apiVersion: apps/v1
kind: Deployment
metadata:
  name: openvpn
  labels:
    app: openvpn
spec:
  selector:
    matchLabels:
      app: openvpn
  replicas: 1
  template:
    metadata:
      labels:
        app: openvpn
    spec:
      restartPolicy: Always
      terminationGracePeriodSeconds: 60
      containers:
        - name: openvpn
          image: $REMOTE_TAG
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
          resources:
            limits:
              cpu: 200m
              memory: 100Mi
            requests:
              cpu: 100m
              memory: 50Mi
