---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: message-hub
  namespace: message-hub
  labels:
    app: message-hub
    service: message-hub
spec:
  replicas: 1
  selector:
    matchLabels:
      app: message-hub
  template:
    metadata:
      labels:
        app: message-hub
        service: message-hub
    spec:
      containers:
        - name: message-hub
          image: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_24425472
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: WORKER_TIMEOUT
              value: "60"
            - name: PYTHONPATH
              value: src
            - name: SETTINGS_MAX_RETRIES
              value: "1"
            - name: SETTINGS_TOPICS
              value: '{"planning": "pm", "assets": "assets_broadcast", "project_entity":
                "issues_broadcast"}'
            - name: SETTINGS_PDF_CONVERTER_HOST
              value: http://export-project-service.django.svc.cluster.local:8000
            - name: SAREX_BASE_HOST
              value: http://backend-service.pm.svc.cluster.local:8000
            - name: CACHE_HOST
              value: redis.pm.svc.cluster.local
            - name: CACHE_PORT
              value: "6379"
            - name: KAFKA_SECURITY_PROTOCOL
              value: SSL
            - name: KAFKA_SASL_MECHANISM
              value: SCRAM-SHA-512
            - name: KAFKA_SSL_CAFILE
              value: /usr/local/share/ca-certificates/kafka.crt
            - name: KAFKA_USERNAME
              valueFrom:
                secretKeyRef:
                  key: username
                  name: kafka-secret
            - name: KAFKA_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: kafka-secret
            - name: KAFKA_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: kafka-secret
            - name: KAFKA_HOST
              valueFrom:
                secretKeyRef:
                  key: hostname
                  name: kafka-secret
            - name: DB_USERNAME
              valueFrom:
                secretKeyRef:
                  key: username
                  name: postgresql-secret
            - name: DB_DATABASE
              valueFrom:
                secretKeyRef:
                  key: database
                  name: postgresql-secret
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: postgresql-secret
            - name: DB_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: postgresql-secret
            - name: S3_LOGIN
              valueFrom:
                secretKeyRef:
                  key: username
                  name: s3-secret
            - name: S3_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: s3-secret
            - name: S3_BUCKET
              valueFrom:
                secretKeyRef:
                  key: bucket
                  name: s3-secret
            - name: S3_HOST
              valueFrom:
                secretKeyRef:
                  key: host
                  name: s3-secret

          resources:
            requests:
              cpu: "1"
              memory: 1Gi
      imagePullSecrets:
        - name: regcred