apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/name: hydra-oidc
  name: hydra-oidc
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: hydra-oidc
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/name: hydra-oidc
    spec:
      containers:
      - name: hydra-oidc-php-fpm
        image: reg.cadoles.com/cadoles/hydra-oidc-base:2024.4.2-develop.1349.c4711f6
        imagePullPolicy: Always
        args: ["/usr/sbin/php-fpm81", "-F", "-e"]
        readinessProbe:
          exec:
            command:
              - sh
              - -c
              - test -f /etc/php81/php-fpm.d/www.conf
        livenessProbe:
          exec:
            command:
              - php
              - bin/console
              - -V
          initialDelaySeconds: 10
          periodSeconds: 30
        env:
          - name: PHP_FPM_LISTEN
            value: 127.0.0.1:9000
          - name: PHP_MEMORY_LIMIT
            value: 128m
          - name: PHP_FPM_MEMORY_LIMIT
            value: 128m
        envFrom:
          - configMapRef:
              name: hydra-oidc-env
        resources: {}
        securityContext:
          runAsNonRoot: true
          runAsGroup: 1000
          runAsUser: 1000

      - name: hydra-oidc-caddy
        image: reg.cadoles.com/cadoles/hydra-oidc-base:2024.4.2-develop.1349.c4711f6
        imagePullPolicy: Always
        args:
          [
            "/usr/sbin/caddy",
            "run",
            "--adapter",
            "caddyfile",
            "--config",
            "/etc/caddy/Caddyfile",
          ]
        readinessProbe:
          httpGet:
            path: /healthy
            port: 8080
          initialDelaySeconds: 5
          timeoutSeconds: 5
          periodSeconds: 10
        livenessProbe:
          httpGet:
            path: /healthy
            port: 8080
          initialDelaySeconds: 15
          timeoutSeconds: 5
          periodSeconds: 15
        ports:
          - containerPort: 8080
            name: http
        envFrom:
          - configMapRef:
              name: hydra-oidc-env
        env:
          - name: CADDY_APP_UPSTREAM_BACKEND_SERVER
            value: 127.0.0.1:9000
          - name: CADDY_HTTPS_PORT
            value: "8443"
          - name: CADDY_HTTP_PORT
            value: "8080"
          - name: CADDY_DATA_FS
            value: "/tmp/caddy"
          - name: CADDY_APP_ROOT_PUBLIC
            value: "/app/public/"
        resources: {}
        securityContext:
          runAsNonRoot: true
          runAsGroup: 1000
          runAsUser: 1000
      restartPolicy: Always