# Source: with-tarred-dep/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: with-tarred-dep
  labels:
    app.kubernetes.io/name: with-tarred-dep
    helm.sh/chart: with-tarred-dep-0.1.1
    app.kubernetes.io/instance: with-tarred-dep
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: with-tarred-dep
      app.kubernetes.io/instance: with-tarred-dep
  template:
    metadata:
      labels:
        app.kubernetes.io/name: with-tarred-dep
        helm.sh/chart: with-tarred-dep-0.1.1
        app.kubernetes.io/instance: with-tarred-dep
        app.kubernetes.io/managed-by: Helm
    spec:
      containers:
        - name: metadata-service
          env:
            - name: METADATASERVICE_UPSTREAM_API_URL
              value: ''
            - name: METADATASERVICE_OIDC_AUDIENCE
              value: ""
            - name: METADATASERVICE_OIDC_ISSUER
              value: ""
            - name: METADATASERVICE_OIDC_JWKSURI
              value: ""
            - name: METADATASERVICE_OIDC_CLAIMS_ROLES
              value: ""
            - name: METADATASERVICE_OIDC_CLAIMS_USERNAME
              value: ""
            - name: METADATASERVICE_DB_URI
              valueFrom:
                secretKeyRef:
                  name: with-tarred-dep-dbconn
                  key: uri
          image: "ghcr.io/metal-toolbox/hollow-metadataservice:v0.0.1"
          imagePullPolicy: Always
          volumeMounts:
            - name: dbcerts
              mountPath: "/dbcerts"
              readOnly: true
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          livenessProbe:
            httpGet:
              path: /healthz/liveness
              port: http
            initialDelaySeconds: 5
            timeoutSeconds: 2
          readinessProbe:
            httpGet:
              path: /healthz/readiness
              port: http
            initialDelaySeconds: 5
            timeoutSeconds: 2
          resources:
            limits:
              cpu: 4
              memory: 4Gi
            requests:
              cpu: 4
              memory: 4Gi
      volumes:
        - name: dbcerts
          secret:
            secretName: with-tarred-dep-crdb-ca
            defaultMode: 0400