Initial render: k3s-dev environment

rendered/manifests/k3s-dev/certificates/cert-manager/batch_v1_job_cert-manager-startupapicheck.yaml

@@ -0,0 +1,54 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: post-install
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: "1"
+  labels:
+    app: startupapicheck
+    app.kubernetes.io/component: startupapicheck
+    app.kubernetes.io/instance: cert-manager
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: startupapicheck
+    app.kubernetes.io/version: v1.15.1
+    helm.sh/chart: cert-manager-v1.15.1
+  name: cert-manager-startupapicheck
+  namespace: cert-manager
+spec:
+  backoffLimit: 4
+  template:
+    metadata:
+      labels:
+        app: startupapicheck
+        app.kubernetes.io/component: startupapicheck
+        app.kubernetes.io/instance: cert-manager
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: startupapicheck
+        app.kubernetes.io/version: v1.15.1
+        helm.sh/chart: cert-manager-v1.15.1
+    spec:
+      containers:
+      - args:
+        - check
+        - api
+        - --wait=1m
+        - -v
+        image: quay.io/jetstack/cert-manager-startupapicheck:v1.15.1
+        imagePullPolicy: IfNotPresent
+        name: cert-manager-startupapicheck
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+      enableServiceLinks: false
+      nodeSelector:
+        kubernetes.io/os: linux
+      restartPolicy: OnFailure
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      serviceAccountName: cert-manager-startupapicheck