#  ============LICENSE_START=======================================================
#  Copyright (C) 2020-2022 Nordix Foundation
#  ================================================================================
#  Licensed under the Apache License, Version 2.0 (the "License");
#  you may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#        http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.
#
#  SPDX-License-Identifier: Apache-2.0
#  ============LICENSE_END=========================================================
apiVersion: apps/v1
kind: Deployment
metadata:
  name: $ICS_APP_NAME
  namespace: $KUBE_NONRTRIC_NAMESPACE
  labels:
    run: $ICS_APP_NAME
    autotest: ICS
spec:
  replicas: 1
  selector:
    matchLabels:
      run: $ICS_APP_NAME
  template:
    metadata:
      labels:
        run: $ICS_APP_NAME
        autotest: ICS
    spec:
      securityContext:
        runAsUser: 0
# Need to run as root to be able to store files in dir mounted as a hostPath volume
      containers:
      - name: $ICS_APP_NAME
        image: $ICS_IMAGE
        imagePullPolicy: $KUBE_IMAGE_PULL_POLICY
        ports:
        - name: http
          containerPort: $ICS_INTERNAL_PORT
        - name: https
          containerPort: $ICS_INTERNAL_SECURE_PORT
        volumeMounts:
        - mountPath: $ICS_CONFIG_MOUNT_PATH/$ICS_CONFIG_FILE
          subPath: $ICS_CONFIG_FILE
          name: ics-conf-name
        - mountPath: $ICS_CONTAINER_MNT_DIR
          name: ics-data-name
#ICS_JWT_START
        - mountPath: $ICS_SIDECAR_MOUNT
          name: token-cache-volume
#ICS_JWT_STOP
#ICS_JWT_START
      - name: $AUTHSIDECAR_APP_NAME
        image: $AUTHSIDECAR_IMAGE
        imagePullPolicy: $KUBE_IMAGE_PULL_POLICY
        env:
        - name: CREDS_GRANT_TYPE
          value: $ICS_CREDS_GRANT_TYPE
        - name: CREDS_CLIENT_SECRET
          value: $ICS_CREDS_CLIENT_SECRET
        - name: CREDS_CLIENT_ID
          value: $ICS_CREDS_CLIENT_ID
        - name: OUTPUT_FILE
          value: $ICS_SIDECAR_JWT_FILE
        - name: AUTH_SERVICE_URL
          value: $ICS_AUTH_SERVICE_URL
        volumeMounts:
        - mountPath: $ICS_SIDECAR_MOUNT
          name: token-cache-volume
#ICS_JWT_STOP
      volumes:
      - configMap:
          defaultMode: 420
          name: $ICS_CONFIG_CONFIGMAP_NAME
        name: ics-conf-name
      - persistentVolumeClaim:
          claimName: $ICS_DATA_PVC_NAME
        name: ics-data-name
#ICS_JWT_START
      - name: token-cache-volume
        emptyDir: {}
#ICS_JWT_STOP

# Selector will be set when pod is started first time
      nodeSelector: