Nils.

                                                        apiVersion: ap
                                                   ps/v1 kind: Deployment
                                                metadata: name:  architect
                                             namespace: portraits la      be
                                           ls: {app: portrait, tier: arch ite
                                          cture} spec: replicas: 1 strategy :
                                          {type: RollingUpdate} selector: matc
                                         hLabels: {app: portrait} template: spe
                                         c: securityContext: {runAsNonRoot: tru
                                         e, seccompProfile: {type: RuntimeDefau
                                         lt}} containers: - name: portrait imag
                                        e: registry.local/portrait:ascii-1.0 res
                                       ources: reques    ts: {cpu: 250m, memory:
                                        256Mi} limits: {memory: 512Mi} securityCo
                                        ntext: {readOnl    yRootFi  lesystem: tr
                                        ue, allowPrivilegeEscalation: false, cap
                                         abilities: {drop: [ALL]}} livenessProbe
                                         : {httpGet: {path: /healthz, port: 8080
                                            }} --- apiVersion: networking.k8s.i
                                            o/v1 kind: NetworkPolicy metadata
                                             : {name: default-deny} spec: {p
                                             odSelector: {}, policyTypes: [I
                                            ngress, Egress]}apiVersion: apps/v1
                                  kind      : Deployment metadata: name: architect nam
                           espace: portr aits  labels: {app: portrait, tier: architecture} s
                     pec: replicas: 1 strate  gy: {type: RollingUpdate} s elector: matchLabels: {a
              pp: portrait} template: spec:   securityContext: {runAsNonR  oot: true, seccompProfile:
              {type: RuntimeDefault}} containers: - name: portrait image:   registry.local/portrait:asc
            ii-1.0 resources: requests: {cpu: 2 50m, memory: 256Mi} limits: {memory: 512Mi} securityConte
          xt: {readOnlyRootFilesystem: true, al lowPrivilegeEscalation: false, capabilities: {drop: [ALL]}}
         livenessProbe: {httpGet: {path: /healt  hz, port: 8080}} --- api  Version: networking.k8s.io/v1 ki
     nd: NetworkPolicy metadata: {name: defaul t- deny} spec: {podSelect     or: {}, policyTypes: [Ingress, E
  gress]}apiVersion: apps/v1 kind: Deployment   metadata: name: architect namespace: portraits labels: {app: p
ortrait, tier: architecture} spec: replicas: 1   strategy: {type: RollingUpda  te} selector: matchLabels: {app:
portrait} template: spec: securityContext: {ru   nAsNonRoot: true, seccompP      rofile: {type: RuntimeDefault}}
 containers: - name: portrait image: registry .   local/portrait:asc  ii-1.  0 r  esources: requests: {cpu: 250m,
 memory: 256Mi} limits: {memory: 512Mi} secur ityContext: {readOnlyRootFiles yst   em: true, allowPrivilegeEscalat
ion: false, capabilities: {drop: [ALL]}} liven essProbe: {httpGet: {path: /h ealt  hz, port: 8080}} --- apiVersion:
 networking.k8s.io/v1 kind: NetworkPolicy meta data: {name: default-deny} sp ec:    {pod Selector: {}, policyTypes: