doc/tutorial/kubernetes/manual/services/infra/updater/kube.cue

package kube

deployment updater: {
	image: "gcr.io/myproj/updater:v0.1.0"
	args: ["-key=/etc/certs/updater.pem"]

	expose port http: 8080
	volume "secret-updater": {
		mountPath: "/etc/certs"
		spec secret secretName: "updater-secrets"
	}
}