apiVersion: v1
kind: Pod
metadata:
  name: client
spec:
  containers:
    - image: localhost:5000/oidc-adventures/client-58bf3581096f28f603bcda285193bbb5:v2@sha256:e24900b79e0c77efb242a09e26620a44e8bad3349751d08fdde813c5bc10b88f
      name: client
      volumeMounts:
        - mountPath: /var/run/secrets/tokens
          name: oidc-token
      env:
        - name: OIDC_TOKEN_PATH
          value: /var/run/secrets/tokens/oidc-token
        - name: OIDC_REQUIRED_SERVER
          value: http://server.default:80
      imagePullPolicy: IfNotPresent
  volumes:
    - name: oidc-token
      projected:
        sources:
          - serviceAccountToken:
              path: oidc-token
              expirationSeconds: 600
              audience: adventures