---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: invidious-companion
  namespace: media
spec:
  selector:
    matchLabels:
      app: invidious-companion
  template:
    metadata:
      labels:
        app: invidious-companion
    spec:
      containers:
      - name: inv-companion
        image: quay.io/invidious/invidious-companion@sha256:5d7915b06f6f44435df9332c38e747b062a70d808f51aba9e118dcf756b5a91d
        env:
        - name: SERVER_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: invidious-secrets
              key: INVIDIOUS_COMPANION_KEY
        securityContext:
          capabilities:
            drop:
            - ALL