{{- include "nplus.init" $ -}}
# Component: {{ .component.chartName }}
# will connect to:
{{- if (.this.nappl).host }}
#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
{{- else }}
#   defined by config file in conf PV.
{{- end }}
#
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ .component.fullName }}
  {{- if .this.utils.includeNamespace }}
  namespace: {{ .Release.Namespace }}
  {{- end }}
  labels:
    {{- include "nplus.instanceLabels" . | nindent 4 }}
  annotations:
    {{- include "nplus.argoWave" . | nindent 4 }}
    {{- include "nplus.annotations" . | nindent 4 }}
    {{- include "nplus.securityAnnotations" . | nindent 4 }}
spec:
  selector:
    matchLabels:
      {{- include "nplus.selectorLabels" . | nindent 6 }}
  replicas: {{ .Values.replicaCount }}
  strategy:
    type: RollingUpdate

  template:
    metadata:
      labels:
        {{- include "nplus.templateLabels" . | nindent 8 }}
      annotations:
        {{- include "nplus.templateAnnotations" . | nindent 8 }}
        {{- include "nplus.securityAnnotations" . | nindent 8 }}
    spec:
      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
      {{- include "nplus.templateAffinity" . | nindent 6 }}
      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
      {{- include "nplus.podSecurityContext" . | nindent 6 }}
      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}

      initContainers:
      {{- include "nplus.waitFor" . | nindent 6 }}
      {{- include "nplus.copyConfig" . | nindent 6 }}

      containers:
      - name: erpcmis-connector
        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
        env:
        # -- NAPPL Connection Settings
          {{- include "nplus.env" (dict 
            "CMIS_AL_HOST"         ($.this.nappl).host
            "CMIS_AL_PORT"         ($.this.nappl).port
            "CMIS_AL_INSTANCE"     ($.this.nappl).instance
            "CMIS_AL_SSL"          ($.this.nappl).ssl
          ) | nindent 10 }}

        #TODO: Manuel sagt, der Virusscanner würde noch nicht gehen, daher schalten wir den hier erstmal global ab.
        # -- Virus Scanner Settings
          {{- include "nplus.env" (dict 
            "CONF_VIRUSSCAN_ACTIVE"         "false"
            "CONF_VIRUSSCAN_TEMP_FOLDER"    ""
            "CONF_VIRUSSCAN_SOCKPATH"       ""
            "CONF_VIRUSSCAN_HOST"           ""
            "CONF_VIRUSSCAN_PORT"           ""
          ) | nindent 10 }}

        {{- include "nplus.environment" . | nindent 8 }}
        
        {{- if .this.utils.maintenance }}
          {{- include "nplus.idle" . | nindent 8 }}
        {{- else }}
        startupProbe:
          initialDelaySeconds: 10
          failureThreshold: 12
          periodSeconds: 10
          timeoutSeconds: 5
          tcpSocket:
            port: {{ include "nplus.backendPort" . }}
        #TODO: 9.3: Hier fehlt die echte Readiness Probe, die gibt es auch bei der CT nocht nicht.
        readinessProbe:
          tcpSocket:
            port: {{ include "nplus.backendPort" . }}
          # initialDelaySeconds: 10
          periodSeconds: 10
        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
        # one that quickly checks the main socket on Layer 4.
        livenessProbe:
          tcpSocket:
            port: {{ include "nplus.backendPort" . }}
          # initialDelaySeconds: 10
          periodSeconds: 10
        {{- end }}
        
        ports:
        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
          
        {{- include "nplus.resources" . | nindent 8 }}

        volumeMounts:
        {{- include "nplus.defaultMounts" . | nindent 8 }}

      volumes:
      {{- include "nplus.defaultVolumes" . | nindent 6 }}