# Acceptance-test deployment for the v2 secrets contract (SECRETS-CONTRACT-PLAN.md).
# Applied manually with kubectl after `live/namespace`, `live/rabbitmq` and
# `live/secrets` are applied for INFRA_ENV=brusnika-stage - not part of any
# terragrunt stack, this is a throwaway probe, not managed infrastructure.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: secrets-contract-probe
  namespace: test-terraform
  labels:
    app: secrets-contract-probe
spec:
  replicas: 1
  selector:
    matchLabels:
      app: secrets-contract-probe
  template:
    metadata:
      labels:
        app: secrets-contract-probe
    spec:
      imagePullSecrets:
        - name: regcred
      containers:
        - name: probe
          image: cr.yandex/crp3ccidau046kdj8g9q/secrets-contract-probe:v1
          env:
            - name: RABBITMQ_HOST
              valueFrom: { secretKeyRef: { name: rabbitmq, key: host } }
            - name: RABBITMQ_PORT
              valueFrom: { secretKeyRef: { name: rabbitmq, key: port } }
            - name: RABBITMQ_VHOST
              valueFrom: { secretKeyRef: { name: rabbitmq, key: vhost } }
            - name: RABBITMQ_USERNAME
              valueFrom: { secretKeyRef: { name: rabbitmq, key: username } }
            - name: RABBITMQ_PASSWORD
              valueFrom: { secretKeyRef: { name: rabbitmq, key: password } }
            - name: PROBE_QUEUE
              value: test-terraform-probe
            - name: PROBE_INTERVAL_SECONDS
              value: "15"
          resources:
            requests:
              cpu: 10m
              memory: 32Mi
            limits:
              cpu: 100m
              memory: 64Mi