apiVersion: apps/v1
kind: Deployment
metadata:
  name: wild-directory-server
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: wild-directory-server
  template:
    metadata:
      labels:
        app: wild-directory-server
    spec:
      securityContext:
        runAsNonRoot: false
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: server
          image: git.civilsociety.dev/wild-cloud/wild-directory-server:latest
          ports:
            - containerPort: 5066
          env:
            - name: WILD_DIRECTORY_PATH
              value: /data/apps
            - name: WILD_DIRECTORY_GIT_URL
              value: {{ .gitUrl }}
            - name: WILD_DIRECTORY_GIT_BRANCH
              value: {{ .gitBranch }}
            - name: WILD_DIRECTORY_GIT_SYNC_INTERVAL
              value: {{ .gitSyncInterval }}
            - name: WILD_DIRECTORY_PORT
              value: "5066"
            - name: WILD_STATIC_DIR
              value: /static
          volumeMounts:
            - name: data
              mountPath: /data/apps
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
              add:
                - CHOWN
                - SETUID
                - SETGID
          readinessProbe:
            httpGet:
              path: /health
              port: 5066
            initialDelaySeconds: 10
            periodSeconds: 10
          livenessProbe:
            httpGet:
              path: /health
              port: 5066
            initialDelaySeconds: 30
            periodSeconds: 30
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: wild-directory-server-data