apiVersion: apps/v1
kind: Deployment
metadata:
  name: grafana-operator
  labels:
    app.kubernetes.io/name: grafana-operator
    helm.sh/chart: grafana-operator-2.2.3
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: grafana-operator
      app.kubernetes.io/instance: grafana-operator
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/name: grafana-operator
        helm.sh/chart: grafana-operator-2.2.3
        app.kubernetes.io/instance: grafana-operator
        app.kubernetes.io/managed-by: Helm
    spec:

      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchLabels:
                    app.kubernetes.io/name: grafana-operator
                    app.kubernetes.io/instance: grafana-operator
                    app.kubernetes.io/component: grafana-operator
                namespaces:
                  - "applications"
                topologyKey: kubernetes.io/hostname
              weight: 1
      serviceAccountName: grafana-operator
      securityContext:
        fsGroup: 1001
        runAsGroup: 1001
        runAsNonRoot: true
        runAsUser: 1001
        supplementalGroups: []
      containers:
        - name: grafana-operator
          image: bitnami/grafana-operator:4.1.1-debian-10-r35
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080
              name: metrics
              protocol: TCP
          command:
            - grafana-operator
          args:
            - --grafana-image=bitnami/grafana
            - --grafana-image-tag=8.3.6-debian-10-r3
            - --grafana-plugins-init-container-image=bitnami/grafana
            - --grafana-plugins-init-container-tag=8.3.6-debian-10-r3
            - --leader-elect=True
            - --scan-all=True
          securityContext:
            allowPrivilegeEscalation: false
            privileged: false
            readOnlyRootFilesystem: false
            runAsGroup: 1001
            runAsNonRoot: true
            runAsUser: 1001
          livenessProbe:
            httpGet:
              path: /healthz
              port: 8081
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 1
            successThreshold: 1
            failureThreshold: 3
          readinessProbe:
            httpGet:
              path: /metrics
              port: metrics
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 1
            successThreshold: 1
            failureThreshold: 3
          startupProbe:
            httpGet:
              path: /metrics
              port: metrics
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 1
            successThreshold: 1
            failureThreshold: 3
          env:
            - name: TEMPLATE_PATH
              value: /usr/local/bin/templates
            - name: WATCH_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: OPERATOR_NAME
              value: grafana-operator
          envFrom: