---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: towerops
  namespace: towerops
spec:
  replicas: 1
  selector:
    matchLabels:
      app: towerops
  template:
    metadata:
      labels:
        app: towerops
    spec:
      imagePullSecrets:
        - name: gitlab-registry
      securityContext:
        runAsNonRoot: true
        runAsUser: 65534
        fsGroup: 65534
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: towerops
          image: registry.gitlab.com/towerops/towerops:latest
          imagePullPolicy: Always
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            runAsUser: 65534
            capabilities:
              drop:
                - ALL
            seccompProfile:
              type: RuntimeDefault
          ports:
            - containerPort: 4000
              name: http
            - containerPort: 4369
              name: epmd
            - containerPort: 9000
              name: dist
          env:
            - name: POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: RELEASE_DISTRIBUTION
              value: "name"
            - name: RELEASE_NODE
              value: "towerops@$(POD_IP)"
            - name: PORT
              value: "4000"
            - name: PHX_HOST
              value: "towerops.net"
            - name: MIX_ENV
              value: "prod"
            - name: RELEASE_COOKIE
              valueFrom:
                secretKeyRef:
                  name: towerops-secrets
                  key: RELEASE_COOKIE
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: towerops-secrets
                  key: SECRET_KEY_BASE
          envFrom:
            - secretRef:
                name: towerops-db
            - secretRef:
                name: towerops-aws
          resources:
            requests:
              memory: "1Gi"
              cpu: "100m"
            limits:
              memory: "2Gi"
              cpu: "500m"
          livenessProbe:
            httpGet:
              path: /health
              port: 4000
            initialDelaySeconds: 30
            periodSeconds: 10
          readinessProbe:
            httpGet:
              path: /health
              port: 4000
            initialDelaySeconds: 10
            periodSeconds: 5