apiVersion: apps/v1
kind: Deployment
metadata:
  name: service-docker-repository-query
  namespace: app-notifications
spec:
  replicas: 1
  selector:
    matchLabels:
      app: service-docker-repository-query
  template:
    metadata:
      labels:
        app: service-docker-repository-query
    spec:
      imagePullSecrets:
        - name: ghcr-secret
      initContainers:
        - name: copy-secrets
          image: busybox
          command:
            - sh
            - -c
            - |
              for f in /secrets/*; do
                cp "$f" /etc/secrets/
                chmod 666 "/etc/secrets/$(basename $f)"
              done
          volumeMounts:
            - name: service-docker-repository-query-secrets
              mountPath: /secrets
            - name: writable-secrets
              mountPath: /etc/secrets
      containers:
        - name: service-docker-repository-query
          image: ghcr.io/gansejunge/app-notifications-service-docker-repository-query:19
          ports:
            - containerPort: 5000
              name: fastapi
            - containerPort: 9000
              name: metrics
          env:
            - name: DB_HOST
              value: "mysql.app-notifications.svc.cluster.local"
            - name: BACKEND_API_URL
              value: "http://backend-api-internal.app-notifications.svc.cluster.local:8101/internal/receive-notifications"
          volumeMounts:
            - name: writable-secrets
              mountPath: /etc/secrets
      volumes:
        - name: service-docker-repository-query-secrets
          secret:
            secretName: service-docker-repository-query
        - name: writable-secrets
          emptyDir: {}