apiVersion: apps/v1
kind: Deployment
metadata:
  name: knoe
  labels:
    app: knoe
spec:
  replicas: 1
  selector:
    matchLabels:
      app: knoe
  template:
    metadata:
      labels:
        app: knoe
    spec:
      nodeSelector:
        kubernetes.io/hostname: myrddin.knoe.org
      containers:
        - name: nginx
          image: nginx:1.27-alpine
          ports:
            - containerPort: 443
              name: https
          volumeMounts:
            - name: nginx-config
              mountPath: /etc/nginx/nginx.conf
              subPath: nginx.conf
            - name: tls
              mountPath: /etc/nginx/tls
              readOnly: true
            - name: web-root
              mountPath: /usr/share/nginx/html
          readinessProbe:
            httpGet:
              path: /
              port: https
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 10
      volumes:
        - name: nginx-config
          configMap:
            name: knoe-nginx-config
        - name: tls
          secret:
            secretName: knoe-nginx-tls
        - name: web-root
          configMap:
            name: knoe-index-html