apiVersion: apps/v1
kind: Deployment
metadata:
  name: gotenberg
  namespace: default
spec:
  selector:
    matchLabels:
      app: gotenberg
  template:
    metadata:
      labels:
        app: gotenberg
    spec:
      securityContext:
        runAsUser: 1001
      containers:
      - name: gotenberg
        image: gotenberg/gotenberg:8.24
        command:
        - sh
        - -c
        - |
          gotenberg --chromium-disable-javascript=true --chromium-allow-list=file:///tmp/.*
        ports:
        - containerPort: 3000
        securityContext:
          readOnlyRootFilesystem: false
          allowPrivilegeEscalation: false
          privileged: false