# diff manifest-original.yaml manifest-tweak.yaml
32d31
<           hostPort: 9033
# KUBECONFIG=kconf kubectl apply -f manifest-original.yaml
deployment.apps/myapp created
$ KUBECONFIG=kconf kubectl get rs -n my-system
NAME                                               DESIRED   CURRENT   READY   AGE
myapp-55758c985                                    1         1         1       8s

$ KUBECONFIG=kconf kubectl get pods -n my-system
NAME                                                     READY   STATUS    RESTARTS   AGE
myapp-55758c985-dft2b                                    1/1     Running   0          20s

$ KUBECONFIG=kconf kubectl apply -f manifest-tweak.yaml 
deployment.apps/myapp configured

$ KUBECONFIG=kconf kubectl get rs -n my-system
NAME                                               DESIRED   CURRENT   READY   AGE
myapp-5564fdd866                                   1         1         0       7s
myapp-55758c985                                    1         1         1       59s

$ KUBECONFIG=kconf kubectl get pods -n my-system
NAME                                                     READY   STATUS    RESTARTS   AGE
myapp-5564fdd866-2wwbg                                   0/1     Pending   0          18s
myapp-55758c985-dft2b                                    1/1     Running   0          70s

$ cat manifest-original.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
  namespace: my-system
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  selector:
    matchLabels:
      app: myapp
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: mgr
        image: docker-local.artifactory.eng.yadayada.com/tilt/nginx:v0 
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 9033
          hostPort: 9033
          name: api
          protocol: TCP
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: false
          runAsNonRoot: false
      dnsPolicy: ClusterFirst
      hostNetwork: true
      nodeSelector:
        node-role.kubernetes.io/control-plane: ""
      priorityClassName: system-cluster-critical
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: my-sa
      serviceAccountName: my-sa
      terminationGracePeriodSeconds: 30
      tolerations:
      - key: CriticalAddonsOnly
        operator: Exists
      - effect: NoSchedule
        key: node-role.kubernetes.io/control-plane
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
      - effect: NoSchedule
        key: node.kubernetes.io/not-ready
      - effect: NoSchedule
        key: node.cloudprovider.kubernetes.io/uninitialized
        value: "true"

$ KUBECONFIG=kconf kubectl version
Client Version: v1.29.7
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.28.10