deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ssh-resume-app
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ssh-resume
  template:
    metadata:
      labels:
        app: ssh-resume
    spec:
      containers:
      - name: ssh-resume
        image: us-central1-docker.pkg.dev/murd3rbot/sshresume/sshresume:20260113-0de4bd6@sha256:7b035e1b5476824081c9cbca3cfe1a47b984260b41c263e2987339d5579872cc
        args:
        - --host
        - 0.0.0.0
        ports:
        - containerPort: 23234
        volumeMounts:
        - name: host-key
          mountPath: /app/.ssh
          readOnly: true
      volumes:
      - name: host-key
        secret:
          secretName: ssh-host-key
          defaultMode: 256 # 0400 in octal (read-only for owner) or 384 (0600)
---

apiVersion: v1
kind: Service
metadata:
  name: ssh-resume-service
spec:
  type: LoadBalancer
  selector:
    app: ssh-resume
  ports:
    - protocol: TCP
      port: 22           # External port (User types: ssh <IP>)
      targetPort: 23234  # Internal port (Where the app is listening)