apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
spec:
  replicas: 1
  # podTemplate defines the 'cookie cutter' used for creating
  # new pods when necessary
  template:
    metadata:
      labels:
        # Important: these labels need to match the selector above
        # The api server enforces this constraint.
        app: nginx
        component: proxy
    spec:
      volumes:
      - name: secret-volume
        secret:
          secretName: proxy-secrets
      - name: config-volume
        configMap:
          name: nginx
      containers:
      # Put nginx last so it will be linked with previous two containers during
      # testing.
      - name: nginx
        image: nginx:1.11.10-alpine
        ports:
        - containerPort: 80
        - containerPort: 443
        volumeMounts:
        - mountPath: /etc/ssl
          name: secret-volume
        - name: config-volume
          mountPath: /etc/nginx/nginx.conf
          subPath: nginx.conf