pebble.yaml

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: pebble-config
  namespace: le-operator-system
data:
  pebble-config.json: |
    {
      "pebble": {
        "listenAddress": "0.0.0.0:14000",
        "managementListenAddress": "0.0.0.0:15000",
        "certificate": "test/certs/localhost/cert.pem",
        "privateKey": "test/certs/localhost/key.pem",
        "httpPort": 80,
        "tlsPort": 443,
        "ocspResponderURL": "",
        "externalAccountBindingRequired": false
      }
    }
---
apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "2"
  labels:
    app: pebble
  name: pebble
  namespace: le-operator-system
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: pebble
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: pebble
    spec:
      containers:
      - env:
        - name: PEBBLE_VA_NOSLEEP
          value: "1"
        volumeMounts:
        - name: pebble-config
          mountPath: /pebble-config
        command:
          - "/usr/bin/pebble"
          - "-config"
          - "/pebble-config/pebble-config.json"
        image: letsencrypt/pebble
        imagePullPolicy: Always
        name: pebble
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      terminationGracePeriodSeconds: 30
      volumes: 
        - name: pebble-config
          configMap:
            name: pebble-config
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: pebble
  name: pebble
  namespace: le-operator-system
spec:
  ports:
  - name: management
    port: 15000
  - name: acme
    port: 14000
  selector:
    app: pebble