apiVersion: apps/v1
kind: Deployment
metadata:
  name: backend-deployment
  labels:
    app: backend
spec:
  replicas: {{ .Values.backend.replicas }}
  selector:
    matchLabels:
      app: backend
  template:
    metadata:
      labels:
        app: backend
    spec:
      serviceAccountName: {{ required ".Values.backend.serviceAccountName required" .Values.backend.serviceAccountName }}
      volumes:
        - name: jwt
          secret:
            secretName: {{ required ".Values.backend.jwt.secretName required" .Values.backend.jwt.secretName }}
      containers:
        - name: backend-pod
          image: "harbor.dinauer.dev/kubooboo/backend:{{ .Values.backend.image.tag }}"
          resources:
            requests:
              memory: "256Mi"
              cpu: "150m"
            limits:
              memory: "512Mi"
              cpu: "1000m"
          ports:
            - containerPort: 8080
          volumeMounts:
            - name: jwt
              mountPath: /etc/secrets
              readOnly: true
          env:
            - name: DB_USER
              valueFrom:
                secretKeyRef:
                  name: {{ required ".Values.backend.database.user.secretName required" .Values.backend.database.user.secretName }}
                  key: username
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: {{ required ".Values.backend.database.user.secretName required" .Values.backend.database.user.secretName }}
                  key: password
            - name: DB_HOST
              value: {{ required ".Values.backend.database.host required" .Values.backend.database.host }}
            - name: DB_PORT
              value: "{{ required ".Values.backend.database.port required" .Values.backend.database.port }}"
            - name: DB_DATABASE
              value: {{ required ".Values.backend.database.database required" .Values.backend.database.database }}
            - name: DB_SCHEMA
              value: {{ required ".Values.backend.database.schema required" .Values.backend.database.schema }}
            - name: QUARKUS_HTTP_CORS_ORIGINS
              value: "{{ .Values.url.schema }}://{{ .Values.url.host }},{{ .Values.url.wsSchema }}://{{ .Values.url.host }}"
            - name: PRIVATE_KEY_LOCATION
              value: /etc/secrets/PRIVATE_KEY
            - name: PUBLIC_KEY_LOCATION
              value: /etc/secrets/PUBLIC_KEY
            - name: CURRENT_NAMESPACE
              value: {{ .Release.Namespace }}
            - name: BIG_BUCKET_URL
              value: http://big-bucket:80
            - name: BIG_BUCKET_USERNAME
              valueFrom:
                secretKeyRef:
                  name: {{ required ".Values.bigBucket.user.secretName required" .Values.bigBucket.user.secretName }}
                  key: username
            - name: BIG_BUCKET_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: {{ required ".Values.bigBucket.user.secretName required" .Values.bigBucket.user.secretName }}
                  key: password