manager.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ivyo
  labels:
    ivory-operator.ivorysql.org/control-plane: ivory-operator
spec:
  replicas: 1
  strategy: { type: Recreate }
  selector:
    matchLabels:
      ivory-operator.ivorysql.org/control-plane: ivory-operator
  template:
    metadata:
      labels:
        ivory-operator.ivorysql.org/control-plane: ivory-operator
    spec:
      containers:
      - name: operator
        image: ivory-operator
        env:
        - name: IVYO_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: IVORY_DEBUG
          value: "true"
        - name: RELATED_IMAGE_IVORY_5
          value: "docker.io/ivorysql/ivorysql:ubi9-5.3-5.3-1"
        - name: RELATED_IMAGE_PGBACKREST
          value: "docker.io/ivorysql/pgbackrest:ubi9-2.56.0-5.3-1"

        securityContext:
          allowPrivilegeEscalation: false
          capabilities: { drop: [ALL] }
          readOnlyRootFilesystem: true
          runAsNonRoot: true
      serviceAccountName: ivyo