From 1a131e64fef6cd6367b1caf829fae6a08119a95b Mon Sep 17 00:00:00 2001
From: Matt Moyer <moyerm@vmware.com>
Date: Mon, 17 May 2021 10:05:42 -0500
Subject: [PATCH] Start deploying an initial CredentialIssuer in our install
 YAML.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
---
 deploy/concierge/deployment.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/deploy/concierge/deployment.yaml b/deploy/concierge/deployment.yaml
index 525257a7..47b9327c 100644
--- a/deploy/concierge/deployment.yaml
+++ b/deploy/concierge/deployment.yaml
@@ -247,3 +247,15 @@ spec:
     name: #@ defaultResourceNameWithSuffix("api")
     namespace: #@ namespace()
     port: 443
+---
+apiVersion: config.concierge.pinniped.dev/v1alpha1
+kind: CredentialIssuer
+metadata:
+    name: #@ defaultResourceNameWithSuffix("config")
+spec:
+  impersonationProxy:
+    mode: auto
+    service:
+      mode: LoadBalancer
+      annotations:
+        service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "4000"