fluxcd-flux2/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: credentials-sync
  namespace: flux-system
spec:
  template:
    spec:
      initContainers:
      - image: bitnami/kubectl
        name: copy-kubectl
        # it's okay to do this because kubectl is a statically linked binary
        command:
        - sh
        - -ceu
        - cp $(which kubectl) /kbin/
        resources: {}
        volumeMounts:
        - name: kbin
          mountPath: /kbin
      containers:
      - name: sync
        volumeMounts:
        - name: kbin
          mountPath: /kbin
      volumes:
      - name: kbin
        emptyDir: {}