apiVersion: apps/v1
kind: Deployment
metadata:
  name: webgoat
  namespace: security-lab
  labels:
    app.kubernetes.io/name: webgoat
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: webgoat
  template:
    metadata:
      labels:
        app.kubernetes.io/name: webgoat
        homelab.dev/security-lab-app: "true"
    spec:
      automountServiceAccountToken: false
      containers:
        - name: webgoat
          image: webgoat/webgoat:latest
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8080
          resources:
            requests:
              cpu: 200m
              memory: 512Mi
            limits:
              cpu: "1"
              memory: 1Gi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
---
apiVersion: v1
kind: Service
metadata:
  name: webgoat
  namespace: security-lab
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: webgoat
  ports:
    - name: http
      port: 8080
      targetPort: http