{ myLib, ... }: {
  kubernetes.resources = {
    deployments.server.spec = {
      selector.matchLabels.app = "kms";

      template = {
        metadata.labels.app = "kms";

        spec.containers.kms = {
          image = "teddysun/kms";
          ports.kms.containerPort = 1688;
        };
      };
    };

    services.server.spec = {
      type = "LoadBalancer";
      loadBalancerIP = myLib.globals.kmsIPv4;
      selector.app = "kms";

      ports.kms = {
        port = 1688;
        targetPort = "kms";
      };
    };
  };
}