/instance: chartsnap
1431             app.kubernetes.io/managed-by: Helm
1432             app.kubernetes.io/name: kong
1433             app.kubernetes.io/version: \"3.6\"
1434             helm.sh/chart: kong-2.38.0
1435         name: chartsnap-kong
1436     rules:
1437         - apiGroups:
1438             - configuration.konghq.com
1439           resources:
1440             - kongupstreampolicies
1441           verbs:
1442             - get
1443             - list
1444             - watch
1445         - apiGroups:
1446             - configuration.konghq.com
1447           resources:
1448             - kongupstreampolicies/status
1449           verbs:
1450             - get
1451             - patch
1452             - update
1453         - apiGroups:
1454             - configuration.konghq.com
1455           resources:
1456             - kongconsumergroups
1457           verbs:
1458             - get
1459             - list
1460             - watch
1461         - apiGroups:
1462             - configuration.konghq.com
1463           resources:
1464             - kongconsumergroups/status
1465           verbs:
1466             - get
1467             - patch
1468             - update
1469         - apiGroups:
1470             - \"\"
1471           resources:
1472             - events
1473           verbs:
1474             - create
1475             - patch
1476         - apiGroups:
1477             - \"\"
1478           resources:
1479             - nodes
1480           verbs:
1481             - list
1482             - watch
1483         - apiGroups:
1484             - \"\"
1485           resources:
1486             - pods
1487           verbs:
1488             - get
1489             - list
1490             - watch
1491         - apiGroups:
1492             - \"\"
1493           resources:
1494             - secrets
1495           verbs:
1496             - list
1497             - watch
1498         - apiGroups:
1499             - \"\"
1500           resources:
1501             - services
1502           verbs:
1503             - get
1504             - list
1505             - watch
1506         - apiGroups:
1507             - \"\"
1508           resources:
1509             - services/status
1510           verbs:
1511             - get
1512             - patch
1513             - update
1514         - apiGroups:
1515             - configuration.konghq.com
1516           resources:
1517             - ingressclassparameterses
1518           verbs:
1519             - get
1520             - list
1521             - watch
1522         - apiGroups:
1523             - configuration.konghq.com
1524           resources:
1525             - kongconsumers
1526           verbs:
1527             - get
1528             - list
1529             - watch
1530         - apiGroups:
1531             - configuration.konghq.com
1532           resources:
1533             - kongconsumers/status
1534           verbs:
1535             - get
1536             - patch
1537             - update
1538         - apiGroups:
1539             - configuration.konghq.com
1540           resources:
1541             - kongingresses
1542           verbs:
1543             - get
1544             - list
1545             - watch
1546         - apiGroups:
1547             - configuration.konghq.com
1548           resources:
1549             - kongingresses/status
1550           verbs:
1551             - get
1552             - patch
1553             - update
1554         - apiGroups:
1555             - configuration.konghq.com
1556           resources:
1557             - kongplugins
1558           verbs:
1559             - get
1560             - list
1561             - watch
1562         - apiGroups:
1563             - configuration.konghq.com
1564           resources:
1565             - kongplugins/status
1566           verbs:
1567             - get
1568             - patch
1569             - update
1570         - apiGroups:
1571             - configuration.konghq.com
1572           resources:
1573             - tcpingresses
1574           verbs:
1575             - get
1576             - list
1577             - watch
1578         - apiGroups:
1579             - configuration.konghq.com
1580           resources:
1581             - tcpingresses/status
1582           verbs:
1583             - get
1584             - patch
1585             - update
1586         - apiGroups:
1587             - configuration.konghq.com
1588           resources:
1589             - udpingresses
1590           verbs:
1591             - get
1592             - list
1593             - watch
1594         - apiGroups:
1595             - configuration.konghq.com
1596           resources:
1597             - udpingresses/status
1598           verbs:
1599             - get
1600             - patch
1601             - update
1602         - apiGroups:
1603             - extensions
1604           resources:
1605             - ingresses
1606           verbs:
1607             - get
1608             - list
1609             - watch
1610         - apiGroups:
1611             - extensions
1612           resources:
1613             - ingresses/status
1614           verbs:
1615             - get
1616             - patch
1617             - update
1618         - apiGroups:
1619             - networking.k8s.io
1620           resources:
1621             - ingresses
1622           verbs:
1623             - get
1624             - list
1625             - watch
1626         - apiGroups:
1627             - networking.k8s.io
1628           resources:
1629             - ingresses/status
1630           verbs:
1631             - get
1632             - patch
1633             - update
1634         - apiGroups:
1635             - discovery.k8s.io
1636           resources:
1637             - endpointslices
1638           verbs:
1639             - get
1640             - list
1641             - watch
1642         - apiGroups:
1643             - configuration.konghq.com
1644           resources:
1645             - konglicenses
1646           verbs:
1647             - get
1648             - list
1649             - watch
1650         - apiGroups:
1651             - configuration.konghq.com
1652           resources:
1653             - konglicenses/status
1654           verbs:
1655             - get
1656             - patch
1657             - update
1658         - apiGroups:
1659             - configuration.konghq.com
1660           resources:
1661             - kongvaults
1662           verbs:
1663             - get
1664             - list
1665             - watch
1666         - apiGroups:
1667             - configuration.konghq.com
1668           resources:
1669             - kongvaults/status
1670           verbs:
1671             - get
1672             - patch
1673             - update
1674         - apiGroups:
1675             - configuration.konghq.com
1676           resources:
1677             - kongclusterplugins
1678           verbs:
1679             - get
1680             - list
1681             - watch
1682         - apiGroups:
1683             - configuration.konghq.com
1684           resources:
1685             - kongclusterplugins/status
1686           verbs:
1687             - get
1688             - patch
1689             - update
1690         - apiGroups:
1691             - apiextensions.k8s.io
1692           resources:
1693             - customresourcedefinitions
1694           verbs:
1695             - list
1696             - watch
1697         - apiGroups:
1698             - networking.k8s.io
1699           resources:
1700             - ingressclasses
1701           verbs:
1702             - get
1703             - list
1704             - watch
1705 - object:
1706     apiVersion: rbac.authorization.k8s.io/v1
1707     kind: ClusterRoleBinding
1708     metadata:
1709         labels:
1710             app.kubernetes.io/instance: chartsnap
1711             app.kubernetes.io/managed-by: Helm
1712             app.kubernetes.io/name: kong
1713             app.kubernetes.io/version: \"3.6\"
1714             helm.sh/chart: kong-2.38.0
1715         name: chartsnap-kong
1716     roleRef:
1717         apiGroup: rbac.authorization.k8s.io
1718         kind: ClusterRole
1719         name: chartsnap-kong
1720     subjects:
1721         - kind: ServiceAccount
1722           name: chartsnap-kong
1723           namespace: default
1724 - object:
1725     apiVersion: rbac.authorization.k8s.io/v1
1726     kind: Role
1727     metadata:
1728         labels:
1729             app.kubernetes.io/instance: chartsnap
1730             app.kubernetes.io/managed-by: Helm
1731             app.kubernetes.io/name: kong
1732             app.kubernetes.io/version: \"3.6\"
1733             helm.sh/chart: kong-2.38.0
1734         name: chartsnap-kong
1735         namespace: default
1736     rules:
1737         - apiGroups:
1738             - \"\"
1739           resources:
1740             - configmaps
1741             - pods
1742             - secrets
1743             - namespaces
1744           verbs:
1745             - get
1746         - apiGroups:
1747             - \"\"
1748           resourceNames:
1749             - kong-ingress-controller-leader-kong-kong
1750           resources:
1751             - configmaps
1752           verbs:
1753             - get
1754             - update
1755         - apiGroups:
1756             - \"\"
1757           resources:
1758             - configmaps
1759           verbs:
1760             - create
1761         - apiGroups:
1762             - \"\"
1763             - coordination.k8s.io
1764           resources:
1765             - configmaps
1766             - leases
1767           verbs:
1768             - get
1769             - list
1770             - watch
1771             - create
1772             - update
1773             - patch
1774             - delete
1775         - apiGroups:
1776             - \"\"
1777           resources:
1778             - events
1779           verbs:
1780             - create
1781             - patch
1782         - apiGroups:
1783             - \"\"
1784           resources:
1785             - services
1786           verbs:
1787             - get
1788 - object:
1789     apiVersion: rbac.authorization.k8s.io/v1
1790     kind: RoleBinding
1791     metadata:
1792         labels:
1793             app.kubernetes.io/instance: chartsnap
1794             app.kubernetes.io/managed-by: Helm
1795             app.kubernetes.io/name: kong
1796             app.kubernetes.io/version: \"3.6\"
1797             helm.sh/chart: kong-2.38.0
1798         name: chartsnap-kong
1799         namespace: default
1800     roleRef:
1801         apiGroup: rbac.authorization.k8s.io
1802         kind: Role
1803         name: chartsnap-kong
1804     subjects:
1805         - kind: ServiceAccount
1806           name: chartsnap-kong
1807           namespace: default
1808 - object:
1809     apiVersion: v1
1810     data:
1811         wait.sh: |
1812             until timeout 2 bash -c \"9<>/dev/tcp/${KONG_PG_HOST}/${KONG_PG_PORT}\"
1813               do echo \"waiting for db - trying ${KONG_PG_HOST}:${KONG_PG_PORT}\"
1814               sleep 2
1815             done
1816     kind: ConfigMap
1817     metadata:
1818         labels:
1819             app.kubernetes.io/instance: chartsnap
1820             app.kubernetes.io/managed-by: Helm
1821             app.kubernetes.io/name: kong
1822             app.kubernetes.io/version: \"3.6\"
1823             helm.sh/chart: kong-2.38.0
1824         name: chartsnap-kong-bash-wait-for-postgres
1825         namespace: default
1826 - object:
1827     apiVersion: v1
1828     data:
1829         tls.crt: '###DYNAMIC_FIELD###'
1830         tls.key: '###DYNAMIC_FIELD###'
1831     kind: Secret
1832     metadata:
1833         labels:
1834             app.kubernetes.io/instance: chartsnap
1835             app.kubernetes.io/managed-by: Helm
1836             app.kubernetes.io/name: kong
1837             app.kubernetes.io/version: \"3.6\"
1838             helm.sh/chart: kong-2.38.0
1839         name: chartsnap-kong-validation-webhook-ca-keypair
1840         namespace: default
1841     type: kubernetes.io/tls
1842 - object:
1843     apiVersion: v1
1844     data:
1845         tls.crt: '###DYNAMIC_FIELD###'
1846         tls.key: '###DYNAMIC_FIELD###'
1847     kind: Secret
1848     metadata:
1849         labels:
1850             app.kubernetes.io/instance: chartsnap
1851             app.kubernetes.io/managed-by: Helm
1852             app.kubernetes.io/name: kong
1853             app.kubernetes.io/version: \"3.6\"
1854             helm.sh/chart: kong-2.38.0
1855         name: chartsnap-kong-validation-webhook-keypair
1856         namespace: default
1857     type: kubernetes.io/tls
1858 - object:
1859     apiVersion: v1
1860     data:
1861         password: a29uZw==
1862         postgres-password: '###DYNAMIC_FIELD###'
1863     kind: Secret
1864     metadata:
1865         labels:
1866             app.kubernetes.io/instance: chartsnap
1867             app.kubernetes.io/managed-by: Helm
1868             app.kubernetes.io/name: postgresql
1869             helm.sh/chart: postgresql-11.9.13
1870         name: chartsnap-postgresql
1871         namespace: default
1872     type: Opaque
1873 - object:
1874     apiVersion: v1
1875     kind: Service
1876     metadata:
1877         labels:
1878             app.kubernetes.io/instance: chartsnap
1879             app.kubernetes.io/managed-by: Helm
1880             app.kubernetes.io/name: kong
1881             app.kubernetes.io/version: \"3.6\"
1882             helm.sh/chart: kong-2.38.0
1883         name: chartsnap-kong-manager
1884         namespace: default
1885     spec:
1886         ports:
1887             - name: kong-manager
1888               port: 8002
1889               protocol: TCP
1890               targetPort: 8002
1891             - name: kong-manager-tls
1892               port: 8445
1893               protocol: TCP
1894               targetPort: 8445
1895         selector:
1896             app.kubernetes.io/component: app
1897             app.kubernetes.io/instance: chartsnap
1898             app.kubernetes.io/name: kong
1899         type: NodePort
1900 - object:
1901     apiVersion: v1
1902     kind: Service
1903     metadata:
1904         labels:
1905             app.kubernetes.io/instance: chartsnap
1906             app.kubernetes.io/managed-by: Helm
1907             app.kubernetes.io/name: kong
1908             app.kubernetes.io/version: \"3.6\"
1909             enable-metrics: \"true\"
1910             helm.sh/chart: kong-2.38.0
1911         name: chartsnap-kong-proxy
1912         namespace: default
1913     spec:
1914         ports:
1915             - name: kong-proxy
1916               port: 80
1917               protocol: TCP
1918               targetPort: 8000
1919             - name: kong-proxy-tls
1920               port: 443
1921               protocol: TCP
1922               targetPort: 8443
1923         selector:
1924             app.kubernetes.io/component: app
1925             app.kubernetes.io/instance: chartsnap
1926             app.kubernetes.io/name: kong
1927         type: LoadBalancer
1928 - object:
1929     apiVersion: v1
1930     kind: Service
1931     metadata:
1932         labels:
1933             app.kubernetes.io/instance: chartsnap
1934             app.kubernetes.io/managed-by: Helm
1935             app.kubernetes.io/name: kong
1936             app.kubernetes.io/version: \"3.6\"
1937             helm.sh/chart: kong-2.38.0
1938         name: chartsnap-kong-validation-webhook
1939         namespace: default
1940     spec:
1941         ports:
1942             - name: webhook
1943               port: 443
1944               protocol: TCP
1945               targetPort: webhook
1946         selector:
1947             app.kubernetes.io/component: app
1948             app.kubernetes.io/instance: chartsnap
1949             app.kubernetes.io/managed-by: Helm
1950             app.kubernetes.io/name: kong
1951             app.kubernetes.io/version: \"3.6\"
1952             helm.sh/chart: kong-2.38.0
1953 - object:
1954     apiVersion: v1
1955     kind: Service
1956     metadata:
1957         annotations: null
1958         labels:
1959             app.kubernetes.io/component: primary
1960             app.kubernetes.io/instance: chartsnap
1961             app.kubernetes.io/managed-by: Helm
1962             app.kubernetes.io/name: postgresql
1963             helm.sh/chart: postgresql-11.9.13
1964         name: chartsnap-postgresql
1965         namespace: default
1966     spec:
1967         ports:
1968             - name: tcp-postgresql
1969               nodePort: null
1970               port: 5432
1971               targetPort: tcp-postgresql
1972         selector:
1973             app.kubernetes.io/component: primary
1974             app.kubernetes.io/instance: chartsnap
1975             app.kubernetes.io/name: postgresql
1976         sessionAffinity: None
1977         type: ClusterIP
1978 - object:
1979     apiVersion: v1
1980     kind: Service
1981     metadata:
1982         labels:
1983             app.kubernetes.io/component: primary
1984             app.kubernetes.io/instance: chartsnap
1985             app.kubernetes.io/managed-by: Helm
1986             app.kubernetes.io/name: postgresql
1987             helm.sh/chart: postgresql-11.9.13
1988             service.alpha.kubernetes.io/tolerate-unready-endpoints: \"true\"
1989         name: chartsnap-postgresql-hl
1990         namespace: default
1991     spec:
1992         clusterIP: None
1993         ports:
1994             - name: tcp-postgresql
1995               port: 5432
1996               targetPort: tcp-postgresql
1997         publishNotReadyAddresses: true
1998         selector:
1999             app.kubernetes.io/component: primary
2000             app.kubernetes.io/instance: chartsnap
2001             app.kubernetes.io/name: postgresql
2002         type: ClusterIP
2003 - object:
2004     apiVersion: v1
2005     kind: ServiceAccount
2006     metadata:
2007         labels:
2008             app.kubernetes.io/instance: chartsnap
2009             app.kubernetes.io/managed-by: Helm
2010             app.kubernetes.io/name: kong
2011             app.kubernetes.io/version: \"3.6\"
2012             helm.sh/chart: kong-2.38.0
2013         name: chartsnap-kong
2014         namespace: default
2015 """