distrust-stack/kustomizations/website/wellknown.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wellknown-openpgp
spec:
  replicas: 2
  selector:
    matchLabels:
      app: wellknown-openpgp
  template:
    metadata:
      labels:
        app: wellknown-openpgp
    spec:
      initContainers:
      - name: generate-wot-data
        image: registry.gitlab.com/sequoia-pgp/sequoia
        # TODO: distrust.co is hardcoded
        command: ["sh"]
        args:
        - -c
        - >-
          cat /keys/* |
          sq wkd generate -d /output distrust.co
        volumeMounts:
        - name: data
          mountPath: /output
        - name: keys
          mountPath: /keys
      containers:
      - name: wellknown-openpgp
        image: nginx
        ports:
        - containerPort: 80
        volumeMounts:
        - name: data
          mountPath: /usr/share/nginx/html
      volumes:
      - name: data
        emptyDir: {}
      - name: keys
        configMap:
          name: openpgp-keys
---
apiVersion: v1
kind: Service
metadata:
  name: wellknown-openpgp
spec:
  ports:
  - name: http
    port: 80
    targetPort: 80
  selector:
    app: wellknown-openpgp