---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: documentations-api
  namespace: documentations
  labels:
    app: documentations-api
    service: documentations-api
spec:
  replicas: 1
  selector:
    matchLabels:
      app: documentations-api
  template:
    metadata:
      labels:
        app: documentations-api
        service: documentations-api
    spec:
      volumes:
        - name: documentations-yc-s3-secret
          secret:
            defaultMode: 420
            secretName: documentations-yc-s3
        - name: zitadel-account
          secret:
            defaultMode: 420
            secretName: zitadel-account
      containers:
        - name: documentations-api
          image: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_a9990430
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  key: key
                  name: public-key
            - name: POSTGRES_POOL_SIZE
              value: "20"
            - name: ZITADEL_ACCOUNT
              value: /etc/sarex/zitadel/zitadel-account.json
            - name: ZITADEL_DOMAIN
              value: zitadel-srx.wb.ru
            - name: USE_ZITADEL
              value: "1"
            - name: FLOWS_URL
              value: http://backend-service.flows.svc.cluster.local:8000
            - name: LAST_MASTER_BIM
              value: "36311"
            - name: API_ADDRESS
              value: 0.0.0.0:8080
            - name: API_ADDRESS_FILE
              value: 0.0.0.0:8080
            - name: DOCUMENT_PUBLIC_LINK_JWT_SECRET
              valueFrom:
                secretKeyRef:
                  key: secret
                  name: yc-jwt-secret
            - name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES
              value: "5"
            - name: ENABLE_SQL_QUERY
              value: "0"
            - name: ENABLE_SSL
              value: "0"
            - name: WORKSPACE_V2_EXTERNAL_URL
              value: https://srx.wb.ru/workspaces-v2/
            - name: ENABLE_S3
              value: "1"
            - name: CONTAINER_REGISTRY
              value: cr.yandex/crp3ccidau046kdj8g9q
            - name: ENVIRONMENT
              value: production
            - name: LAST_SLAVE_1_BIM
              value: "1000000"
            - name: HOST
              value: http://documentations-api.documentations.svc.cluster.local:8080
            - name: FILE_STREAM_HOST
              value: srx.wb.ru
            - name: DOCUMENTATION_URL
              value: http://documentations-api.documentations.svc.cluster.local:8080/
            - name: WORKFLOW_URL
              value: http://workflows-api-service.workflow.svc.cluster.local:8000/
            - name: WORKSPACE_URL
              value: http://workspaces-service.workspaces.svc.cluster.local:8000/
            - name: BIM_API_URL
              value: http://bim-api-service.bim.svc.cluster.local:8080/
            - name: BIM_API_V2_URL
              value: http://backend-service.bim.svc.cluster.local:8000/
            - name: WORKSPACE_BUNDLE_VERSION
              value: v1
            - name: SYSTEM_LOG_URL
              value: http://api-service.system-log.svc.cluster.local:8000
            - name: DJANGO_HOST
              value: http://backend.django.svc.cluster.local:8000
            - name: MARKS_PROCESSING_URL
              value: http://marks-service:8000
            - name: PUBLIC_LINK_HOST
              value: https://document-link-srx.wb.ru
            - name: NAMESPACE
              value: documentations
            - name: DJANGO_ORIGINATOR
              value: docs_prod
            - name: WORKFLOW_IMAGES_VERSION
              value: master
            - name: WORKFLOWS_IMAGES_VERSION
              value: master
            - name: S3_SERVICE_ACCOUNT
              value: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
            - name: READ_WRITE_TIMEOUT_FILE_STREAM
              value: 6h
            - name: CACHE_DEFAULT_EXPIRATION
              value: 60s
            - name: ENABLE_SMTP
              value: "True"
            - name: ENABLE_MAILGUN
              value: "False"
            - name: CACHE_CLEANUP_INTERVAL
              value: 60s
            - name: ENABLE_AUTH_JWT_IN_URL
              value: "false"
            - name: ENABLE_SIGNATURE_IN_URL
              value: "true"
            - name: USE_CACHE_IN_FILE_STREAMER
              value: "0"
            - name: VALKEY_ADDR
              value: redis:6379
            - name: VALKEY_HOST
              value: redis
            - name: VALKEY_PORT
              value: "6379"
      
            - name: POSTGRES_DB
              valueFrom:
                secretKeyRef:
                  key: database
                  name: postgresql-secret
            - name: POSTGRES_ADDRESS
              valueFrom:
                secretKeyRef:
                  key: hostname
                  name: postgresql-secret
            - name: POSTGRES_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: postgresql-secret
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  key: username
                  name: postgresql-secret
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: postgresql-secret
            - name: DJANGO_BASIC_AUTH
              valueFrom:
                secretKeyRef:
                  key: key
                  name: django-auth
            - name: DJANGO_BASIC_AUTH_FOR_GET_USER
              valueFrom:
                secretKeyRef:
                  key: key
                  name: django-auth


          resources:
            requests:
              cpu: "1"
              memory: 1Gi
          volumeMounts:
            - mountPath: /etc/sarex/yc-s3-storage
              name: documentations-yc-s3-secret
              readOnly: true
            - mountPath: /etc/sarex/zitadel
              name: zitadel-account
              readOnly: true

      imagePullSecrets:
        - name: regcred