apiVersion: apps/v1
kind: Deployment
metadata:
  name: was-sys
  labels:
    app.kubernetes.io/name: was-sys
    app.kubernetes.io/part-of: axhub-sys
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: was-sys
  template:
    metadata:
      labels:
        app.kubernetes.io/name: was-sys
        app.kubernetes.io/part-of: axhub-sys
    spec:
      containers:
        - name: was-sys
          image: was-sys:latest
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8086
          envFrom:
            - configMapRef:
                name: datsy-runtime-config
            - secretRef:
                name: datsy-runtime-secrets
          env:
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: AXHUB_TOOL_URL
              value: http://was-sys.$(POD_NAMESPACE).svc.cluster.local:8086
          resources:
            requests:
              cpu: 250m
              memory: 512Mi
            limits:
              cpu: "1"
              memory: 1Gi
          readinessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 20
            periodSeconds: 10
            timeoutSeconds: 3
            failureThreshold: 6
          livenessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 60
            periodSeconds: 20
            timeoutSeconds: 3
            failureThreshold: 3
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
            seccompProfile:
              type: RuntimeDefault