deployment-default.tf

resource "kubernetes_deployment" "demo-non-privileged" {
  metadata {
    name      = "demo-non-privileged-dp"
    namespace = kubernetes_namespace.playground.id
  }
  spec {
    replicas = 1
    selector {
      match_labels = {
        app = "demo-non-privileged-lb"
      }
    }
    template {
      metadata {
        labels = {
          app = "demo-non-privileged-lb"
        }
      }
      spec {
        service_account_name            = kubernetes_service_account.non_privileged.metadata[0].name
        automount_service_account_token = false
        container {
          name  = "bibinwilson"
          image = "bibinwilson/docker-kubectl:latest"
          volume_mount {
            mount_path = "/etc/sensitive"
            name       = "sensitive-vl"
            read_only  = true
          }
        }
        volume {
          name = "sensitive-vl"
          secret {
            secret_name = kubernetes_secret.top_secret.metadata[0].name
          }
        }
      }
    }
  }
}