diff --git a/hachimitsu-random-bot/hachimitsu-random-bot-deployment.yaml b/hachimitsu-random-bot/hachimitsu-random-bot-deployment.yaml
new file mode 100644
index 0000000..3a14c2c
--- /dev/null
+++ b/hachimitsu-random-bot/hachimitsu-random-bot-deployment.yaml
@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hachimitsu-random-bot
+  labels:
+    app: hachimitsu-random-bot
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: hachimitsu-random-bot
+  template:
+    metadata:
+      labels:
+        app: hachimitsu-random-bot
+    spec:
+      containers:
+        - name: hachimitsu-random-bot
+          image: ghcr.io/zel9278/hachimitsu-random-bot:main@sha256:c7a4fa886f48ab58ef41ad38256c6c2d7dc863fcacb9c95c6eda8d1ecf4d0567
+          imagePullPolicy: IfNotPresent # because digest pinning
+          envFrom:
+            - secretRef:
+                name: hrb-secrets
+          securityContext:
+            capabilities:
+              drop:
+                - CAP_MKNOD
+                - CAP_NET_RAW
+                - CAP_AUDIT_WRITE
+      tolerations:
+        - key: "low-spec"
+          operator: "Equal"
+          value: "E2.1.Micro"
+          effect: "NoExecute"