manager_auth_proxy_patch.yaml

# This patch inject a sidecar container which is a HTTP proxy for the
# controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: controller
  namespace: projectsveltos
spec:
  template:
    spec:
      initContainers:
      - name: initialization
        args:
        - "--report-mode=0"
        - --shard-key=
        - "--agent-in-mgmt-cluster=false"
      containers:
      - name: controller
        args:
        - "--diagnostics-address=:8443"
        - "--report-mode=0"
        - --shard-key=
        - --capi-onboard-annotation=
        - "--v=5"
        - "--version=v1.8.0"
        - "--agent-in-mgmt-cluster=false"
        env:
        - name: GOMEMLIMIT
          valueFrom:
            resourceFieldRef:
              resource: limits.memory
        - name: GOMAXPROCS
          valueFrom:
            resourceFieldRef:
              resource: limits.cpu