apiVersion: apps/v1
kind: Deployment
metadata:
  name: manager
  namespace: manager
spec:
  replicas: 1
  selector:
    matchLabels:
      app: manager
  template:
    metadata:
      labels:
        app: manager
    spec:
      serviceAccountName: manager
      nodeSelector:
        role: system
      imagePullSecrets:
        - name: registry-lunarfront
      containers:
        - name: manager
          image: registry.digitalocean.com/lunarfront/manager:latest
          ports:
            - containerPort: 3000
          env:
            - name: PORT
              value: "3000"
            - name: DO_API_TOKEN
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: do-api-token
            - name: DO_DB_CLUSTER_ID
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: do-db-cluster-id
            - name: GIT_SSH_KEY
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: git-ssh-key
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: database-url
            - name: DOADMIN_DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: doadmin-database-url
            - name: JWT_SECRET
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: jwt-secret
            - name: MANAGED_VALKEY_URL
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: managed-valkey-url
            - name: SPACES_KEY
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: spaces-key
            - name: SPACES_SECRET
              valueFrom:
                secretKeyRef:
                  name: manager-secrets
                  key: spaces-secret
          resources:
            requests:
              cpu: 50m
              memory: 128Mi
            limits:
              cpu: 500m
              memory: 256Mi
          livenessProbe:
            httpGet:
              path: /health
              port: 3000
            initialDelaySeconds: 10
            periodSeconds: 30
          readinessProbe:
            httpGet:
              path: /health
              port: 3000
            initialDelaySeconds: 5
            periodSeconds: 10