# Copyright 2022 The Go Authors. All rights reserved.
# Use of this source code is governed by a BSD-style
# license that can be found in the LICENSE file.

apiVersion: apps/v1
kind: Deployment
metadata:
    name: security-trybots
spec:
    selector:
        matchLabels:
            app: security-trybots
    strategy:
        type: Recreate
    template:
        metadata:
            labels:
                app: security-trybots
        spec:
            serviceAccountName: security-trybots
            containers:
                - name: security-trybots
                  image: gcr.io/go-security-trybots/security-trybots:latest
                  imagePullPolicy: Always
                  command:
                    - "/usr/bin/tini"
                    - "--"
                    - "./securitybot"
                    - "-gcs=stb-logs"
                  resources:
                    requests:
                        cpu: "2"
                        memory: "4Gi"
---
apiVersion: v1
kind: ServiceAccount
metadata:
    name: security-trybots
    annotations:
        iam.gke.io/gcp-service-account: security-trybots@go-security-trybots.iam.gserviceaccount.com