# If this works, it could be dangerous, because we don't want delegated projects
# to be able to deploy to kube-system or other namespaces in general.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: malicious-pretendapp
  namespace: kube-system
spec:
  selector:
    matchLabels:
      app: malicious-pretendapp
  template:
    metadata:
      labels:
        app: malicious-pretendapp
    spec:
      containers:
      - name: malicious-pretendapp
        image: logindotgov/pretend-app:master-f4b4bbffafdec6b509c5e56d7a12a9be2d7e09ac
        #image: logindotgov/pretend-app:master-6edd6c10e9966d245a36c3bddf3b7a7b7caf70db
        resources:
          limits:
            memory: "128Mi"
            cpu: "500m"
        ports:
        - containerPort: 80
