apiVersion: apps/v1
kind: Deployment
metadata:
  name: syncthing
spec:
  template:
    containers:
      - name: syncthing
        volumeMounts:
          # - name: sync-keys
          #   mountPath: /var/syncthing/config/cert.pem
          #   subPath: cert.pem
          #   readOnly: true
          - name: sync-keys
            mountPath: /var/syncthing/config/key.pem
            readOnly: true
            subPath: key.pem
    volumes:
      - name: sync-keys
        secret:
          secretName: sync-secret