apiVersion: apps/v1
kind: Deployment
metadata:
  name: pubkey
  namespace: istio-system
spec:
  replicas: 1
  selector:
    matchLabels:
      service: pubkey
  template:
    metadata:
      labels:
        service: pubkey
    spec:
      containers:
      - command:
        - /pub-key-server
        image: gcr.io/kubeflow-images-public/jwtpubkey:v20200311-v0.7.0-rc.5-109-g641fb40b-dirty-eb1cdc
        name: pubkey
        volumeMounts:
        - mountPath: /var/pubkey/
          name: config-volume
      restartPolicy: Always
      serviceAccountName: kf-admin
      volumes:
      - configMap:
          name: pubkey
        name: config-volume
