# Deployment description
apiVersion: apps/v1
kind: Deployment
metadata:
  name: passbolt-deployment
  namespace: infra-environment
  labels:
    app: passbolt-infra
spec:
  strategy:
    type: Recreate
  replicas: 1
  selector:
    matchLabels:
      app: passbolt-infra
  template:
    metadata:
      labels:
        app: passbolt-infra
    spec:
      containers:
        - name: passbolt
          image: passbolt/passbolt:3.3.1
          resources:
            requests:
              memory: "256Mi"
              cpu: "100m"
            limits:
              memory: "512Mi"
              cpu: "4"
          ports:
            - containerPort: 8080
              name: passbolt-http
              protocol: TCP
          envFrom:
            - configMapRef:
                name: passbolt-config-infra
---
# passbolt ConfigMap
apiVersion: v1
kind: ConfigMap
metadata:
  namespace: infra-environment
  name: passbolt-config-infra
  labels:
    app: passbolt-infra
data:
  DATASOURCES_DEFAULT_HOST: mariadb-infra
  DATASOURCES_DEFAULT_PASSWORD: passbolt 
  DATASOURCES_DEFAULT_USERNAME: passbolt
  DATASOURCES_DEFAULT_DATABASE: passbolt
  APP_FULL_BASE_URL: http://passbolt.k3s.semapp.lan
  ## Email config
  EMAIL_DEFAULT_FROM: support@semantic-applications.de
  EMAIL_TRANSPORT_DEFAULT_HOST: smtp.strato.de
  EMAIL_TRANSPORT_DEFAULT_PORT: "587"
  EMAIL_TRANSPORT_DEFAULT_USERNAME: support@semantic-applications.de
  EMAIL_TRANSPORT_DEFAULT_PASSWORD: "uN1zPIqN9@br"
  EMAIL_TRANSPORT_DEFAULT_TLS: "true"

---
# passbolt Service
apiVersion: v1
kind: Service
metadata:
  name: passbolt
  namespace: infra-environment
spec:
  selector:
    app: passbolt-infra
  ports:
    - name: passbolt-http
      port: 8080
      targetPort: passbolt-http
  type: NodePort
---
# Ingress description
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: passbolt-infra-ingress
  namespace: infra-environment
  annotations:
    kubernetes.io/ingress.class: "traefik"
spec:
  rules:
  - host: passbolt.k3s.semapp.lan
    http:
      paths:
      - path: /
        backend:
          serviceName: passbolt
          servicePort: 8080