apiVersion: extensions/v1beta1 kind: Deployment metadata: name: deployment spec: template: spec: containers: - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c name: admission-webhook volumeMounts: - mountPath: /etc/webhook/certs name: webhook-cert readOnly: true volumes: - name: webhook-cert secret: secretName: webhook-certs serviceAccountName: service-account