apiVersion: apps/v1
kind: Deployment
metadata:
  name: lldap
  namespace: {{ .Values.namespace }}
  labels:
    app: lldap
  annotations:
spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      app: lldap
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: lldap
      annotations:
    spec:
      containers:
        - name: lldap
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}

          {{- with .Values.resources }}
          resources:
            {{- toYaml . | nindent 12 }}
          {{- end }}

          env:
            - name: GID
              value: "{{ .Values.env.GID }}"
            - name: LLDAP_JWT_SECRET
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.secret.name }}
                  key: lldap-jwt-secret
            - name: LLDAP_LDAP_BASE_DN
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.secret.name }}
                  key: base-dn
            - name: LLDAP_LDAP_USER_DN
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.secret.name }}
                  key: lldap-ldap-user-name
            - name: LLDAP_LDAP_USER_PASS
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.secret.name }}
                  key: lldap-ldap-user-pass
            - name: TZ
              value: "{{ .Values.env.TZ }}"
            - name: UID
              value: "{{ .Values.env.UID }}"
            {{- if .Values.extraEnv}}
            {{- toYaml .Values.extraEnv | nindent 12}}
            {{- end }}
          ports:
            - containerPort: 3890
            - containerPort: 6360
            - containerPort: 17170
          volumeMounts:
            {{- if .Values.persistence.enabled }}
            - mountPath: /data
              name: lldap-data
            {{- end }}

            {{- if .Values.extraVolumeMounts}}
            {{- toYaml .Values.extraVolumeMounts | nindent 12}}
            {{- end }}
      volumes:
        {{- if .Values.persistence.enabled}}
        - name: lldap-data
          persistentVolumeClaim:
            claimName: lldap-data
        {{- end }}

        {{- if .Values.extraVolumes}}
        {{- toYaml .Values.extraVolumes | nindent 8}}
        {{- end }}

      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}

      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}

      {{- with .Values.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}