apiVersion: v1
kind: Secret
metadata:
  name: s3proxy
  namespace: default
stringData:
  [...]
  S3PROXY_SECURE_ENDPOINT: "https://0.0.0.0:443"
  S3PROXY_KEYSTORE_PATH: "tls/keystore.jks"
  S3PROXY_KEYSTORE_PASSWORD: password

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: s3proxy
  namespace: default
  labels:
    app: s3proxy
spec:
  replicas: 1
  selector:
    matchLabels:
      app: s3proxy
  template:
    metadata:
      labels:
        app: s3proxy
    spec:
      containers:
        - name: s3proxy
          image: gaul/s3proxy
          ports:
            - name: https
              containerPort: 443
          envFrom:
            - secretRef:
                name: s3proxy
          resources:
            requests:
              cpu: 1
              memory: "1Gi"
            limits:
              memory: "1Gi"
          volumeMounts:
          - name: keystore
            mountPath: /opt/s3proxy/tls
      volumes:
        - name: keystore
          secret:
            secretName: s3proxy-keystore
            items:
              - key: keystore.jks
                path: keystore.jks