apiVersion: apps/v1
kind: Deployment
metadata:
  name: memcached
spec:
  replicas: {{ .replicas }}
  selector:
    matchLabels:
      component: cache
  template:
    metadata:
      labels:
        component: cache
    spec:
      containers:
      - name: memcached
        image: "{{ .image }}"
        ports:
        - containerPort: {{ .port }}
          name: memcached
        args:
        - -m
        - "{{ .memoryLimit }}"
        - -c
        - "{{ .maxConnections }}"
        - -p
        - "{{ .port }}"
        resources:
          requests:
            memory: "{{ .resources.requests.memory }}"
            cpu: "{{ .resources.requests.cpu }}"
          limits:
            memory: "{{ .resources.limits.memory }}"
            cpu: "{{ .resources.limits.cpu }}"
        securityContext:
          runAsNonRoot: true
          runAsUser: 11211
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: true