---
apiVersion: v1
kind: Namespace
metadata:
  name: pangolin
  labels:
    pod-security.kubernetes.io/enforce: privileged
---
apiVersion: v1
kind: Secret
metadata:
  name: newt-credentials
  namespace: pangolin
type: Opaque
stringData:
  NEWT_ID: "ouni3kkg688rt5q"
  NEWT_SECRET: "i2rzel1tohf96bq8o8jmy6ky7kn9euz01f70uerrarc61hlo"
  PANGOLIN_ENDPOINT: "https://pangolin.w5isp.com"
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: newt
  namespace: pangolin
spec:
  replicas: 1
  selector:
    matchLabels:
      app: newt
  template:
    metadata:
      labels:
        app: newt
    spec:
      containers:
        - name: newt
          image: fosrl/newt:latest
          imagePullPolicy: Always
          envFrom:
            - secretRef:
                name: newt-credentials
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
          resources:
            requests:
              memory: "128Mi"
              cpu: "100m"
            limits:
              memory: "256Mi"
              cpu: "200m"
      restartPolicy: Always