# istio_hello-openshift-custom-injection.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello
  namespace: test-ns
spec:
  replicas: 7
  selector:
    matchLabels: 
      app: hello
      tier: backend
      track: stable
  template:
    metadata:
      labels:
        app: hello
        tier: backend
        track: stable
    spec:
      containers:
        - name: hello
          image: "fake.docker.io/google-samples/hello-go-gke:1.0"
          ports:
            - name: http
              containerPort: 80
          securityContext:
            readOnlyRootFilesystem: false
            runAsUser: 1000620000
        - name: istio-proxy
          image: "auto"
          resources: {}
          securityContext:
            readOnlyRootFilesystem: false
            runAsUser: 1000620000