apiVersion: apps/v1
kind: Deployment
metadata:
    name: httpbin-mengxin-pink-deployment
    namespace: web
    labels:
        app: httpbin
        hostname: httpbin.mengxin.pink
spec:
    replicas: 1
    selector:
        matchLabels:
            pod: httpbin-mengxin-pink
    template:
        metadata:
            annotations:
                linkerd.io/inject: enabled
            labels:
                pod: httpbin-mengxin-pink
        spec:
            containers:
                - name: httpbin-mengxin-pink
                  image: suika/httpbin
                  imagePullPolicy: Always
                  ports:
                      - name: http
                        containerPort: 80
                  resources:
                    limits:
                        memory: "128Mi"
                        cpu: "500m"
                  securityContext:
                        allowPrivilegeEscalation: false
                        # runAsNonRoot: true
                        # readOnlyRootFilesystem: true