apiVersion: apps/v1
kind: Deployment
metadata:
  name: apolo-kurento-api
  namespace: apolo
  labels:
    app.kubernetes.io/name: apolo-kurento-api
    app.kubernetes.io/part-of: apolo
    app.kubernetes.io/component: kurento-api
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: apolo-kurento-api
  template:
    metadata:
      labels:
        app.kubernetes.io/name: apolo-kurento-api
        app.kubernetes.io/part-of: apolo
        app.kubernetes.io/component: kurento-api
    spec:
      imagePullSecrets:
        - name: harbor-cred
      containers:
        - name: kurento-api
          image: harbor.c2et.com/xrf-ssl/xrf-kurento-api:6.0
          imagePullPolicy: IfNotPresent
          envFrom:
            - configMapRef:
                name: apolo-kurento-api-config
            - secretRef:
                name: apolo-kurento-api-secret
          ports:
            - name: https
              containerPort: 3000
              protocol: TCP
          volumeMounts:
            - name: tls
              mountPath: /app/keys
              readOnly: true
      volumes:
        - name: tls
          secret:
            secretName: meeting-tls
            items:
              - key: tls.key
                path: kurento.key
              - key: tls.crt
                path: kurento.crt
              # algunas apps piden "ca.crt"; reutilizamos el fullchain
              - key: tls.crt
                path: ca.crt