From 3782241a88c2b86ac7ff6e9f1acde96ede7b9d10 Mon Sep 17 00:00:00 2001
From: root <root@vmi3024229.contaboserver.net>
Date: Fri, 14 Aug 2026 03:15:07 +0200
Subject: [PATCH] Add management-platform Deployment manifest with viewer SA
 wired in

Source-of-truth manifest for the management-platform Deployment, with
serviceAccountName: management-platform-viewer-sa added so the pod can
authenticate for the read-only k8s cluster-view feature. Not yet applied
to the cluster.
---
 k8s/management-platform-deployment.yaml | 70 +++++++++++++++++++++++++
 1 file changed, 70 insertions(+)
 create mode 100644 k8s/management-platform-deployment.yaml

diff --git a/k8s/management-platform-deployment.yaml b/k8s/management-platform-deployment.yaml
new file mode 100644
index 0000000..981d0bf
--- /dev/null
+++ b/k8s/management-platform-deployment.yaml
@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: management-platform
+  namespace: management-platform
+  labels:
+    app: management-platform
+    app.kubernetes.io/managed-by: navitrends-pfe-migration
+    owner: ameni-boukattaya
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: management-platform
+  template:
+    metadata:
+      labels:
+        app: management-platform
+        app.kubernetes.io/managed-by: navitrends-pfe-migration
+        owner: ameni-boukattaya
+    spec:
+      serviceAccountName: management-platform-viewer-sa
+      containers:
+      - name: management-platform
+        image: management-platform:latest
+        imagePullPolicy: Never
+        ports:
+        - containerPort: 5000
+          protocol: TCP
+        env:
+        - name: HOSTNAME
+          value: vmi3024229
+        volumeMounts:
+        - mountPath: /var/run/docker.sock
+          name: docker-sock
+        - mountPath: /root
+          name: root-dir
+        - mountPath: /etc/passwd
+          name: etc-passwd
+          readOnly: true
+        - mountPath: /etc/shadow
+          name: etc-shadow
+          readOnly: true
+        - mountPath: /app/config.py
+          name: config-py
+          readOnly: true
+      volumes:
+      - name: docker-sock
+        hostPath:
+          path: /var/run/docker.sock
+          type: Socket
+      - name: root-dir
+        hostPath:
+          path: /root
+          type: Directory
+      - name: etc-passwd
+        hostPath:
+          path: /etc/passwd
+          type: File
+      - name: etc-shadow
+        hostPath:
+          path: /etc/shadow
+          type: File
+      - name: config-py
+        hostPath:
+          path: /root/management-platform/config.py
+          type: File