docker run -d --name pentagi \
  -p 8443:8443 \
  -e OPENAI_API_KEY=sk-xxx \
  docker.io/vxcontrol/pentagi:latest

docker run -d --name pentagi \
  --restart unless-stopped \
  -p 127.0.0.1:8443:8443 \
  -e OPENAI_API_KEY=sk-xxx \
  -e PENTAGI_TARGET_SCOPE=192.168.100.0/24 \
  -v /data/pentagi/reports:/reports \
  docker.io/vxcontrol/pentagi:0.8.0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pentagi
  namespace: redteam-lab
spec:
  replicas: 1
  selector:
    matchLabels:
      app: pentagi
  template:
    metadata:
      labels:
        app: pentagi
    spec:
      containers:
        - name: pentagi
          image: docker.io/vxcontrol/pentagi:0.8.0
          ports:
            - containerPort: 8443
          envFrom:
            - secretRef:
                name: pentagi-secrets
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: pentagi-egress
  namespace: redteam-lab
spec:
  podSelector:
    matchLabels:
      app: pentagi
  policyTypes: [Egress]
  egress:
    - to:
        - ipBlock:
            cidr: 192.168.100.0/24