apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    description: Serves the frontend of Sourcegraph via HTTP(S).
  labels:
    deploy: sourcegraph
  name: sourcegraph-frontend
spec:
  minReadySeconds: 10
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: sourcegraph-frontend
  strategy:
    rollingUpdate:
      maxSurge: 2
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: sourcegraph-frontend
    spec:
      containers:
      - args:
        - serve
        env:
        - name: SOURCEGRAPH_CONFIG_FILE
          value: /etc/sourcegraph/config.json
        - name: DEPLOY_TYPE
          value: datacenter
        - name: LSP_PROXY
          value: lsp-proxy:4388
        - name: PGDATABASE
          value: sg
        - name: PGHOST
          value: pgsql
        - name: PGPORT
          value: "5432"
        - name: PGSSLMODE
          value: disable
        - name: PGUSER
          value: sg
        - name: PUBLIC_REPO_REDIRECTS
          value: "true"
        - name: SRC_GIT_SERVERS
          value: gitserver-0.gitserver:3178
        # See the customization guide (../../../docs/configure.md) for information
        # about how to configure Sourcegraph to use TLS
        # - name: TLS_CERT
        #   valueFrom:
        #     secretKeyRef:
        #       key: cert
        #       name: tls
        # - name: TLS_KEY
        #   valueFrom:
        #     secretKeyRef:
        #       key: key
        #       name: tls
        image: sourcegraph/frontend:2.11.2@sha256:3903795dceeec22495ea01c015e1e64c7d542cde3e098c99d77e83efd9a02220
        livenessProbe:
          httpGet:
            path: /healthz
            port: http
            scheme: HTTP
          initialDelaySeconds: 60
          timeoutSeconds: 5
        name: frontend
        ports:
        - containerPort: 3080
          name: http
        - containerPort: 3090
          name: http-internal
        - containerPort: 3443
          name: https
        resources:
          limits:
            cpu: "2"
            memory: 4G
          requests:
            cpu: "2"
            memory: 2G
        volumeMounts:
        - mountPath: /etc/sourcegraph
          name: sg-config
      securityContext:
        runAsUser: 0
      serviceAccountName: sourcegraph-frontend
      volumes:
      - configMap:
          defaultMode: 464
          name: config-file
        name: sg-config
