apiVersion: apps/v1
kind: Deployment
metadata:
  name: auth-server
  namespace: observability-client
spec:
  progressDeadlineSeconds: 600
  replicas: 3
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: auth-server
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: auth-server
    spec:
      containers:
      - image: 557537366020.dkr.ecr.us-west-2.amazonaws.com/o11y-client-auth-server:v9
        imagePullPolicy: Always
        name: auth-server
        ports:
        - containerPort: 8080
          hostPort: 8080
          protocol: TCP
        env:
          - name: AUTH0_CLIENT_ID
            valueFrom:
              secretKeyRef:
                name: auth0-access
                key: AUTH0_CLIENT_ID
          - name: AUTH0_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                name: auth0-access
                key: AUTH0_CLIENT_SECRET
        resources:
          limits:
            cpu: 100m
            memory: 256Mi
          requests:
            cpu: 100m
            memory: 256Mi
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      nodeSelector:
        node_type: worker
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: auth-server
      serviceAccountName: auth-server
      terminationGracePeriodSeconds: 10