apiVersion: apps/v1 kind: Deployment metadata: name: opensign-client namespace: opensign labels: app.kubernetes.io/name: opensign-client spec: selector: matchLabels: app.kubernetes.io/name: opensign-client template: metadata: labels: app.kubernetes.io/name: opensign-client spec: securityContext: runAsUser: 1000 runAsGroup: 1000 containers: - name: opensign-client image: edeedeeed/opensign-client:sha-d3e6107 envFrom: - configMapRef: name: opensign-env optional: false - secretRef: name: opensign-secrets optional: false ports: - protocol: TCP containerPort: 3000 name: web