apiVersion: apps/v1 kind: Deployment metadata: name: ungleich-firefox-java-vnc002 spec: selector: matchLabels: app: ungleich-firefox-java-vnc002 replicas: 1 template: metadata: labels: app: ungleich-firefox-java-vnc002 spec: containers: - name: firefox image: ungleich/firefox-java-vnc:0.0.2 imagePullPolicy: Always volumeMounts: - mountPath: /dev/shm name: cache-volume securityContext: privileged: true capabilities: add: ["SYS_ADMIN" ] volumes: - emptyDir: medium: Memory sizeLimit: 2Gi name: cache-volume --- apiVersion: v1 kind: Service metadata: name: ungleich-firefox-java-vnc002 labels: app: ungleich-firefox-java-vnc002 spec: type: ClusterIP ports: - port: 5900 name: vnc selector: app: ungleich-firefox-java-vnc002