---
# Source: crds/components.yaml
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: components.dapr.io
  labels:
    app.kubernetes.io/part-of: "dapr"
spec:
  group: dapr.io
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: Component describes an Dapr component type
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          auth:
            description: Auth represents authentication details for the component
            properties:
              secretStore:
                type: string
            required:
            - secretStore
            type: object
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          scopes:
            items:
              type: string
            type: array
          spec:
            description: ComponentSpec is the spec for a component
            properties:
              initTimeout:
                type: string
              ignoreErrors:
                type: boolean
              metadata:
                items:
                  description: MetadataItem is a name/value pair for a metadata
                  properties:
                    name:
                      type: string
                    secretKeyRef:
                      description: SecretKeyRef is a reference to a secret holding
                        the value for the metadata item. Name is the secret name,
                        and key is the field in the secret.
                      properties:
                        key:
                          type: string
                        name:
                          type: string
                      required:
                      - key
                      - name
                      type: object
                    value:
                      x-kubernetes-preserve-unknown-fields: true
                  required:
                  - name
                  type: object
                type: array
              type:
                type: string
              version:
                type: string
            required:
            - metadata
            - type
            - version
            type: object
        type: object
    served: true
    storage: true
  names:
    kind: Component
    plural: components
    singular: component
    categories:
    - all
    - dapr
  scope: Namespaced

---
# Source: crds/configuration.yaml

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.9.2
  creationTimestamp: null
  name: configurations.dapr.io
  labels:
    app.kubernetes.io/part-of: "dapr"
spec:
  group: dapr.io
  names:
    kind: Configuration
    listKind: ConfigurationList
    plural: configurations
    singular: configuration
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: Configuration describes an Dapr configuration setting.
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          spec:
            description: ConfigurationSpec is the spec for an configuration.
            properties:
              accessControl:
                description: AccessControlSpec is the spec object in ConfigurationSpec.
                properties:
                  defaultAction:
                    type: string
                  policies:
                    items:
                      description: AppPolicySpec defines the policy data structure
                        for each app.
                      properties:
                        appId:
                          type: string
                        defaultAction:
                          type: string
                        namespace:
                          type: string
                        operations:
                          items:
                            description: AppOperationAction defines the data structure
                              for each app operation.
                            properties:
                              action:
                                type: string
                              httpVerb:
                                items:
                                  type: string
                                type: array
                              name:
                                type: string
                            required:
                            - action
                            - name
                            type: object
                          type: array
                        trustDomain:
                          type: string
                      required:
                      - appId
                      type: object
                    type: array
                  trustDomain:
                    type: string
                type: object
              api:
                description: APISpec describes the configuration for Dapr APIs.
                properties:
                  allowed:
                    items:
                      description: APIAccessRule describes an access rule for allowing
                        a Dapr API to be enabled and accessible by an app.
                      properties:
                        name:
                          type: string
                        protocol:
                          type: string
                        version:
                          type: string
                      required:
                      - name
                      - version
                      type: object
                    type: array
                type: object
              appHttpPipeline:
                description: PipelineSpec defines the middleware pipeline.
                properties:
                  handlers:
                    items:
                      description: HandlerSpec defines a request handlers.
                      properties:
                        name:
                          type: string
                        selector:
                          description: SelectorSpec selects target services to which
                            the handler is to be applied.
                          properties:
                            fields:
                              items:
                                description: SelectorField defines a selector fields.
                                properties:
                                  field:
                                    type: string
                                  value:
                                    type: string
                                required:
                                - field
                                - value
                                type: object
                              type: array
                          required:
                          - fields
                          type: object
                        type:
                          type: string
                      required:
                      - name
                      - type
                      type: object
                    type: array
                required:
                - handlers
                type: object
              components:
                description: ComponentsSpec describes the configuration for Dapr components
                properties:
                  deny:
                    description: Denylist of component types that cannot be instantiated
                    items:
                      type: string
                    type: array
                type: object
              features:
                items:
                  description: FeatureSpec defines the features that are enabled/disabled.
                  properties:
                    enabled:
                      type: boolean
                    name:
                      type: string
                  required:
                  - enabled
                  - name
                  type: object
                type: array
              httpPipeline:
                description: PipelineSpec defines the middleware pipeline.
                properties:
                  handlers:
                    items:
                      description: HandlerSpec defines a request handlers.
                      properties:
                        name:
                          type: string
                        selector:
                          description: SelectorSpec selects target services to which
                            the handler is to be applied.
                          properties:
                            fields:
                              items:
                                description: SelectorField defines a selector fields.
                                properties:
                                  field:
                                    type: string
                                  value:
                                    type: string
                                required:
                                - field
                                - value
                                type: object
                              type: array
                          required:
                          - fields
                          type: object
                        type:
                          type: string
                      required:
                      - name
                      - type
                      type: object
                    type: array
                required:
                - handlers
                type: object
              logging:
                description: LoggingSpec defines the configuration for logging.
                properties:
                  apiLogging:
                    description: Configure API logging.
                    properties:
                      enabled:
                        description: Default value for enabling API logging. Sidecars can always override this by setting `--enable-api-logging` to true or false explicitly. The default value is false.
                        type: boolean
                      obfuscateURLs:
                        description: 'When enabled, obfuscates the values of URLs in HTTP API logs, logging the route name rather than the full path being invoked, which could contain PII. Default: false. This option has no effect if API logging is disabled.'
                        type: boolean
                      omitHealthChecks:
                        description: 'If true, health checks are not reported in API logs. Default: false. This option has no effect if API logging is disabled.'
                        type: boolean
                    type: object
                type: object
              metric:
                default:
                  enabled: true
                description: MetricSpec defines metrics configuration.
                properties:
                  enabled:
                    type: boolean
                  rules:
                    items:
                      description: MetricsRule defines configuration options for a
                        metric.
                      properties:
                        labels:
                          items:
                            description: MetricsLabel defines an object that allows
                              to set regex expressions for a label.
                            properties:
                              name:
                                type: string
                              regex:
                                additionalProperties:
                                  type: string
                                type: object
                            required:
                            - name
                            - regex
                            type: object
                          type: array
                        name:
                          type: string
                      required:
                      - labels
                      - name
                      type: object
                    type: array
                required:
                - enabled
                type: object
              metrics:
                default:
                  enabled: true
                description: MetricSpec defines metrics configuration.
                properties:
                  enabled:
                    type: boolean
                  rules:
                    items:
                      description: MetricsRule defines configuration options for a
                        metric.
                      properties:
                        labels:
                          items:
                            description: MetricsLabel defines an object that allows
                              to set regex expressions for a label.
                            properties:
                              name:
                                type: string
                              regex:
                                additionalProperties:
                                  type: string
                                type: object
                            required:
                            - name
                            - regex
                            type: object
                          type: array
                        name:
                          type: string
                      required:
                      - labels
                      - name
                      type: object
                    type: array
                required:
                - enabled
                type: object
              mtls:
                description: MTLSSpec defines mTLS configuration.
                properties:
                  allowedClockSkew:
                    type: string
                  enabled:
                    type: boolean
                  workloadCertTTL:
                    type: string
                required:
                - enabled
                type: object
              nameResolution:
                description: NameResolutionSpec is the spec for name resolution configuration.
                properties:
                  component:
                    type: string
                  configuration:
                    description: DynamicValue is a dynamic value struct for the component.metadata
                      pair value.
                    type: object
                    x-kubernetes-preserve-unknown-fields: true
                  version:
                    type: string
                required:
                - component
                - configuration
                - version
                type: object
              secrets:
                description: SecretsSpec is the spec for secrets configuration.
                properties:
                  scopes:
                    items:
                      description: SecretsScope defines the scope for secrets.
                      properties:
                        allowedSecrets:
                          items:
                            type: string
                          type: array
                        defaultAccess:
                          type: string
                        deniedSecrets:
                          items:
                            type: string
                          type: array
                        storeName:
                          type: string
                      required:
                      - storeName
                      type: object
                    type: array
                required:
                - scopes
                type: object
              tracing:
                description: TracingSpec defines distributed tracing configuration.
                properties:
                  otel:
                    description: OtelSpec defines Otel exporter configurations.
                    properties:
                      endpointAddress:
                        type: string
                      isSecure:
                        type: boolean
                      protocol:
                        type: string
                    required:
                    - endpointAddress
                    - isSecure
                    - protocol
                    type: object
                  samplingRate:
                    type: string
                  stdout:
                    type: boolean
                  zipkin:
                    description: ZipkinSpec defines Zipkin trace configurations.
                    properties:
                      endpointAddress:
                        type: string
                    required:
                    - endpointAddress
                    type: object
                required:
                - samplingRate
                type: object
            type: object
        type: object
    served: true
    storage: true

---
# Source: crds/resiliency.yaml
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.5.0
  creationTimestamp: null
  name: resiliencies.dapr.io
  labels:
    app.kubernetes.io/part-of: "dapr"
spec:
  group: dapr.io
  names:
    kind: Resiliency
    listKind: ResiliencyList
    plural: resiliencies
    singular: resiliency
    categories:
    - dapr
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          scopes:
            items:
              type: string
            type: array
          spec:
            properties:
              policies:
                properties:
                  circuitBreakers:
                    additionalProperties:
                      properties:
                        interval:
                          type: string
                        maxRequests:
                          type: integer
                        timeout:
                          type: string
                        trip:
                          type: string
                      type: object
                    type: object
                  retries:
                    additionalProperties:
                      properties:
                        duration:
                          type: string
                        maxInterval:
                          type: string
                        maxRetries:
                          type: integer
                        policy:
                          type: string
                      type: object
                    type: object
                  timeouts:
                    additionalProperties:
                      type: string
                    type: object
                type: object
              targets:
                properties:
                  actors:
                    additionalProperties:
                      properties:
                        circuitBreaker:
                          type: string
                        circuitBreakerCacheSize:
                          type: integer
                        circuitBreakerScope:
                          type: string
                        retry:
                          type: string
                        timeout:
                          type: string
                      type: object
                    type: object
                  apps:
                    additionalProperties:
                      properties:
                        circuitBreaker:
                          type: string
                        circuitBreakerCacheSize:
                          type: integer
                        retry:
                          type: string
                        timeout:
                          type: string
                      type: object
                    type: object
                  components:
                    additionalProperties:
                      properties:
                        inbound:
                          properties:
                            circuitBreaker:
                              type: string
                            retry:
                              type: string
                            timeout:
                              type: string
                          type: object
                        outbound:
                          properties:
                            circuitBreaker:
                              type: string
                            retry:
                              type: string
                            timeout:
                              type: string
                          type: object
                      type: object
                    type: object
                type: object
            required:
            - policies
            - targets
            type: object
        type: object
    served: true
    storage: true


---
# Source: crds/subscription.yaml
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: subscriptions.dapr.io
  labels:
    app.kubernetes.io/part-of: "dapr"
spec:
  group: dapr.io
  conversion:
    strategy: Webhook
    webhook:
      clientConfig:
        service:
          namespace: replaceme # Patched by post-install webhook
          name: dapr-webhook
          path: /convert
        #caBundle: Patched by post-install webhook
      conversionReviewVersions:
      - v1
      - v2alpha1
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: Subscription describes an pub/sub event subscription.
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          scopes:
            items:
              type: string
            type: array
          spec:
            description: SubscriptionSpec is the spec for an event subscription.
            properties:
              pubsubname:
                type: string
              route:
                type: string
              topic:
                type: string
              deadLetterTopic:
                type: string
              bulkSubscribe:
                description: Represents bulk subscribe properies
                properties:
                  enabled: 
                    type: boolean
                  maxMessagesCount:
                    type: integer
                  maxAwaitDurationMs:
                    type: integer
                required:
                  - enabled
                type: object
              metadata:
                additionalProperties:
                  type: string
                type: object
            required:
            - pubsubname
            - route
            - topic
            type: object
        type: object
    served: true
    storage: false
  - name: v2alpha1
    schema:
      openAPIV3Schema:
        description: Subscription describes an pub/sub event subscription.
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          scopes:
            items:
              type: string
            type: array
          spec:
            description: SubscriptionSpec is the spec for an event subscription.
            properties:
              metadata:
                additionalProperties:
                  type: string
                description: The optional metadata to provide the subscription.
                type: object
              pubsubname:
                description: The PubSub component name.
                type: string
              routes:
                description: The Routes configuration for this topic.
                properties:
                  default:
                    type: string
                  rules:
                    description: The list of rules for this topic.
                    items:
                      description: Rule is used to specify the condition for sending
                        a message to a specific path.
                      properties:
                        match:
                          description: The optional CEL expression used to match the
                            event. If the match is not specified, then the route is
                            considered the default. The rules are tested in the order
                            specified, so they should be define from most-to-least
                            specific. The default route should appear last in the
                            list.
                          type: string
                        path:
                          description: The path for events that match this rule.
                          type: string
                      required:
                      - match
                      - path
                      type: object
                    type: array
                type: object
              topic:
                description: The topic name to subscribe to.
                type: string
              deadLetterTopic:
                description: The optional dead letter queue for this topic to send events to.
                type: string
              bulkSubscribe:
                description: Represents bulk subscribe properies
                properties:
                  enabled: 
                    type: boolean
                  maxMessagesCount:
                    type: integer
                  maxAwaitDurationMs:
                    type: integer
                required:
                  - enabled
                type: object
            required:
            - pubsubname
            - routes
            - topic
            type: object
        type: object
    served: true
    storage: true
  names:
    kind: Subscription
    listKind: SubscriptionList
    plural: subscriptions
    singular: subscription
    categories:
    - all
    - dapr
  scope: Namespaced

---
# Source: dapr/charts/dapr_rbac/templates/dashboard.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dapr-dashboard
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
---
# Source: dapr/charts/dapr_rbac/templates/injector.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dapr-injector
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
---
# Source: dapr/charts/dapr_rbac/templates/operator.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dapr-operator
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
---
# Source: dapr/charts/dapr_rbac/templates/placement.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dapr-placement
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
---
# Source: dapr/charts/dapr_rbac/templates/sentry.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
---
# Source: dapr/charts/dapr_operator/templates/dapr_operator_deployment.yaml
apiVersion: v1
kind: Secret
metadata:
  name: dapr-webhook-cert
  labels:
    app: dapr-operator
    app.kubernetes.io/component: operator
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
data:
  tls.crt: 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
  

  tls.key: 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
---
# Source: dapr/charts/dapr_operator/templates/dapr_operator_deployment.yaml
apiVersion: v1
kind: Secret
metadata:
  name: dapr-webhook-ca
  labels:
    app: dapr-operator
    app.kubernetes.io/component: operator
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
data:
  caBundle: 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
---
# Source: dapr/charts/dapr_sentry/templates/dapr_sentry_deployment.yaml
apiVersion: v1
kind: Secret
metadata:
  name: dapr-trust-bundle
  labels:
    app: dapr-sentry
    app.kubernetes.io/component: sentry
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
data:
---
# Source: dapr/charts/dapr_sidecar_injector/templates/dapr_sidecar_injector_webhook_config.yaml
apiVersion: v1
kind: Secret
metadata:
  name: dapr-sidecar-injector-cert
  labels:
    app: dapr-sidecar-injector
    app.kubernetes.io/component: sidecar-injector
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
data:
  tls.crt: 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
  

  tls.key: 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
---
# Source: dapr/charts/dapr_rbac/templates/dashboard.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-dashboard
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
- apiGroups: [""]
  resources: ["pods", "pods/log", "namespaces"]
  verbs: ["get", "list"]
- apiGroups: ["apps"]
  resources: ["deployments", "components", "configurations"]
  verbs: ["get", "list"]
- apiGroups: ["dapr.io"]
  resources: ["components", "configurations"]
  verbs: ["get", "list"]
---
# Source: dapr/charts/dapr_rbac/templates/injector.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-injector
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: [""]
    resources: ["serviceaccounts"]
    verbs: ["get", "list"]
  - apiGroups: ["dapr.io"]
    resources: ["configurations", "components"]
    verbs: [ "get", "list"]
---
# Source: dapr/charts/dapr_rbac/templates/operator.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-operator-admin
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: ["apiextensions.k8s.io"]
    resources: ["customresourcedefinitions"]
    verbs: ["get", "patch"]
  - apiGroups: ["apps"]
    resources: ["deployments", "deployments/finalizers"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources: ["statefulsets", "statefulsets/finalizers"]
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources: ["pods"]
    verbs: ["get", "list", "delete"]
  - apiGroups: [""]
    resources: ["services","services/finalizers"]
    verbs: ["get", "list", "watch", "update", "create"]
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["dapr.io"]
    resources: ["components", "configurations", "subscriptions", "resiliencies"]
    verbs: [ "get", "list", "watch"]
---
# Source: dapr/charts/dapr_rbac/templates/placement.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-placement
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules: []
---
# Source: dapr/charts/dapr_rbac/templates/sentry.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: ["authentication.k8s.io"]
    resources: ["tokenreviews"]
    verbs: ["create"]
  - apiGroups: ["dapr.io"]
    resources: ["configurations"]
    verbs: ["list"]
---
# Source: dapr/charts/dapr_rbac/templates/dashboard.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-dashboard
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-dashboard
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dapr-dashboard
---
# Source: dapr/charts/dapr_rbac/templates/injector.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-injector
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-injector
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dapr-injector
---
# Source: dapr/charts/dapr_rbac/templates/operator.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-operator-admin
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-operator
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dapr-operator-admin
---
# Source: dapr/charts/dapr_rbac/templates/placement.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-placement
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-placement
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dapr-placement
---
# Source: dapr/charts/dapr_rbac/templates/sentry.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-sentry
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: dapr-sentry
---
# Source: dapr/charts/dapr_rbac/templates/injector.yaml
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-injector
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get"]
    resourceNames: ["dapr-trust-bundle"]
---
# Source: dapr/charts/dapr_rbac/templates/operator.yaml
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-operator
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: ["coordination.k8s.io"]
    resources: ["leases"]
    verbs: ["get", "list", "watch", "update", "create"]
    resourceNames: ["operator.dapr.io", "webhooks.dapr.io"]
  - apiGroups: [""]
    resources: ["configmaps"]
    verbs: ["get", "list", "watch", "update", "create"]
    resourceNames: ["operator.dapr.io", "webhooks.dapr.io"]
# We cannot use resourceNames for create because Kubernetes doesn't nessarily
# know resource names at authorization time.
  - apiGroups: ["coordination.k8s.io"]
    resources: ["leases"]
    verbs: ["create"]
  - apiGroups: [""]
    resources: ["configmaps", "events"]
    verbs: ["create"]
---
# Source: dapr/charts/dapr_rbac/templates/secret-reader.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: secret-reader
  namespace: default
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
- apiGroups: [""]
  resources: ["secrets"]
  verbs: ["get"]
---
# Source: dapr/charts/dapr_rbac/templates/sentry.yaml
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
rules:
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "update"]
    resourceNames: ["dapr-trust-bundle"]
---
# Source: dapr/charts/dapr_rbac/templates/injector.yaml
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-injector
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-injector
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dapr-injector
---
# Source: dapr/charts/dapr_rbac/templates/operator.yaml
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-operator
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-operator
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dapr-operator
---
# Source: dapr/charts/dapr_rbac/templates/secret-reader.yaml
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-secret-reader
  namespace: default
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: default
roleRef:
  kind: Role
  name: secret-reader
  apiGroup: rbac.authorization.k8s.io
---
# Source: dapr/charts/dapr_rbac/templates/sentry.yaml
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: rbac
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
subjects:
- kind: ServiceAccount
  name: dapr-sentry
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: dapr-sentry
---
# Source: dapr/charts/dapr_dashboard/templates/dapr_dashboard_service.yaml
kind: Service
apiVersion: v1
metadata:
  name: dapr-dashboard
  labels:
    app.kubernetes.io/component: dashboard
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
  annotations:
spec:
  selector:
    app: dapr-dashboard
  ports:
  - protocol: TCP
    port: 8080
    targetPort: 8080
  type: ClusterIP
---
# Source: dapr/charts/dapr_operator/templates/dapr_operator_service.yaml
kind: Service
apiVersion: v1
metadata:
  name: dapr-api
  labels:
    app.kubernetes.io/component: operator
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  selector:
    app: dapr-operator
  ports:
  - protocol: TCP
    port: 80 
    targetPort: 6500
---
# Source: dapr/charts/dapr_operator/templates/dapr_operator_service.yaml
apiVersion: v1
kind: Service
metadata:
  name: dapr-webhook
  labels:
    app.kubernetes.io/component: operator
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  ports:
  - port: 443
    targetPort: 19443
    protocol: TCP
  selector:
    app: dapr-operator
---
# Source: dapr/charts/dapr_placement/templates/dapr_placement_service.yaml
kind: Service
apiVersion: v1
metadata:
  name: dapr-placement-server
  labels:
    app: dapr-placement-server
    app.kubernetes.io/component: placement
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  selector:
    app: dapr-placement-server
  # placement must be able to resolve pod address to join initial cluster peers
  # before POD is ready
  publishNotReadyAddresses: true
  ports:
  - name: api
    port: 50005
  - name: raft-node
    port: 8201
  clusterIP: None
---
# Source: dapr/charts/dapr_sentry/templates/dapr_sentry_service.yaml
kind: Service
apiVersion: v1
metadata:
  name: dapr-sentry
  labels:
    app.kubernetes.io/component: sentry
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  selector:
    app: dapr-sentry
  ports:
  - protocol: TCP
    port: 80 
    targetPort: 50001
---
# Source: dapr/charts/dapr_sidecar_injector/templates/dapr_sidecar_injector_service.yaml
apiVersion: v1
kind: Service
metadata:
  name: dapr-sidecar-injector
  labels:
    app.kubernetes.io/component: sidecar-injector
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  type: ClusterIP
  ports:
  - port: 443
    targetPort: https
    protocol: TCP
    name: https
  selector:
    app: dapr-sidecar-injector
---
# Source: dapr/charts/dapr_dashboard/templates/dapr_dashboard_deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dapr-dashboard
  labels:
    app: dapr-dashboard
    app.kubernetes.io/component: dashboard
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dapr-dashboard
  template:
    metadata:
      labels:
        app: dapr-dashboard
        app.kubernetes.io/component: dashboard
        app.kubernetes.io/managed-by: helm
        app.kubernetes.io/name: RELEASE-NAME
        app.kubernetes.io/part-of: dapr
        app.kubernetes.io/version: 1.10.6-rc.1
    spec:
      serviceAccountName: dapr-dashboard
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
                - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                    - linux
      containers:
      - name: dapr-dashboard
        image: "docker.io/daprio/dashboard:0.12.0"
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: true
        env:
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        ports:
        - containerPort: 8080
        resources:
          {}
---
# Source: dapr/charts/dapr_operator/templates/dapr_operator_deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dapr-operator
  labels:
    app: dapr-operator
    app.kubernetes.io/component: operator
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dapr-operator
  template:
    metadata:
      labels:
        app: dapr-operator
        app.kubernetes.io/component: operator
        app.kubernetes.io/managed-by: helm
        app.kubernetes.io/name: RELEASE-NAME
        app.kubernetes.io/part-of: dapr
        app.kubernetes.io/version: 1.10.6-rc.1
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9090"
        prometheus.io/path: "/"
    spec:
      containers:
      - name: dapr-operator
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        image: "docker.io/daprio/operator:1.10.6-rc.1"
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: true
        env:
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        ports:
        - containerPort: 6500
        - name: metrics
          containerPort: 9090
          protocol: TCP
        resources:
          {}
        volumeMounts:
          - name: credentials
            mountPath: /var/run/dapr/credentials
            readOnly: true
          - name: webhook-creds
            mountPath: /tmp/k8s-webhook-server/serving-certs
            readOnly: true
        command:
        - "/operator"
        args:
        - "--watch-interval"
        - "0"
        - "--max-pod-restarts-per-minute"
        - "20"
        - "--log-level"
        - "info"
        - "--enable-metrics"
        - "--metrics-port"
        - "9090"
      serviceAccountName: dapr-operator
      volumes:
        - name: credentials
          secret:
            secretName: dapr-trust-bundle
        - name: webhook-creds
          secret:
            secretName: dapr-webhook-cert
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
                - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                    - linux
---
# Source: dapr/charts/dapr_sentry/templates/dapr_sentry_deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dapr-sentry
  labels:
    app: dapr-sentry
    app.kubernetes.io/component: sentry
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dapr-sentry
  template:
    metadata:
      labels:
        app: dapr-sentry
        app.kubernetes.io/component: sentry
        app.kubernetes.io/managed-by: helm
        app.kubernetes.io/name: RELEASE-NAME
        app.kubernetes.io/part-of: dapr
        app.kubernetes.io/version: 1.10.6-rc.1
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9090"
        prometheus.io/path: "/"
    spec:
      containers:
      - name: dapr-sentry
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        image: "docker.io/daprio/sentry:1.10.6-rc.1"
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: true
        env:
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        ports:
        - containerPort: 50001
        - name: metrics
          containerPort: 9090
          protocol: TCP
        resources:
          {}
        volumeMounts:
          - name: credentials
            mountPath: /var/run/dapr/credentials
            readOnly: true
        command:
        - "/sentry"
        args:
        - "--log-level"
        - info
        - "--enable-metrics"
        - "--metrics-port"
        - "9090"
        - "--trust-domain"
        - cluster.local
      serviceAccountName: dapr-sentry
      volumes:
        - name: credentials
          secret:
            secretName: dapr-trust-bundle
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
                - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                    - linux
---
# Source: dapr/charts/dapr_sidecar_injector/templates/dapr_sidecar_injector_deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dapr-sidecar-injector
  labels:
    app: dapr-sidecar-injector
    app.kubernetes.io/component: sidecar-injector
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dapr-sidecar-injector
  template:
    metadata:
      labels:
        app: dapr-sidecar-injector
        app.kubernetes.io/component: sidecar-injector
        app.kubernetes.io/managed-by: helm
        app.kubernetes.io/name: RELEASE-NAME
        app.kubernetes.io/part-of: dapr
        app.kubernetes.io/version: 1.10.6-rc.1
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9090"
        prometheus.io/path: "/"
    spec:
      serviceAccountName: dapr-injector
      containers:
      - name: dapr-sidecar-injector
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        image: "docker.io/daprio/injector:1.10.6-rc.1"
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: true
        command:
        - "/injector"
        args:
        - "--log-level"
        - info
        - "--enable-metrics"
        - "--metrics-port"
        - "9090"
        - "--healthz-port"
        - "8080"
        env:
        - name: TLS_CERT_FILE
          value: /dapr/cert/tls.crt
        - name: TLS_KEY_FILE
          value: /dapr/cert/tls.key
        - name: KUBE_CLUSTER_DOMAIN
          value: "cluster.local"
        - name: SIDECAR_IMAGE
          value: "docker.io/daprio/daprd:1.10.6-rc.1"
        - name: SIDECAR_IMAGE_PULL_POLICY
          value: "IfNotPresent"
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: IGNORE_ENTRYPOINT_TOLERATIONS
          value: "[{\"effect\":\"NoSchedule\",\"key\":\"alibabacloud.com/eci\"},{\"effect\":\"NoSchedule\",\"key\":\"azure.com/aci\"},{\"effect\":\"NoSchedule\",\"key\":\"aws\"},{\"effect\":\"NoSchedule\",\"key\":\"huawei.com/cci\"}]"
        - name: SIDECAR_RUN_AS_NON_ROOT
          value: "true"
        - name: SIDECAR_READ_ONLY_ROOT_FILESYSTEM
          value: "true"
        ports:
        - name: https
          containerPort: 4000
          protocol: TCP
        - name: metrics
          containerPort: 9090
          protocol: TCP
        resources:
          {}
        volumeMounts:
        - name: cert
          mountPath: /dapr/cert
          readOnly: true
      volumes:
      - name: cert
        secret:
          secretName: dapr-sidecar-injector-cert
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
                - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                    - linux
---
# Source: dapr/charts/dapr_placement/templates/dapr_placement_statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: dapr-placement-server
  labels:
    app: dapr-placement-server
    app.kubernetes.io/component: placement
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
spec:
  replicas: 1
  serviceName: dapr-placement-server
  podManagementPolicy: Parallel
  selector:
    matchLabels:
      app: dapr-placement-server
  template:
    metadata:
      labels:
        app: dapr-placement-server
        app.kubernetes.io/component: placement
        app.kubernetes.io/managed-by: helm
        app.kubernetes.io/name: RELEASE-NAME
        app.kubernetes.io/part-of: dapr
        app.kubernetes.io/version: 1.10.6-rc.1
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9090"
        prometheus.io/path: "/"
    spec:
      containers:
      - name: dapr-placement-server
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 10
          periodSeconds: 3
          failureThreshold: 5
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 3
          periodSeconds: 3
          failureThreshold: 5
        image: "docker.io/daprio/placement:1.10.6-rc.1"
        imagePullPolicy: IfNotPresent
        resources:
          {}
        volumeMounts:
          - name: credentials
            mountPath: /var/run/dapr/credentials
            readOnly: true
        ports:
          - containerPort: 50005
            name: api
          - containerPort: 8201
            name: raft-node
          - name: metrics
            containerPort: 9090
            protocol: TCP
        command:
        - "/placement"
        args:
        - "--log-level"
        - info
        - "--enable-metrics"
        - "--replicationFactor"
        - "100"
        - "--metrics-port"
        - "9090"
        - "--tls-enabled"
        securityContext:
          runAsUser: 0
        env:
          - name: PLACEMENT_ID
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
          - name: NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
      serviceAccountName: dapr-placement
      volumes:
        - name: credentials
          secret:
            secretName: dapr-trust-bundle
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
                - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                    - linux
---
# Source: dapr/charts/dapr_sidecar_injector/templates/dapr_sidecar_injector_webhook_config.yaml
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: dapr-sidecar-injector
  labels:
    app: dapr-sidecar-injector
    app.kubernetes.io/component: sidecar-injector
    app.kubernetes.io/managed-by: helm
    app.kubernetes.io/name: RELEASE-NAME
    app.kubernetes.io/part-of: dapr
    app.kubernetes.io/version: 1.10.6-rc.1
webhooks:
- name: sidecar-injector.dapr.io
  clientConfig:
    service:
      namespace: default
      name: dapr-sidecar-injector
      path: "/mutate"
    caBundle: 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
  rules:
  - apiGroups:
    - ""
    apiVersions:
    - v1
    resources:
    - pods
    operations:
    - CREATE
  failurePolicy: Ignore
  sideEffects: None
  admissionReviewVersions: ["v1", "v1beta1"]
