fedora-infra_ansible/roles/openshift-apps/koschei/templates/admin-deployment.yml

# https://docs.openshift.com/container-platform/4.15/rest_api/workloads_apis/deployment-apps-v1.html
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: admin
  labels:
    service: admin
spec:
  replicas: 1
  selector:
    matchLabels:
      service: admin
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        service: admin
    spec:
      containers:
      - name: admin
        image: image-registry.openshift-image-registry.svc:5000/koschei/koschei:latest
        command: ["/usr/bin/sleep", "infinity"]
        env:
          - name: SUDO_USER
            value: admin
          - name: KRB5_CONFIG
            value: /etc/koschei/krb5.conf
          - name: KRB5_CLIENT_KTNAME
            value: /etc/krb5.keytab
          - name: FEDORA_MESSAGING_CONF
            value: /etc/koschei/fedora-messaging.toml
        volumeMounts:
        - name: config
          mountPath: /etc/koschei
          readOnly: true
        - name: keytab
          mountPath: /etc/krb5.keytab
          subPath: krb5.keytab
          readOnly: true
      volumes:
      - name: config
        secret:
          secretName: admin-config
      - name: keytab
        secret:
          secretName: keytab