apiVersion: apps/v1
kind: Deployment
metadata:
  name: csi-central-authentication-service
  namespace: moh-prod
  annothations:
    deployment.kubernetes.io/timestamp: "{{ .Release.Time }}"
spec:
  replicas: 3
  selector:
    matchLabels:
      app: csi-central-authentication-service
      tier: backend
      track: stable
  template:
    metadata:
      labels:
        app: csi-central-authentication-service
        tier: backend
        track: stable
    spec:
      containers:
        - env:
            - name: active_profile
              value: default
            - name: configserver
              valueFrom:
                configMapKeyRef:
                  key: configserver
                  name: security-service-configs
            - name: hostname
              value: csi-central-authentication-service
            - name: EUREKA_CLIENT_SERVICEURL_DEFAULTZONE
              valueFrom:
                configMapKeyRef:
                  key: eureka_server
                  name: security-service-configs
            - name: UI_HOSTNAME
              valueFrom:
                configMapKeyRef:
                  key: ui_hostname
                  name: security-service-configs
            - name: EUREKA_INSTANCE_PREFER-IP-ADDRESS
              value: 'false'
          envFrom:
            - configMapRef:
                name: service-configs
            - secretRef:
                name: service-configs-secret
          image: harbor.moh.gov.sa/vidamoh/csi-central-authentication-service:0.0.16_hotfix2
          imagePullPolicy: IfNotPresent
          livenessProbe:
            httpGet:
              path: /actuator/health
              port: management
              scheme: HTTP
            initialDelaySeconds: 800
            failureThreshold: 3
            timeoutSeconds: 10
          name: csi-central-authentication-service
          ports:
            - containerPort: 80
              name: http
            - containerPort: 9000
              name: management
              protocol: TCP
          readinessProbe:
            httpGet:
              path: /actuator/health
              port: management
              scheme: HTTP
            initialDelaySeconds: 20
            failureThreshold: 3
            timeoutSeconds: 10
          resources:
            limits:
              memory: 2Gi
            requests:
              cpu: 250m
              memory: 950Mi
      imagePullSecrets:
        - name: regcred