iac/apps/documentations/base/pdm-deployment.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: pdm-api
  namespace: documentations
  labels:
    app: pdm-api
    service: pdm-api
spec:
  replicas: 1
  selector:
    matchLabels:
      app: pdm-api
  template:
    metadata:
      labels:
        app: pdm-api
        service: pdm-api
    spec:
      volumes:
        - name: documentations-yc-s3-secret
          secret:
            defaultMode: 420
            secretName: documentations-yc-s3
        - name: zitadel-account
          secret:
            defaultMode: 420
            secretName: zitadel-account
      containers:
        - name: pdm-api
          image: cr.yandex/crp3ccidau046kdj8g9q/pdmv2:prod_38958427
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8080
              protocol: TCP
          env:
            - name: USE_EXPERIMENTAL
              value: "true"
            - name: RELEASES_TOKEN
              valueFrom:
                secretKeyRef:
                  key: key
                  name: releases-token
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  key: username
                  name: postgresql-secret
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: postgresql-secret
            - name: POSTGRES_ADDRESS
              valueFrom:
                secretKeyRef:
                  key: hostname
                  name: postgresql-secret
            - name: POSTGRES_DB
              valueFrom:
                secretKeyRef:
                  key: database
                  name: postgresql-secret
            - name: POSTGRES_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: postgresql-secret
            - name: POSTGRES_POOL_SIZE
              value: "20"
            - name: TRANSMITTALS_BASE_URL
              value: mock
            - name: DJANGO_BASIC_AUTH
              valueFrom:
                secretKeyRef:
                  key: key
                  name: django-auth
            - name: PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  key: key
                  name: public-key
            - name: API_ADDRESS
              value: 0.0.0.0:8080
            - name: API_ADDRESS_FILE
              value: 0.0.0.0:8080
            - name: BUCKET_NAME
              value: attachments-storage
            - name: API_HOST_PREFIX
              value: /
            - name: APP_NAME
              value: pdm_v2
            - name: APP_VERSION
              value: 0.0.1
            - name: ENABLE_PERMISSIONS_FILTER
              value: "1"
            - name: PERMISSIONS_FILTER_COMPANIES
              value: '[1]'
            - name: TRANSMITTALS_ENABLE
              value: "false"
            - name: DRAWINGS_INTERNAL_URL
              value: http://drawings-api-service.drawings.svc.cluster.local:80
            - name: ATTACHMENTS_URL
              value: http://attachments-service.attachments.svc.cluster.local:8000
            - name: BIM_API_V2_URL
              value: http://backend-service.bim.svc.cluster.local:8000/
            - name: BIM_V2_HOST
              value: http://backend-service.bim.svc.cluster.local:8000/
            - name: CACHE_CLEANUP_INTERVAL
              value: 60s
            - name: CACHE_DEFAULT_EXPIRATION
              value: 60s
            - name: DJANGO_HOST
              value: http://backend.django.svc.cluster.local:8000
            - name: DJANGO_ORIGINATOR
              value: docs_prod
            - name: DOCUMENTATION_URL
              value: http://documentations-api.documentations.svc.cluster.local:8080/
            - name: EAV_URL
              value: http://eav-service.eav.svc.cluster.local:8000
            - name: ENABLE_OBSERVABILITY
              value: "false"
            - name: ENABLE_S3
              value: "1"
            - name: ENABLE_SSL
              value: "0"
            - name: ENVIRONMENT
              value: prod
            - name: FLOWS_URL
              value: http://backend-service.flows.svc.cluster.local:8000
            - name: HEIGHT_THUMB_ATTACHMENTS
              value: "300"
            - name: HEIGHT_THUMB_STATES
              value: "73"
            - name: HTTP_PORT
              value: "8080"
            - name: INSPECTIONS_URL
              value: http://inspections-service.inspections.svc.cluster.local:80
            - name: LOG_LEVEL
              value: INFO
            - name: NOTES_URL
            - name: OBSERVABILITY_COLLECTOR_ENDPOINT
              value: temp
            - name: READ_WRITE_TIMEOUT_FILE_STREAM
              value: 6h
            - name: RELEASES_URL
              value: https://gitlab.com
            - name: REMARKS_URL
              value: http://remarks-static-service.remarks.svc.cluster.local:8080/remarks
            - name: RESOURCES_URL
              value: http://resources-service.resources.svc.cluster.local:8000
            - name: S3_SERVICE_ACCOUNT
              value: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
            - name: STATES_URL
              value: http://workspaces-service.workspaces.svc.cluster.local:8000/
            - name: SUBSCRIPTIONS_URL
              value: http://sarex-subscriptions-service.subscriptions.svc.cluster.local:80
            - name: SYSTEM_LOG_URL
              value: http://api-service.system-log.svc.cluster.local:8000
            - name: TARGET_URL
              value: http://backend.django.svc.cluster.local:8000
            - name: USE_CACHE_IN_FILE_STREAMER
              value: "1"
            - name: USE_SUBSCRIPTIONS
              value: "false"
            - name: WIDTH_THUMB_ATTACHMENTS
              value: "300"
            - name: WIDTH_THUMB_STATES
              value: "120"
            - name: WORKFLOWS_IMAGES_VERSION
              value: master
            - name: WORKFLOW_IMAGES_VERSION
              value: master
            - name: WORKFLOW_URL
              value: http://workflows-api-service.workflow.svc.cluster.local:8000/
            - name: WORKSPACE_BUNDLE_VERSION
              value: v1
            - name: WORKSPACE_URL
              value: http://workspaces-service.workspaces.svc.cluster.local:8000/



          resources:
            requests:
              cpu: "1"
              memory: 1Gi
          volumeMounts:
            - mountPath: /etc/sarex/yc-s3-storage
              name: documentations-yc-s3-secret
              readOnly: true
            - mountPath: /etc/sarex/zitadel
              name: zitadel-account
              readOnly: true

      imagePullSecrets:
        - name: regcred