apiVersion: apps/v1
kind: Deployment
metadata:
  name: java
  namespace: services
  labels:
    app.kubernetes.io/name: java
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: java
  template:
    metadata:
      labels:
        app.kubernetes.io/name: java
    spec:
      imagePullSecrets:
      - name: docker-io
      containers:
      - image: docker.io/library/java:latest
        imagePullPolicy: Always
        name: java
        command: ['/bin/sleep']
        args: ['9999999']
        securityContext:
          privileged: false
          capabilities:
            drop:
              - ALL
        resources:
            limits:
              cpu: '1'
              memory: '1Gi'
