apiVersion: v1
kind: Namespace
metadata:
  name: web-mesh
  labels:
    istio-injection: enabled
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: frontend
  namespace: web-mesh
---
apiVersion: v1
kind: Namespace
metadata:
  name: payments-mesh
  labels:
    istio-injection: enabled
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: payments-api
  namespace: payments-mesh
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: payments-api
  namespace: payments-mesh
spec:
  replicas: 1
  selector:
    matchLabels:
      app: payments-api
  template:
    metadata:
      labels:
        app: payments-api
    spec:
      serviceAccountName: payments-api
      containers:
        - name: api
          image: nginxinc/nginx-unprivileged:1.27
          ports:
            - containerPort: 8080