apiVersion: apps/v1
kind: Deployment
metadata:
  name: loomio-channels
spec:
  replicas: 1
  selector:
    matchLabels:
      component: channels
  template:
    metadata:
      labels:
        component: channels
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        seccompProfile:
          type: RuntimeDefault
      containers:
      - name: channels
        image: loomio/loomio_channel_server:stable
        ports:
        - containerPort: 3000
          name: http
        env:
        - name: PORT
          value: "3000"
        - name: REDIS_URL
          value: {{ .redisUrl }}
        - name: APP_URL
          value: http://loomio.{{ .namespace }}.svc.cluster.local:80
        resources:
          requests:
            memory: 256Mi
            cpu: 50m
          limits:
            memory: 1Gi
            cpu: 500m
        livenessProbe:
          tcpSocket:
            port: 3000
          initialDelaySeconds: 30
          periodSeconds: 30
        readinessProbe:
          tcpSocket:
            port: 3000
          initialDelaySeconds: 10
          periodSeconds: 10
        securityContext:
          runAsNonRoot: true
          runAsUser: 1000
          allowPrivilegeEscalation: false
          capabilities:
            drop: [ALL]
          readOnlyRootFilesystem: false
          seccompProfile:
            type: RuntimeDefault