---
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
  name: bugzilla2fedmsg
  labels:
    app: bugzilla2fedmsg
    service: bugzilla2fedmsg
spec:
  replicas: 1
  selector:
    app: bugzilla2fedmsg
    deploymentconfig: bugzilla2fedmsg
  strategy:
    resources: {}
  template:
    metadata:
      labels:
        app: bugzilla2fedmsg
        deploymentconfig: bugzilla2fedmsg
    spec:
      containers:
      - name: bugzilla2fedmsg
        image: bugzilla2fedmsg:latest
        env:
          - name: APP_SCRIPT
            value: "/opt/app-root/bin/bugzilla2fedmsg"
          # - name: FEDORA_MESSAGING_CONF
          #   value: "/etc/fedora-messaging/config.toml"
          - name: KRB5_CONFIG
            value: /etc/ipa/krb5.conf
          - name: KRB5_CLIENT_KTNAME
            value: /etc/keytabs/service.keytab
        volumeMounts:
          - name: fedora-messaging-config-volume
            mountPath: /etc/fedora-messaging
            readOnly: true
          - name: fedora-messaging-ca-volume
            mountPath: /etc/pki/fedora-messaging/cacert.pem
            subPath: cacert.pem
            readOnly: true
          - name: fedora-messaging-crt-volume
            mountPath: /etc/pki/fedora-messaging/bugzilla2fedmsg-cert.pem
            subPath: bugzilla2fedmsg-cert.pem
            readOnly: true
          - name: fedora-messaging-key-volume
            mountPath: /etc/pki/fedora-messaging/bugzilla2fedmsg-key.pem
            subPath: bugzilla2fedmsg-key.pem
            readOnly: true
          - name: stomp-crt-volume
            mountPath: /etc/pki/stomp/msg-client-fedora-prod.crt
            subPath: msg-client-fedora-prod.crt
            readOnly: true
          - name: stomp-key-volume
            mountPath: /etc/pki/stomp/msg-client-fedora-prod.key
            subPath: msg-client-fedora-prod.key
            readOnly: true
          - name: ipa-config-volume
            mountPath: /etc/ipa
            readOnly: true
          - name: keytab-volume
            mountPath: /etc/keytabs
            readOnly: true
      volumes:
        - name: fedora-messaging-config-volume
          configMap:
            name: fedora-messaging-configmap
        - name: fedora-messaging-ca-volume
          secret:
            secretName: fedora-messaging-ca
        - name: fedora-messaging-crt-volume
          secret:
            secretName: fedora-messaging-crt
        - name: fedora-messaging-key-volume
          secret:
            secretName: fedora-messaging-key
        - name: stomp-crt-volume
          secret:
            secretName: stomp-crt
        - name: stomp-key-volume
          secret:
            secretName: stomp-key
        - name: ipa-config-volume
          configMap:
            name: ipa-client-config
        - name: keytab-volume
          secret:
            secretName: keytab

  triggers:
  - type: ConfigChange
  - type: ImageChange
    imageChangeParams:
      automatic: true
      containerNames:
      - bugzilla2fedmsg
      from:
        kind: ImageStreamTag
        name: bugzilla2fedmsg:latest