apiVersion: v1
kind: Service
metadata:
  name: regional-redis
spec:
  ports:
    - name: redis
      port: 6379
      targetPort: redis
    - name: redis-tls
      port: 6380
      targetPort: redis-tls
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: regional-redis
spec:
  template:
    spec:
      containers:
        - name: regional-redis
          args:
            - redis-server
            - --port
            - "6379"
            - --tls-port
            - "6380"
            - --tls-cert-file
            - /certs/tls.crt
            - --tls-key-file
            - /certs/tls.key
            - --tls-ca-cert-file
            - /certs/ca.crt
            - --tls-auth-clients
            - "no"
          ports:
            - name: redis
              containerPort: 6379
            - name: redis-tls
              containerPort: 6380
          volumeMounts:
            - name: regional-redis-tls
              mountPath: /certs
              readOnly: true
      volumes:
        - name: regional-redis-tls
          secret:
            secretName: regional-redis-tls