---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: coreid
  namespace: coreid
spec:
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: coreid
  template:
    metadata:
      name: coreid
      labels:
        app: coreid
    spec:
      volumes:
        - name: coreid-secrets-vol
          secret:
            secretName: coreid-secrets
            optional: false
      containers:
        - name: coreid
          image: registry.apps.millslan.net/starship/coreid:latest
          imagePullPolicy: Always
          volumeMounts:
            - name: coreid-secrets-vol
              mountPath: /secrets
              readOnly: true
          env:
            - name: APP_URL
              value: "https://coreid.garrettmills.dev/"
            - name: DATABASE_HOST
              value: 'db03.millslan.net'
            - name: DATABASE_NAME
              value: 'coreid_p1'
            - name: LDAP_BASE_DC
              value: 'dc=platform,dc=local'
            - name: REDIS_HOST
              value: coreid-redis.coreid.svc.cluster.local
            - name: SECRET
              valueFrom:
                secretKeyRef:
                  key: SECRET
                  name: coreid-secrets
                  optional: false
            - name: APP_NAME
              value: "Starship CoreID"
            - name: SERVER_PORT
              value: '8000'
            - name: DATABASE_PORT
              value: '27017'
            - name: DATABASE_AUTH
              value: 'false'
            - name: ENVIRONMENT
              value: production
            - name: SSL_ENABLE
              value: 'false'
            - name: LDAP_SERVER_PORT
              value: '636'
            - name: LDAP_SSL_ENABLE
              value: 'true'
            - name: LDAP_CERT_PATH
              value: '/secrets/X509_CERT'
            - name: LDAP_CERT_KEY_PATH
              value: '/secrets/X509_KEY'
            - name: SAML_CERT_FILE
              value: '/secrets/X509_CERT'
            - name: SAML_KEY_FILE
              value: '/secrets/X509_KEY'
            - name: RADIUS_CERT_FILE
              value: '/secrets/X509_CERT'
            - name: RADIUS_KEY_FILE
              value: '/secrets/X509_KEY'
            - name: REDIS_PORT
              value: '6379'
            - name: SMTP_PORT
              value: '587'
            - name: OPENID_CONNECT_PROXY
              value: 'true'
            - name: SESSION_MAX_AGE
              value: '1209600000'