apiVersion: apps/v1
kind: Deployment
metadata:
  name: roka-server-test-deployment
  labels:
    app: roka-server-test
spec:
  replicas: 1
  selector:
    matchLabels:
      app: roka-server-test
  template:
    metadata:
      labels:
        app: roka-server-test
    spec:
      containers:
      - name: roka-server-test-app
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /etc/secret/roka-server-test/sa_credentials.json
        - name: SPREADSHEET_ID
          value: 1Ou4qK35oai8xshhtsFTHB_asZV_TvzJ-e7Yef6I2Eio
        - name: CACHE_TTL_SECS
          value: '60'
        volumeMounts:
        - name: service-account-credentials-volume
          mountPath: /etc/secret/roka-server-test
          readOnly: true
        image: dock.blake.lol/trin-server:1.0.0.47
      imagePullSecrets:
      - name: dock-blake-registry
      volumes:
      - name: service-account-credentials-volume
        secret:
          secretName: roka-server-test-secret
          items:
          - key: sa_json
            path: sa_credentials.json

---

kind: Service
apiVersion: v1
metadata:
  name: roka-server-test-service
spec:
  selector:
    app: roka-server-test
  ports:
    - port: 8080