apiVersion: apps/v1 kind: Deployment metadata: name: dref namespace: default spec: selector: matchLabels: app: dref template: metadata: labels: app: dref spec: nodeSelector: kubernetes.io/arch: arm64 containers: - name: dref image: icr.gmem.ca/dref resources: limits: memory: "32Mi" cpu: "100m" requests: memory: "1Mi" cpu: "1m" ports: - containerPort: 80 env: - name: DREF_REGISTRY value: registry:5000 - name: DREF_REGISTRY_USE_SSL value: "false" --- apiVersion: v1 kind: Service metadata: name: dref spec: selector: app: dref ports: - port: 3000 targetPort: 3000 --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: dref annotations: cert-manager.io/issuer: "le-issuer" namespace: default spec: tls: - hosts: - dref.gmem.ca secretName: gmem-ca-wildcard rules: - host: dref.gmem.ca http: paths: - path: / pathType: Prefix backend: service: name: dref port: number: 3000