apiVersion: apps/v1
kind: Deployment
metadata:
  name: credential-server
  namespace: services
  labels:
    app: credential-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: credential-server
  template:
    metadata:
      labels:
        app: credential-server
    spec:
      containers:
        - name: credential-server
          image: registry.researchstack.info/infra/credential-server:latest
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8444
              name: http
          env:
            - name: RS_CREDENTIAL_CONFIG
              value: /etc/credential-server/credentials.json
            - name: RS_SURFACE_PORT
              value: "8444"
            - name: RS_SURFACE_HOST
              value: "0.0.0.0"
            - name: RUST_LOG
              value: "info"
          volumeMounts:
            - name: config
              mountPath: /etc/credential-server
              readOnly: true
          resources:
            requests:
              memory: 64Mi
              cpu: 50m
            limits:
              memory: 128Mi
      volumes:
        - name: config
          secret:
            secretName: credential-server-config
            optional: true