{
  "apiVersion": "apps/v1",
  "kind": "Deployment",
  "metadata": {
    "labels": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/managed-by": "Helm",
      "app.kubernetes.io/name": "nginx",
      "app.kubernetes.io/version": "1.31.1",
      "helm.sh/chart": "nginx-24.0.2"
    },
    "name": "nginx",
    "namespace": "nginx-staging"
  },
  "spec": {
    "replicas": 2,
    "revisionHistoryLimit": 10,
    "selector": {
      "matchLabels": {
        "app.kubernetes.io/instance": "nginx",
        "app.kubernetes.io/name": "nginx"
      }
    },
    "strategy": {
      "rollingUpdate": {},
      "type": "RollingUpdate"
    },
    "template": {
      "metadata": {
        "labels": {
          "app.kubernetes.io/instance": "nginx",
          "app.kubernetes.io/managed-by": "Helm",
          "app.kubernetes.io/name": "nginx",
          "app.kubernetes.io/version": "1.31.1",
          "helm.sh/chart": "nginx-24.0.2"
        }
      },
      "spec": {
        "affinity": {
          "podAntiAffinity": {
            "preferredDuringSchedulingIgnoredDuringExecution": [
              {
                "podAffinityTerm": {
                  "labelSelector": {
                    "matchLabels": {
                      "app.kubernetes.io/instance": "nginx",
                      "app.kubernetes.io/name": "nginx"
                    }
                  },
                  "topologyKey": "kubernetes.io/hostname"
                },
                "weight": 1
              }
            ]
          }
        },
        "automountServiceAccountToken": false,
        "containers": [
          {
            "env": [
              {
                "name": "BITNAMI_DEBUG",
                "value": "false"
              },
              {
                "name": "NGINX_HTTP_PORT_NUMBER",
                "value": "8080"
              },
              {
                "name": "OPENSSL_FIPS",
                "value": "yes"
              },
              {
                "name": "NGINX_HTTPS_PORT_NUMBER",
                "value": "8443"
              }
            ],
            "image": "registry-1.docker.io/bitnami/nginx@sha256:805bcc863fc3f602589fc75cae91eeedebad234d5ce5a476c96b03a747821e7f",
            "imagePullPolicy": "IfNotPresent",
            "livenessProbe": {
              "failureThreshold": 6,
              "initialDelaySeconds": 30,
              "periodSeconds": 10,
              "successThreshold": 1,
              "tcpSocket": {
                "port": "http"
              },
              "timeoutSeconds": 5
            },
            "name": "nginx",
            "ports": [
              {
                "containerPort": 8080,
                "name": "http"
              },
              {
                "containerPort": 8443,
                "name": "https"
              }
            ],
            "readinessProbe": {
              "failureThreshold": 3,
              "httpGet": {
                "path": "/",
                "port": "http"
              },
              "initialDelaySeconds": 5,
              "periodSeconds": 5,
              "successThreshold": 1,
              "timeoutSeconds": 3
            },
            "resources": {
              "limits": {
                "cpu": "150m",
                "ephemeral-storage": "2Gi",
                "memory": "192Mi"
              },
              "requests": {
                "cpu": "100m",
                "ephemeral-storage": "50Mi",
                "memory": "128Mi"
              }
            },
            "securityContext": {
              "allowPrivilegeEscalation": false,
              "capabilities": {
                "drop": [
                  "ALL"
                ]
              },
              "privileged": false,
              "readOnlyRootFilesystem": true,
              "runAsGroup": 1001,
              "runAsNonRoot": true,
              "runAsUser": 1001,
              "seLinuxOptions": {},
              "seccompProfile": {
                "type": "RuntimeDefault"
              }
            },
            "volumeMounts": [
              {
                "mountPath": "/tmp",
                "name": "empty-dir",
                "subPath": "tmp-dir"
              },
              {
                "mountPath": "/opt/bitnami/nginx/conf",
                "name": "empty-dir",
                "subPath": "app-conf-dir"
              },
              {
                "mountPath": "/opt/bitnami/nginx/logs",
                "name": "empty-dir",
                "subPath": "app-logs-dir"
              },
              {
                "mountPath": "/opt/bitnami/nginx/tmp",
                "name": "empty-dir",
                "subPath": "app-tmp-dir"
              },
              {
                "mountPath": "/certs",
                "name": "empty-dir",
                "subPath": "app-tls-dir"
              }
            ]
          }
        ],
        "hostIPC": false,
        "hostNetwork": false,
        "initContainers": [
          {
            "args": [
              "-ec",
              "#!/bin/bash\n. /opt/bitnami/scripts/libfs.sh\n# We copy the logs folder because it has symlinks to stdout and stderr\nif ! is_dir_empty /opt/bitnami/nginx/logs; then\n  cp -r /opt/bitnami/nginx/logs /emptydir/app-logs-dir\nfi\n"
            ],
            "command": [
              "/bin/bash"
            ],
            "env": [
              {
                "name": "OPENSSL_FIPS",
                "value": "yes"
              }
            ],
            "image": "registry-1.docker.io/bitnami/nginx@sha256:805bcc863fc3f602589fc75cae91eeedebad234d5ce5a476c96b03a747821e7f",
            "imagePullPolicy": "IfNotPresent",
            "name": "preserve-logs-symlinks",
            "resources": {
              "limits": {
                "cpu": "150m",
                "ephemeral-storage": "2Gi",
                "memory": "192Mi"
              },
              "requests": {
                "cpu": "100m",
                "ephemeral-storage": "50Mi",
                "memory": "128Mi"
              }
            },
            "securityContext": {
              "allowPrivilegeEscalation": false,
              "capabilities": {
                "drop": [
                  "ALL"
                ]
              },
              "privileged": false,
              "readOnlyRootFilesystem": true,
              "runAsGroup": 1001,
              "runAsNonRoot": true,
              "runAsUser": 1001,
              "seLinuxOptions": {},
              "seccompProfile": {
                "type": "RuntimeDefault"
              }
            },
            "volumeMounts": [
              {
                "mountPath": "/emptydir",
                "name": "empty-dir"
              }
            ]
          }
        ],
        "securityContext": {
          "fsGroup": 1001,
          "fsGroupChangePolicy": "Always",
          "supplementalGroups": [],
          "sysctls": []
        },
        "serviceAccountName": "nginx",
        "shareProcessNamespace": false,
        "volumes": [
          {
            "emptyDir": {},
            "name": "empty-dir"
          }
        ]
      }
    }
  }
}
---
{
  "apiVersion": "networking.k8s.io/v1",
  "kind": "NetworkPolicy",
  "metadata": {
    "labels": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/managed-by": "Helm",
      "app.kubernetes.io/name": "nginx",
      "app.kubernetes.io/version": "1.31.1",
      "helm.sh/chart": "nginx-24.0.2"
    },
    "name": "nginx",
    "namespace": "nginx-staging"
  },
  "spec": {
    "egress": [
      {}
    ],
    "ingress": [
      {
        "ports": [
          {
            "port": 8080
          },
          {
            "port": 8443
          }
        ]
      }
    ],
    "podSelector": {
      "matchLabels": {
        "app.kubernetes.io/instance": "nginx",
        "app.kubernetes.io/name": "nginx"
      }
    },
    "policyTypes": [
      "Ingress",
      "Egress"
    ]
  }
}
---
{
  "apiVersion": "policy/v1",
  "kind": "PodDisruptionBudget",
  "metadata": {
    "labels": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/managed-by": "Helm",
      "app.kubernetes.io/name": "nginx",
      "app.kubernetes.io/version": "1.31.1",
      "helm.sh/chart": "nginx-24.0.2"
    },
    "name": "nginx",
    "namespace": "nginx-staging"
  },
  "spec": {
    "maxUnavailable": 1,
    "selector": {
      "matchLabels": {
        "app.kubernetes.io/instance": "nginx",
        "app.kubernetes.io/name": "nginx"
      }
    }
  }
}
---
{
  "apiVersion": "v1",
  "kind": "Service",
  "metadata": {
    "labels": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/managed-by": "Helm",
      "app.kubernetes.io/name": "nginx",
      "app.kubernetes.io/version": "1.31.1",
      "helm.sh/chart": "nginx-24.0.2"
    },
    "name": "nginx",
    "namespace": "nginx-staging"
  },
  "spec": {
    "ports": [
      {
        "name": "http",
        "port": 80,
        "targetPort": "http"
      },
      {
        "name": "https",
        "port": 443,
        "targetPort": "https"
      }
    ],
    "selector": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/name": "nginx"
    },
    "type": "ClusterIP"
  }
}
---
{
  "apiVersion": "v1",
  "automountServiceAccountToken": false,
  "kind": "ServiceAccount",
  "metadata": {
    "labels": {
      "app.kubernetes.io/instance": "nginx",
      "app.kubernetes.io/managed-by": "Helm",
      "app.kubernetes.io/name": "nginx",
      "app.kubernetes.io/version": "1.31.1",
      "helm.sh/chart": "nginx-24.0.2"
    },
    "name": "nginx",
    "namespace": "nginx-staging"
  }
}
