apiVersion: apps/v1 kind: Deployment metadata: name: catalogue labels: name: catalogue spec: replicas: 1 selector: matchLabels: name: catalogue template: metadata: labels: name: catalogue spec: containers: - name: catalogue image: weaveworksdemos/catalogue:0.3.5 ports: - containerPort: 80 securityContext: runAsNonRoot: true runAsUser: 10001 capabilities: drop: - all add: - NET_BIND_SERVICE readOnlyRootFilesystem: true nodeSelector: beta.kubernetes.io/os: linux