gistfile1.txt

apiVersion: apps/v1
kind: Deployment
metadata:
  name: iap
  namespace: auto-provisioning
spec:
  selector:
    matchLabels:
      app: iap
  replicas: 1
  template:
    metadata:
      labels:
        app: iap
    spec:
      containers:
      - name: auth-0
        image: quay.io/pusher/oauth2_proxy:latest
        imagePullPolicy: Always
        args:
        - --skip-provider-button
        - --email-domain=fiziico.com
        - --upstream=http://svc-admin-vue,http://svc-admin-api/admin/#/admin/
        - --pass-authorization-header=true
        - --http-address=http://:4180
        - --cookie-domain=.admin.auto-provisioning.ix-security.work
        ports:
        - containerPort: 4180
        resources:
          requests:
            memory: 32Mi
          limits:
            memory: 64Mi
        env:
        - name: OAUTH2_PROXY_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: iap-secret
              key: client_id
        - name: OAUTH2_PROXY_COOKIE_SECRET
          valueFrom:
            secretKeyRef:
              name: iap-secret
              key: cookie_secret
        - name: OAUTH2_PROXY_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: iap-secret
              key: client_secret