kubernetes.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: klint
  namespace: kube-system
spec:
  selector:
    matchLabels:
      app: klint
  replicas: 1
  template:
    metadata:
      labels:
        app: klint
    spec:
      serviceAccountName: klint
      containers:
        - name: klint
          image: quay.io/uswitch/klint:{{ TAG }}
          imagePullPolicy: Always
          args:
            - --json
          volumeMounts:
            - mountPath: /etc/ssl/certs
              name: ssl-certs-host
              readOnly: true
          env:
            - name: SLACK_TOKEN
              valueFrom:
                secretKeyRef:
                  name: klint
                  key: slack
      volumes:
        - hostPath:
            path: /usr/share/ca-certificates
          name: ssl-certs-host
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: klint
  namespace: kube-system
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::123456789:role/kubernetes_klint
    eks.amazonaws.com/token-expiration: "86400"