anchor.diff:    containers:
     - ...
       volumeMounts:
  -    - name: ssh-keys
  +    - name: buildkite-agent-ssh
         mountPath: /root/.ssh/id_rsa
         subPath: id_rsa
  -    - name: ssh-keys
  +    - name: buildkite-agent-ssh
         mountPath: /root/.ssh/id_rsa.pub
         subPath: id_rsa.pub
       ...
     volumes:
  -  - name: ssh-keys
  +  - name: buildkite-agent-ssh
       secret:
         secretName: buildkite-agent-ssh
         defaultMode: 0400
     ...
  +
   ```
   
   If you git clone over https (for example using a [GitHub API token](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/)) you could mount a [git-credentials file](https://git-scm.com/docs/git-credential-store#_storage_format) instead:
  
positive.code: And verify that the agent has registered successfully in the logs:
  
  ```shell
  $ kubectl logs buildkite-agent-3220167863-dtzcf
  
    _           _ _     _ _    _ _                                _
   | |         (_) |   | | |  (_) |                              | |
  
negative.code:     metadata:
        labels:
          app: buildkite-agent
        annotations:
          "cluster-autoscaler.kubernetes.io/safe-to-evict": "true"
      spec:
        containers:
          - name: buildkite
            image: "buildkite/agent:3.29.0"
            env:
              - name: DOCKER_HOST
                value: tcp://localhost:2375
              - name: BUILDKITE_AGENT_TOKEN
                valueFrom: {secretKeyRef: {name: buildkite-agent, key: token}}
            volumeMounts:
              - name: buildkite-builds
                mountPath: /buildkite/builds
          - name: dind-daemon
            image: docker:20.10.6-dind
            command: ["dockerd", "--host=unix:///var/run/docker.sock", "--host=tcp://0.0.0.0:2375"]
            securityContext:
                privileged: true
            volumeMounts:
              - name: buildkite-builds
                mountPath: /buildkite/builds
              - name: docker-graph-storage
                mountPath: /var/lib/docker
        terminationGracePeriodSeconds: 900
        volumes:
          - name: docker-graph-storage
            emptyDir: {}
          - name: buildkite-builds
            emptyDir: {}
  
  # (press Control-D)
  
  deployment "buildkite-agent" created
  