apiVersion: apps/v1 kind: Deployment metadata: name: decluttarr labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: decluttarr app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: decluttarr helm.sh/chart: decluttarr-4.6.2 namespace: decluttarr spec: revisionHistoryLimit: 3 replicas: 1 strategy: type: Recreate selector: matchLabels: app.kubernetes.io/controller: main app.kubernetes.io/name: decluttarr app.kubernetes.io/instance: decluttarr template: metadata: labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: decluttarr app.kubernetes.io/name: decluttarr spec: enableServiceLinks: false serviceAccountName: default automountServiceAccountToken: true hostIPC: false hostNetwork: false hostPID: false dnsPolicy: ClusterFirst containers: - env: - name: TZ value: America/Chicago image: ghcr.io/manimatter/decluttarr:v2.0.0 imagePullPolicy: IfNotPresent name: main resources: requests: cpu: 10m memory: 128Mi volumeMounts: - mountPath: /app/config/config.yaml mountPropagation: None name: config readOnly: true subPath: config.yaml volumes: - name: config secret: secretName: decluttarr-config-secret --- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: name: decluttarr-config-secret namespace: decluttarr labels: app.kubernetes.io/name: decluttarr-config-secret app.kubernetes.io/instance: decluttarr app.kubernetes.io/part-of: decluttarr spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: config.yaml remoteRef: conversionStrategy: Default decodingStrategy: None key: /cl01tl/decluttarr/config metadataPolicy: None property: config.yaml