Example StreamSets Deployment manifest with keystore and truststore Volume and VolumeMounts

deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: streamsets-deployment-b039f713-794f-45c7-9c1b-4fec9e94f5af
    vendor: streamsets-sch
    env: na01
  name: streamsets-deployment-b039f713-794f-45c7-9c1b-4fec9e94f5af
  namespace: ns1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: streamsets-deployment-b039f713-794f-45c7-9c1b-4fec9e94f5af
  template:
    metadata:
      labels:
        app: streamsets-deployment-b039f713-794f-45c7-9c1b-4fec9e94f5af
        vendor: streamsets-sch
        env: na01
    spec:
      containers:
        - env:
            - name: STREAMSETS_DEPLOYMENT_ID
              value: b039f713-794f-45c7-9c1b-4fec9e94f5af:8030c2e9-1a39-11ec-a5fe-97c8d4369386
            - name: STREAMSETS_DEPLOYMENT_TOKEN
              valueFrom:
                secretKeyRef:
                  key: token
                  name: streamsets-deployment-secret-b039f713-794f-45c7-9c1b-4fec9e94f5af
                  optional: false
            - name: STREAMSETS_DEPLOYMENT_SCH_URL
              value: https://na01.hub.streamsets.com
          image: streamsets/datacollector:JDK17_5.12.0
          livenessProbe:
            failureThreshold: 20
            httpGet:
              path: /public-rest/ping
              port: engine-port
              scheme: HTTP
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 5
          name: streamsets-engine-b039f713-794f-45c7-9c1b-4fec9e94f5af
          ports:
            - containerPort: 18630
              name: engine-port
          resources:
            requests:
              memory: 2Gi
              cpu: "1"
          startupProbe:
            failureThreshold: 60
            httpGet:
              path: /public-rest/ping
              port: engine-port
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            timeoutSeconds: 5
          volumeMounts:
            - name: kafka-keystore
              mountPath: /resources/kafka-keystore.p12
              subPath: kafka-keystore.p12
            - name: kafka-keystore-password
              mountPath: /resources/kafka-keystore-password.txt
              subPath: kafka-keystore-password.txt
            - name: kafka-truststore
              mountPath: /resources/kafka-truststore.jks
              subPath: kafka-truststore.jks
            - name: kafka-truststore-password
              mountPath: /resources/kafka-truststore-password.txt
              subPath: kafka-truststore-password.txt
      volumes:
        - name: kafka-keystore
          secret:
            secretName: kafka-keystore
        - name: kafka-keystore-password
          secret:
            secretName: kafka-keystore-password
        - name: kafka-truststore
          secret:
            secretName: kafka-truststore
        - name: kafka-truststore-password
          secret:
            secretName: kafka-truststore-password

      dnsPolicy: Default