apiVersion: v1
kind: Pod
metadata:
  name: backend-billing
spec:
  restartPolicy: Never
  volumes:
    - name: backend-config
      secret:
        secretName: backend-config
    - name: beneath-sa-key
      secret:
        secretName: beneath-sa-key
  containers:
    - name: backend
      image: gcr.io/beneath/ee-backend:latest
      args: ["billing", "run", "--config", "/etc/config/production.yaml"]
      volumeMounts:
        - name: backend-config
          mountPath: /etc/config
        - name: beneath-sa-key
          mountPath: /var/secrets/google
      env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /var/secrets/google/key.json
