---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: backend
  namespace: pm
  labels:
    app: backend
    service: api
spec:
  replicas: 1
  selector:
    matchLabels:
      app: backend
  template:
    metadata:
      labels:
        app: backend
        service: api
    spec:
      volumes:
        - name: ch-cert
          configMap:
            name: ch-cert
            items:
              - key: CA.pem
                path: RootCA.crt
            defaultMode: 420
      containers:
        - name: api
          image: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_0843a55d
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: USERS_INTERNAL_HOST
              value: http://backend-service.sarex.svc.cluster.local:8000
            - name: CELERY_REDIS_HOST
              value: redis-service.pm.svc.cluster.local
            - name: RESOURCES_INTERNAL_HOST
              value: http://sarex-resources-service.resources
            - name: EAV_HOST
              value: http://eav-service.eav
            - name: EAV_API_PREFIX
              value: /api/v0
            - name: EAV_API_PREFIX_V1
              value: /api/v1
            - name: TRACING_INSECURE
              value: "False"
            - name: SERVER_ENABLE_SYNC_RESOURCES
              value: "True"
            - name: SERVER_DELETED_TASK_MAX_AGE_DAYS
              value: "1"
            - name: SERVER_EXPIRED_TASK_NOTIFICATION_HOUR
              value: "17"
            - name: LANG
              value: C.UTF-8
            - name: LC_ALL
              value: C.UTF-8
            - name: PYTHONUTF8
              value: "1"
            - name: DB_USERNAME
              valueFrom:
                secretKeyRef:
                  name: postgresql-secrets
                  key: username
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: postgresql-secrets
                  key: password
            - name: DB_DATABASE
              valueFrom:
                secretKeyRef:
                  name: postgresql-secrets
                  key: database
            - name: DB_HOST
              valueFrom:
                secretKeyRef:
                  name: postgresql-secrets
                  key: hostname
            - name: DB_PORT
              valueFrom:
                secretKeyRef:
                  name: postgresql-secrets
                  key: port
            - name: S3_HOST
              valueFrom:
                secretKeyRef:
                  name: s3-secrets
                  key: endpoint
            - name: S3_LOGIN
              valueFrom:
                secretKeyRef:
                  name: s3-secrets
                  key: login
            - name: S3_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: s3-secrets
                  key: password
            - name: S3_BUCKET
              valueFrom:
                secretKeyRef:
                  name: s3-secrets
                  key: bucket

#            - name: CACHE_HOST
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: host
#            - name: CACHE_PORT
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: port
#            - name: CACHE_PASSWORD
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: password
            - name: CACHE_SSL
              value: "False"
            - name: CACHE_SSL_CA_CERTS
              value: ""
            - name: CACHE_ENABLE
              value: "False"
            - name: CLICKHOUSE_ENABLE
              value: 'False'
            - name: KAFKA_ENABLE
              value: 'False'
#            - name: KAFKA_BOOTSTRAP_SERVERS
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: bootstrap_servers
#            - name: KAFKA_SECURITY_PROTOCOL
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: security_protocol
#            - name: KAFKA_SASL_MECHANISM
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_mechanism
#            - name: KAFKA_SASL_PLAIN_USERNAME
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_username
#            - name: KAFKA_SASL_PLAIN_PASSWORD
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_password
#            - name: KAFKA_SSL_CAFILE
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: ssl_cafile
#            - name: KAFKA_TOPICS
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: topics

            - name: CELERY_RABBITMQ_HOST
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: hostname
            - name: CELERY_RABBITMQ_PORT
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: port
            - name: CELERY_RABBITMQ_USER
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: username
            - name: CELERY_RABBITMQ_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: password
            - name: CELERY_RABBITMQ_VHOST
              valueFrom:
                secretKeyRef:
                  name: rabbit-secret-pm
                  key: vhost

            - name: AUTH_PUBLIC_TOKEN_URL
              value: "https://lk.sarex.io/api/token/public/"
            - name: SERVER_HOST
              value: "https://lk.sarex.io"
            - name: SERVER_API_HOST
              value: "https://api.sarex.io"
            - name: SERVER_DEBUG
              value: "False"
            - name: SERVER_ALLOWED_HOSTS
              value: '["*"]'
            - name: SERVER_USE_OTEL
              value: "False"
            - name: SERVER_VERIFY_SSL
              value: "False"
            - name: SERVER_LOG_LEVEL
              value: "INFO"
          resources:
            requests:
              cpu: "1"
              memory: 1Gi
          volumeMounts:
            - name: ch-cert
              readOnly: true
              mountPath: /root/clickhouse
      imagePullSecrets:
        - name: regcred