apiVersion: apps/v1 kind: Deployment metadata: name: homeassistant spec: template: spec: containers: - name: wireguard-sidecar image: wireguard securityContext: privileged: true volumeMounts: - name: wireguard-config mountPath: /config/wg_confs/ volumes: - name: wireguard-config secret: secretName: wireguard-config