apiVersion: apps/v1
kind: Deployment
metadata:
  name: lk-jwt-service
  namespace: media
spec:
  replicas: 1
  selector:
    matchLabels:
      app: lk-jwt-service
  template:
    metadata:
      labels:
        app: lk-jwt-service
    spec:
      containers:
        - name: lk-jwt-service
          image: ghcr.io/element-hq/lk-jwt-service:latest
          ports:
            - containerPort: 8081
          env:
            - name: LIVEKIT_JWT_BIND
              value: ":8081"
            - name: LIVEKIT_URL
              value: "wss://livekit.DOMAIN_SUFFIX"
            - name: LIVEKIT_KEY
              valueFrom:
                secretKeyRef:
                  name: livekit-api-credentials
                  key: api-key
            - name: LIVEKIT_SECRET
              valueFrom:
                secretKeyRef:
                  name: livekit-api-credentials
                  key: api-secret
            - name: LIVEKIT_FULL_ACCESS_HOMESERVERS
              value: "sunbeam.pt"
          livenessProbe:
            httpGet:
              path: /healthz
              port: 8081
            initialDelaySeconds: 5
            periodSeconds: 15
          readinessProbe:
            httpGet:
              path: /healthz
              port: 8081
            initialDelaySeconds: 3
            periodSeconds: 10
          resources:
            limits:
              memory: 64Mi
              cpu: 100m
            requests:
              memory: 32Mi
              cpu: 25m
---
apiVersion: v1
kind: Service
metadata:
  name: lk-jwt-service
  namespace: media
spec:
  selector:
    app: lk-jwt-service
  ports:
    - port: 80
      targetPort: 8081