apiVersion: apps/v1
kind: Deployment
metadata:
  name: direct
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: direct
  template:
    metadata:
      labels:
        app: direct
      annotations:
        keep: 'yes'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      volumes:
      - name: tls
        secret:
          secretName: cert
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: projected
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: projected
  template:
    metadata:
      labels:
        app: projected
      annotations:
        keep: 'yes'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      volumes:
      - name: tls
        projected:
          sources:
          - secret:
              name: cert
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: environment
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: environment
  template:
    metadata:
      labels:
        app: environment
      annotations:
        keep: 'yes'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        env:
        - name: CERT
          valueFrom:
            secretKeyRef:
              name: cert
              key: tls.crt
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mixed
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: mixed
  template:
    metadata:
      labels:
        app: mixed
      annotations:
        keep: 'yes'
        certificates.quorate.internal/activation: '{"server":"native"}'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      - name: sidecar
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      volumes:
      - name: tls
        secret:
          secretName: cert
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: daemon
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: daemon
  template:
    metadata:
      labels:
        app: daemon
      annotations:
        keep: 'yes'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      volumes:
      - name: tls
        secret:
          secretName: cert
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: stateful
  namespace: tls-test
spec:
  selector:
    matchLabels:
      app: stateful
  template:
    metadata:
      labels:
        app: stateful
      annotations:
        keep: 'yes'
        certificates.quorate.internal/06298432e8066b29e2223bcc23aa9504: 1bde867175a112045010fea7ac3ee3337a9b08db7591609abbaf11efb2dfbd35
    spec:
      containers:
      - name: server
        image: example.invalid/test:fake
        volumeMounts:
        - name: tls
          mountPath: /tls
      volumes:
      - name: tls
        secret:
          secretName: cert