apiVersion: apps/v1 kind: Deployment metadata: name: deployment spec: replicas: 1 template: spec: containers: - command: - /manager args: - "-userid-header" - $(userid-header) - "-userid-prefix" - $(userid-prefix) - "-workload-identity" - $(gcp-sa) image: gcr.io/kubeflow-images-public/profile-controller:v20190619-v0-219-gbd3daa8c-dirty-1ced0e imagePullPolicy: Always name: manager - command: - /opt/kubeflow/access-management args: - "-cluster-admin" - $(admin) - "-userid-header" - $(userid-header) - "-userid-prefix" - $(userid-prefix) image: gcr.io/kubeflow-images-public/kfam:v20190612-v0-170-ga06cdb79-dirty-a33ee4 imagePullPolicy: Always name: kfam serviceAccountName: controller-service-account