apiVersion: v1 kind: ServiceAccount metadata: name: policy-bot --- apiVersion: apps/v1 kind: Deployment metadata: name: policy-bot spec: replicas: 1 selector: matchLabels: app.kubernetes.io/name: policy-bot template: metadata: labels: app.kubernetes.io/name: policy-bot spec: containers: - name: policy-bot image: bzl://hack/deps:policy_bot_container_push ports: - name: http containerPort: 8080 envFrom: - secretRef: name: policy-bot-webhook-secret - secretRef: name: policy-bot-private-key - secretRef: name: policy-bot-oauth volumeMounts: - name: policy-bot mountPath: /secrets readinessProbe: httpGet: port: http path: /api/health imagePullPolicy: IfNotPresent volumes: - name: policy-bot configMap: name: policy-bot