# use this command to generate docker-registry  kubectl create secret docker-registry my-image-pull-secret \
# --docker-username=<username> \
# --docker-password=<password> \
# --docker-email=<email-address>
apiVersion: v1
kind: Pod
metadata:
  name: kuard-tls
  labels:
    name: kuard-tls
spec:
  containers:
  - name: kuard-tls
    image: gcr.io/kuar-demo/kuard-amd64:blue
    imagePullPolicy: Always
    resources:
      limits:
        memory: "128Mi"
        cpu: "500m"
    ports:
      - containerPort: 8080
    volumeMounts:
      - name: tls-certs
        mountPath: "/tls"
        readOnly: true
  imagePullSecrets:
    - name: my-image-pull-secret
  volumes:
    - name: tls-certs
      secret:
        secretName: kuard-tls