apiVersion: v1
kind: Service
metadata:
  name: blackbox-exporter
  labels:
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/component: blackbox-exporter
spec:
  ports:
  - port: 9115
    name: blackbox-exporter
  selector:
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/component: blackbox-exporter

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: blackbox-exporter
  labels:
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/component: blackbox-exporter
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: blackbox-exporter
      app.kubernetes.io/component: blackbox-exporter
  template:
    metadata:
      labels:
        app.kubernetes.io/name: blackbox-exporter
        app.kubernetes.io/component: blackbox-exporter
    spec:
      containers:
      - name: blackbox-exporter
        image: docker.io/bitnami/blackbox-exporter:0.24.0
        args:
        - --config.file=/etc/blackbox-exporter/blackbox.yml
        ports:
        - containerPort: 9115
          name: http
        readinessProbe: &probe
          httpGet:
            port: http
            path: /
          periodSeconds: 60
        startupProbe:
          <<: *probe
          periodSeconds: 1
          successThreshold: 1
          failureThreshold: 30
          timeoutSeconds: 1
        securityContext:
          runAsNonRoot: true
          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /etc/blackbox-exporter
          name: config
          readOnly: true
        - mountPath: /tmp
          name: tmp
          subPath: tmp
      securityContext:
        runAsNonRoot: true
        sysctls:
        - name: net.ipv4.ping_group_range
          value: 0 65536
      volumes:
      - name: config
        configMap:
          name: blackbox
      - name: tmp
        emptyDir: {}