apiVersion: v1
kind: Pod
metadata:
  name: c30-readonly
  labels:
    app: c30-probe-readonly
spec:
  securityContext:
    fsGroup: 65532
  containers:
    - name: probe
      image: REPLACE_WITH_IMAGE_BY_DIGEST
      imagePullPolicy: IfNotPresent
      command: [python3, /app/probe_app.py]
      args: [--host, 0.0.0.0, --state-dir, /var/lib/probe]
      ports:
        - containerPort: 18080
      readinessProbe:
        httpGet:
          path: /ready
          port: 18080
      resources:
        requests:
          cpu: 50m
          memory: 32Mi
        limits:
          cpu: 250m
          memory: 128Mi
      volumeMounts:
        - name: state
          mountPath: /var/lib/probe
          readOnly: true
  volumes:
    - name: state
      persistentVolumeClaim:
        claimName: c30-state
        readOnly: true