apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello-k8s-CONTAINER_TAG
  labels:
    app: hello-k8s
    tag: CONTAINER_TAG
spec:
  replicas: 20
  selector:
    matchLabels:
      app: hello-k8s
  template:
    metadata:
      labels:
        app: hello-k8s
        tag: CONTAINER_TAG
    spec:
      containers:
        - name: hello-k8s
          image: CONTAINER_IMAGE
          securityContext:
            privileged: false
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
          ports:
            - containerPort: 8080