apiVersion: apps/v1
kind: Deployment
metadata:
  name: dcos
  labels:
    helm.sh/chart: dcos-0.1.0
    app.kubernetes.io/name: dcos
    app.kubernetes.io/instance: dcos
    app.kubernetes.io/version: "1.0.0"
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: dcos
      app.kubernetes.io/instance: dcos
  template:
    metadata:
      labels:
        helm.sh/chart: dcos-0.1.0
        app.kubernetes.io/name: dcos
        app.kubernetes.io/instance: dcos
        app.kubernetes.io/version: "1.0.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      imagePullSecrets:
        - name: ghcr-credentials
      serviceAccountName: dcos
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
      containers:
        - name: dcos
          image: "ghcr.io/celesrenata/dcos:dev"
          imagePullPolicy: Always
          ports:
            - name: http
              containerPort: 8080
              protocol: TCP
          env:
            - name: DCOS_DATA_DIR
              value: /app/data/memory_store
            - name: DCOS_CONFIG_DIR
              value: /app/config
            - name: DCOS_LOG_LEVEL
              value: "INFO"
            # ──────────────────────────────────────────
            # Database connection credentials
            # Managed via dcos-db-secret
            # ──────────────────────────────────────────
            # Cross-namespace DNS requires FQDN (postgresql-rw is in postgresql-service namespace)
            - name: DCOS_PG_HOST
              value: "postgresql-rw.postgresql-service.svc.cluster.local"
            - name: DCOS_PG_PORT
              value: "5432"
            - name: DCOS_PG_USER
              value: "celes"
            - name: DCOS_PG_DB
              value: "dcos"
            - name: DCOS_PG_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: dcos-db-secret
                  key: POSTGRES_PASSWORD
            # Cross-namespace DNS requires FQDN (redis-master is in redis-service namespace)
            - name: DCOS_REDIS_HOST
              value: "redis-master.redis-service.svc.cluster.local"
            - name: DCOS_REDIS_PORT
              value: "6379"
            - name: DCOS_REDIS_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: dcos-db-secret
                  key: REDIS_PASSWORD
            - name: DCOS_MINIO_ENDPOINT
              value: "minio-crawler-console:9090"
            - name: DCOS_MINIO_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: dcos-db-secret
                  key: MINIO_ACCESS_KEY
            - name: DCOS_MINIO_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: dcos-db-secret
                  key: MINIO_SECRET_KEY
          resources:
            limits:
              cpu: "4"
              memory: "4Gi"
            requests:
              cpu: "1"
              memory: "1Gi"
          volumeMounts:
            - name: memory-store
              mountPath: /app/data/memory_store
            - name: config
              mountPath: /app/config
              readOnly: true
      volumes:
        - name: memory-store
          persistentVolumeClaim:
            claimName: dcos-memory-pvc
        - name: config
          persistentVolumeClaim:
            claimName: dcos-config-pvc