doc/tutorial/kubernetes/quick/services/infra/updater/kube.cue

package kube

deployment updater spec template spec: {
	volumes: [{
		name: "secret-updater"
		secret secretName: "updater-secrets"
	}]
	containers: [{
		image: "gcr.io/myproj/updater:v0.1.0"
		volumeMounts: [{
			mountPath: "/etc/certs"
			name:      "secret-updater"
		}]

		ports: [{
			containerPort: 8080
		}]
		args: [
			"-key=/etc/certs/updater.pem",
		]
	}]
}