full-nginx-deployment-scc.yaml

---
apiVersion: v1
kind: Namespace
metadata:
  name: default
  annotations:
    argocd.argoproj.io/sync-wave: "0"
spec: {}
apiVersion: v1
kind: ServiceAccount
metadata:
  creationTimestamp: null
  name: testuser
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: system:openshift:scc:privileged
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:openshift:scc:anyuid
subjects:
- kind: ServiceAccount
  name: testuser
  namespace: default
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: delete-me
  name: delete-me
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "10"
spec:
  ports:
  - name: "80"
    nodePort: 30000
    port: 80
    protocol: TCP
    targetPort: 80
  selector:
    app: nginx-server
  type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "20"
spec:
  selector:
    matchLabels:
      app: nginx-server
  replicas: 2
  template:
    metadata:
      name: nginx
      labels:
        app: nginx-server
      namespace: default
    spec:
      serviceAccount: testuser
      serviceAccountName: testuser
      resources:
        limits:
          hugepages-2Mi: 100Mi
          hugepages-1Gi: 2Gi
          memory: 100Mi
        requests:
          memory: 100Mi
      containers:
      - name: nginx
        securityContext:
          runAsUser: 0
        image: quay.io/thegeeklab/nginx:latest
        ports:
          - containerPort: 80
            name: http-web-svc