apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: auth-sidecar-demo
  name: auth-sidecar-demo
spec:
  replicas: 1
  selector:
    matchLabels:
      app: auth-sidecar-demo
  template:
    metadata:
      labels:
        app: auth-sidecar-demo
    spec:
      initContainers:
        - name: auth-proxy-init
          image: auth-sidecar-demo/auth-proxy-init
          imagePullPolicy: Never
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
      containers:
        - name: auth-proxy
          image: auth-sidecar-demo/auth-proxy
          imagePullPolicy: Never
          ports:
            - containerPort: 8000
        - name: resource-server
          image: auth-sidecar-demo/resource-server
          imagePullPolicy: Never
          ports:
            - containerPort: 80
