---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: template-solver
  namespace: template-solver
  labels:
    app: template-solver
spec:
  replicas: 1
  selector:
    matchLabels:
      app: template-solver
  template:
    metadata:
      labels:
        app: template-solver
    spec:
      serviceAccountName: template-solver
      containers:
      - name: template-solver
        image: git.giftfish.de/ston1th/template-solver
        imagePullPolicy: Always
        securityContext:
          runAsUser: 65532
          runAsGroup: 65532
          capabilities:
            drop: ["ALL"]
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
        args:
        - --secure-port=8443
        - --tls-cert-file=/tls/tls.crt
        - --tls-private-key-file=/tls/tls.key
        env:
        - name: GROUP_NAME
          value: template-solver
        ports:
        - name: https
          containerPort: 8443
          protocol: TCP
        livenessProbe:
          httpGet:
            scheme: HTTPS
            path: /healthz
            port: https
        readinessProbe:
          httpGet:
            scheme: HTTPS
            path: /healthz
            port: https
        volumeMounts:
          - name: certs
            mountPath: /tls
            readOnly: true
      volumes:
      - name: certs
        secret:
          secretName: template-solver-cert