---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: invidious-companion
  namespace: media
spec:
  selector:
    matchLabels:
      app: invidious-companion
  template:
    metadata:
      labels:
        app: invidious-companion
    spec:
      containers:
      - name: inv-companion
        image: quay.io/invidious/invidious-companion@sha256:dbeaaab6a1c718f5874cc588aaab2d2b169dea4c742add6deac955c2879fc9c4
        env:
        - name: SERVER_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: invidious-secrets
              key: INVIDIOUS_COMPANION_KEY
        securityContext:
          capabilities:
            drop:
            - ALL