apiVersion: apps/v1
kind: Deployment
metadata:
  name: knoe-kdc
  namespace: knoe-system
  labels:
    app: knoe-kdc
spec:
  replicas: 1
  selector:
    matchLabels:
      app: knoe-kdc
  template:
    metadata:
      labels:
        app: knoe-kdc
    spec:
      containers:
        - name: kdc
          image: debian:bookworm-slim
          command: ["/bin/bash", "/opt/knoe-kdc/entrypoint.sh"]
          env:
            - name: KNOE_KDC_REALM
              value: "KNOE.LOCAL"
            - name: KNOE_KDC_ADMIN_PRINCIPAL
              value: "admin/admin"
            - name: KNOE_KDC_MASTER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: knoe-kdc-secrets
                  key: master_password
            - name: KNOE_KDC_ADMIN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: knoe-kdc-secrets
                  key: admin_password
          ports:
            - name: kerberos-tcp
              containerPort: 88
              protocol: TCP
            - name: kerberos-udp
              containerPort: 88
              protocol: UDP
            - name: kadmin
              containerPort: 749
              protocol: TCP
            - name: kpasswd-tcp
              containerPort: 464
              protocol: TCP
            - name: kpasswd-udp
              containerPort: 464
              protocol: UDP
          volumeMounts:
            - name: kdc-config
              mountPath: /opt/knoe-kdc
            - name: kdc-data
              mountPath: /var/lib/krb5kdc
          resources:
            requests:
              memory: "128Mi"
              cpu: "50m"
            limits:
              memory: "256Mi"
              cpu: "200m"
          readinessProbe:
            exec:
              command: ["pgrep", "-x", "krb5kdc"]
            initialDelaySeconds: 15
            periodSeconds: 10
          livenessProbe:
            exec:
              command: ["pgrep", "-x", "krb5kdc"]
            initialDelaySeconds: 30
            periodSeconds: 30
      volumes:
        - name: kdc-config
          configMap:
            name: knoe-kdc-config
            defaultMode: 0755
        - name: kdc-data
          persistentVolumeClaim:
            claimName: knoe-kdc-data