Gluttony-Cluster/freshrss/freshrss-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: freshrss
  namespace: freshrss-ns
spec:
  replicas: 1
  selector:
    matchLabels:
      app: freshrss
  template:
    metadata:
      labels:
        app: freshrss
    spec:
      containers:
      - name: freshrss
        image: linuxserver/freshrss
        env:
        - name: OIDC_ENABLED
          value: "TRUE" 
        - name: OIDC_REMOTE_USER_CLAIM
          value: "preferred_username"
        - name: OIDC_SCOPES
          value: "openid profile"
        - name: OIDC_X_FORWARDED_HEADERS
          value: "X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto"
        - name: OIDC_PROVIDER_METADATA_URL
          valueFrom:
            secretKeyRef:
              name: freshrss-oidc-config
              key: metadata-url
        - name: OIDC_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: freshrss-oidc-config
              key: client-id
        - name: OIDC_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: freshrss-oidc-config
              key: client-secret
        - name: OIDC_CLIENT_CRYPTO_KEY
          valueFrom:
            secretKeyRef:
              name: freshrss-oidc-config
              key: crypto-key
        ports:
        - containerPort: 80
        volumeMounts:
        - name: freshrss-storage
          mountPath: /config
      volumes:
      - name: freshrss-storage
        persistentVolumeClaim:
          claimName: freshrss-pvc