apiVersion: apps/v1
kind: Deployment
metadata:
  name: cm-web
  namespace: cert-manager-lab
  labels:
    app: cm-web
    lesson: cert-manager
spec:
  replicas: 1
  selector:
    matchLabels:
      app: cm-web
      lesson: cert-manager
  template:
    metadata:
      labels:
        app: cm-web
        lesson: cert-manager
    spec:
      containers:
        - name: main
          image: busybox:1.36
          imagePullPolicy: IfNotPresent
          env:
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: spec.nodeName
            - name: APP_HOST
              value: auto-secure.k8s-lab.local
          command:
            - /bin/sh
            - -c
          args:
            - |
              set -eu
              mkdir -p /www
              cat > /www/index.html <<EOF
              <html>
              <body>
              <h1>cert-manager ingress-shim demo</h1>
              <p>pod: $(hostname)</p>
              <p>pod_ip: $(hostname -i)</p>
              <p>node: ${NODE_NAME}</p>
              <p>host: ${APP_HOST}</p>
              <p>issuer: lab-root-ca-issuer</p>
              </body>
              </html>
              EOF
              exec httpd -f -p 8080 -h /www
          ports:
            - containerPort: 8080
              name: http
