apiVersion: apps/v1
kind: Deployment
metadata:
  name: csi-roles-permissions-management-service
  namespace: moh-prod
spec:
  selector:
    matchLabels:
      app: csi-roles-permissions-management-service
      tier: backend
      track: stable
  template:
    metadata:
      labels:
        app: csi-roles-permissions-management-service
        tier: backend
        track: stable
    spec:
      containers:
        - env:
            - name: active_profile
              valueFrom:
                configMapKeyRef:
                  key: activeProfile
                  name: security-service-configs
            - name: configserver
              valueFrom:
                configMapKeyRef:
                  key: configserver
                  name: security-service-configs
            - name: EUREKA_INSTANCE_PREFER-IP-ADDRESS
              value: 'false'
            - name: hostname
              value: service-base-role-permission
            - name: SPRING_DATA_MONGODB_URI
              valueFrom:
                configMapKeyRef:
                  key: permission-mongodb-uri
                  name: security-database-configs
            - name: KAFKA_BOOTSTRAP_SERVERS
              valueFrom:
                configMapKeyRef:
                  key: KAFKA_BOOTSTRAP-SERVERS
                  name: service-configs
            - name: KAFKA_ELK_TOPIC
              valueFrom:
                configMapKeyRef:
                  key: CSI_LOGS_KAFKA_TOPIC
                  name: service-configs
            - name: apm_server
              valueFrom:
                configMapKeyRef:
                  key: apm_server
                  name: service-configs
            - name: management_health_refresh_enabled
              valueFrom:
                configMapKeyRef:
                  key: management_health_refresh_enabled
                  name: service-configs
            - name: JAVA_OPTS
              value: '-XX:+UnlockExperimentalVMOptions -Xms2g -Xmx2g'
          envFrom:
            - configMapRef:
                name: service-configs
            - secretRef:
                name: service-configs-secret
          image: harbor.moh.gov.sa/vidamoh/csi-roles-permissions-management-service:4.1.1.1 #1.0.3 #1.0.3-hf1 #1.0.3 #1.0.1
          imagePullPolicy: IfNotPresent
          name: csi-roles-permissions-management-service
          ports:
            - containerPort: 80
              name: http
            - containerPort: 9000
              name: management
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /actuator/health
              port: management
              scheme: HTTP
            initialDelaySeconds: 1200
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /actuator/health
              port: management
              scheme: HTTP
            initialDelaySeconds: 20
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          resources:
            limits:
              memory: 3Gi
            requests:
              cpu: 250m
              memory: 2Gi
      imagePullSecrets:
        - name: regcred