---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ams-sync
  namespace: control-interface
  labels:
    app: ams-sync
    service: backend
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ams-sync
  template:
    metadata:
      labels:
        app: ams-sync
        service: backend
    spec:
      containers:
        - name: backend
          image: cr.yandex/crp3ccidau046kdj8g9q/ams-sync:ugok
          command: ["sleep", "999999999999"]
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: AMS_SYNC_TOPIC
              value: ams-sync
            - name: ENVIRONMENT
              value: PRODUCTION
            - name: HOST_ORGANIZATION_ID
              value: '392748423989716183'
            - name: ALERT_ENABLED
              value: 'False'
            - name: USER_SERVER_HOST
              value: https://sarex.local.uralkali.com
            - name: AUTH_HOST
              value: https://sarex.local.uralkali.com
            - name: VERIFY_USERS
              value: 'True'
            - name: KAFKA_SECURITY_PROTOCOL
              value: SSL
            - name: KAFKA_SASL_MECHANISM
              value: SCRAM-SHA-512
            - name: RESOURCES_INTERNAL_HOST
              value: http://iams.iam.svc.cluster.local:8080
            - name: TELEGRAM_TOKEN
              valueFrom:
                secretKeyRef:
                  name: telegram-secret
                  key: telegram-token
            - name: TELEGRAM_GROUP_ID
              valueFrom:
                secretKeyRef:
                  name: telegram-secret
                  key: telegram-group-id
            - name: ZITADEL_HOST
              valueFrom:
                secretKeyRef:
                  name: zitadel-token-secret
                  key: zitadel-host
            - name: ZITADEL_SERVICE_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: zitadel-token-secret
                  key: zitadel-access-token
            - name: KAFKA_BOOTSTRAP_SERVERS
              valueFrom:
                secretKeyRef:
                  name: ams-kafka-secret
                  key: kafka-bootstrap-servers
            - name: KAFKA_SASL_PLAIN_USERNAME
              valueFrom:
                secretKeyRef:
                  name: ams-kafka-secret
                  key: kafka-username
            - name: KAFKA_SASL_PLAIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: ams-kafka-secret
                  key: kafka-password
            - name: KAFKA_SSL_CAFILE
              valueFrom:
                secretKeyRef:
                  name: ams-kafka-secret
                  key: kafka-ca-file
            - name: AUTH_ADMIN_USERNAME
              valueFrom:
                secretKeyRef:
                  name: auth-secret
                  key: admin-username
            - name: AUTH_ADMIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: auth-secret
                  key: admin-password
            - name: USER_DB_NAME
              valueFrom:
                secretKeyRef:
                  name: user-db-secret
                  key: user-db-name
            - name: USER_DB_USER
              valueFrom:
                secretKeyRef:
                  name: user-db-secret
                  key: user-db-user
            - name: USER_DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: user-db-secret
                  key: user-db-password
            - name: USER_DB_HOST
              valueFrom:
                secretKeyRef:
                  name: user-db-secret
                  key: user-db-host
            - name: USER_DB_PORT
              valueFrom:
                secretKeyRef:
                  name: user-db-secret
                  key: user-db-port
      imagePullSecrets:
        - name: regcred
---
apiVersion: v1
kind: Secret
metadata:
  name: ams-kafka-secret
  namespace: control-interface
type: Opaque
data:
  kafka-bootstrap-servers: WyJicnVzbmlrYS1zdGFnZS1rYWZrYS1ib290c3RyYXAua2Fma2Euc3ZjLmNsdXN0ZXIubG9jYWw6OTA5MyJd
  kafka-ca-file: L2V0Yy9jYS1jZXJ0aWZpY2F0ZXMvWWFuZGV4L1lhbmRleEludGVybmFsUm9vdENBLmNydA==
  kafka-password: bkszNnNhc3ZTZm9JdEpuWFE0cXhhdjJPVVdJUFg1WkM=
  kafka-username: c2FyZXg=
---
apiVersion: v1
kind: Secret
metadata:
  name: auth-secret
  namespace: control-interface
type: Opaque
data:
  admin-password: emVhbG90MDk2
  admin-username: aGFnZW4wMTM=
  host: aHR0cHM6Ly9zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=
---
apiVersion: v1
kind: Secret
metadata:
  name: telegram-secret
  namespace: control-interface
type: Opaque
data:
  telegram-group-id: LTEwMDIzNTAyNzE=
  telegram-token: NzAyOTgxMDQ2ODpBQUZBUUI1X0Y5TV92R2RndGlXOVBDRzVTUndIcFg2SnNUZw==
---
apiVersion: v1
kind: Secret
metadata:
  name: user-db-secret
  namespace: control-interface
type: Opaque
data:
  user-db-host: MTAuMTMzLjAuMjQ5
  user-db-name: c2FyZXhfZGI=
  user-db-password: QXNOUkE3WUhoUVlIWnNCRXFRUVBxRUUwdEU0ZmtwTTU=
  user-db-port: NTQzMg==
  user-db-user: ZGphbmdv
---
apiVersion: v1
kind: Secret
metadata:
  name: zitadel-token-secret
  namespace: control-interface
type: Opaque
data:
  zitadel-access-token: OXk5V0VZR05YYm11UXFxQlRjNDFNSTV1Yjc5R3R6VkR0dFZRM2ZiSE5PMnVpQU9YNTAwRzYyN3BDeUk5TEd2Y1Q0TFlHd2w=
  zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=