apiVersion: apps/v1
kind: Deployment
metadata:
  name: juice-shop
  namespace: security-lab
  labels:
    app.kubernetes.io/name: juice-shop
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: juice-shop
  template:
    metadata:
      labels:
        app.kubernetes.io/name: juice-shop
        homelab.dev/security-lab-app: "true"
    spec:
      automountServiceAccountToken: false
      containers:
        - name: juice-shop
          image: bkimminich/juice-shop:latest
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 3000
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
            limits:
              cpu: "1"
              memory: 768Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
---
apiVersion: v1
kind: Service
metadata:
  name: juice-shop
  namespace: security-lab
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: juice-shop
  ports:
    - name: http
      port: 3000
      targetPort: http