############################################################
# This config file defines a k8s Deployment for the        #
# bigchaindb/mongodb-backup-agent Docker image             #
#                                                          #
# It connects to a MongoDB instance in a separate pod,     #
# all remote MongoDB instances in the cluster,             #
# and also to MongoDB Cloud Manager (an external service). #
# Notes:                                                   #
# MongoDB agents connect to Cloud Manager on port 443.     #
############################################################

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: mdb-bak-instance-0-dep
spec:
  replicas: 1
  template:
    metadata:
      name: mdb-bak-instance-0-dep
      labels:
        app: mdb-bak-instance-0-dep
    spec:
      terminationGracePeriodSeconds: 10
      containers:
      - name: mdb-backup
        image: bigchaindb/mongodb-backup-agent:3.5
        imagePullPolicy: IfNotPresent
        env:
        - name: MMS_API_KEYFILE_PATH
          value: /etc/mongod/cloud/agent-api-key
        - name: MMS_GROUPID_KEYFILE_PATH
          value: /etc/mongod/cloud/group-id
        - name: CA_CRT_PATH
          value: /etc/mongod/ca/ca.pem
        - name: BACKUP_PEM_PATH
          value: /etc/mongod/ssl/mdb-bak-instance.pem
        resources:
          limits:
            cpu: 200m
            memory: 768Mi
        volumeMounts:
        - name: mdb-bak-certs
          mountPath: /etc/mongod/ssl/
          readOnly: true
        - name: ca-auth
          mountPath: /etc/mongod/ca/
          readOnly: true
        - name: cloud-manager-credentials
          mountPath: /etc/mongod/cloud/
          readOnly: true
      restartPolicy: Always
      volumes:
      - name: mdb-bak-certs
        secret:
          secretName: mdb-bak-certs
          defaultMode: 0404
      - name: ca-auth
        secret:
          secretName: ca-auth
          defaultMode: 0404
      - name: cloud-manager-credentials
        secret:
          secretName: cloud-manager-credentials
          defaultMode: 0404