---
apiVersion: v1
kind: Pod
metadata:
  name: pki-toolbox
  labels:
    app: pki-toolbox
spec:
  containers:
    - name: pki-toolbox
      imagePullPolicy: Always
      image: quay.io/kenmoini/pki-toolbox:latest
      command: [ "/bin/bash", "-c", "--" ]
      args: [ "while true; do sleep 30; done;" ]
      volumeMounts:
        - name: trusted-ca
          mountPath: /etc/pki/ca-trust/extracted/pem
          readOnly: true
  volumes:
    - name: trusted-ca
      configMap:
        name: trusted-ca
        items:
          - key: ca-bundle.crt 
            path: tls-ca-bundle.pem