k8s-deployment.yaml

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: permissions
  labels:
    name: permissions
  namespace: apigee
spec:
  replicas: 1
  selector:
    matchLabels:
      component: permissions
  template:
    metadata:
      labels:
        component: permissions
        routable: "true"
      annotations:
        privateHosts: sso.k8s.local
        privatePaths: 3000:/allowed-actions 3000:/is-allowed 3000:/is-allowed-to-inherit-from
    spec:
      containers:
      - name: permissions
        image: permissions
        imagePullPolicy: IfNotPresent
        env:
          - name: PORT
            value: "3000"
          - name: PG_HOST
            valueFrom:
              secretKeyRef:
                name: permissions
                key: pghost
          - name: PG_USER
            valueFrom:
              secretKeyRef:
                name: permissions
                key: pguser
          - name: PG_PASSWORD
            valueFrom:
              secretKeyRef:
                name: permissions
                key: pgpassword
          - name: PG_DATABASE
            valueFrom:
              secretKeyRef:
                name: permissions
                key: pgdatabase
          - name: SPEEDUP
            value: "10" 
          - name: INTERNAL_ROUTER
            value: "internal-router" 
          - name: IPADDRESS
            valueFrom:
              fieldRef:
                fieldPath: status.podIP          
        ports:
          - containerPort: 3000