apiVersion: apps/v1
kind: Deployment
metadata:
  name: kratos-admin-ui
  namespace: ory
spec:
  replicas: 1
  selector:
    matchLabels:
      app: kratos-admin-ui
  template:
    metadata:
      labels:
        app: kratos-admin-ui
    spec:
      containers:
        - name: kratos-admin-ui
          image: src.DOMAIN_SUFFIX/studio/kratos-admin-ui:latest
          ports:
            - name: http
              containerPort: 3000
              protocol: TCP
          env:
            - name: KRATOS_PUBLIC_URL
              value: "http://kratos-public.ory.svc.cluster.local:80"
            - name: KRATOS_ADMIN_URL
              value: "http://kratos-admin.ory.svc.cluster.local:80"
            - name: HYDRA_ADMIN_URL
              value: "http://hydra-admin.ory.svc.cluster.local:4445"
            - name: PUBLIC_URL
              value: "https://auth.DOMAIN_SUFFIX"
            - name: CUNNINGHAM_THEME
              value: "dsfr-light"
            - name: PORT
              value: "3000"
            - name: TRUSTED_CLIENT_IDS
              value: ""
            - name: SEAWEEDFS_S3_URL
              value: "http://seaweedfs-filer.storage.svc.cluster.local:8333"
            - name: ADMIN_IDENTITY_IDS
              valueFrom:
                secretKeyRef:
                  name: kratos-admin-ui-secrets
                  key: admin-identity-ids
            - name: COOKIE_SECRET
              valueFrom:
                secretKeyRef:
                  name: kratos-admin-ui-secrets
                  key: cookie-secret
            - name: CSRF_COOKIE_SECRET
              valueFrom:
                secretKeyRef:
                  name: kratos-admin-ui-secrets
                  key: csrf-cookie-secret
            - name: SEAWEEDFS_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: kratos-admin-ui-secrets
                  key: s3-access-key
            - name: SEAWEEDFS_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: kratos-admin-ui-secrets
                  key: s3-secret-key
          resources:
            limits:
              memory: 384Mi
            requests:
              memory: 64Mi
              cpu: 25m
---
apiVersion: v1
kind: Service
metadata:
  name: kratos-admin-ui
  namespace: ory
spec:
  selector:
    app: kratos-admin-ui
  ports:
    - name: http
      port: 3000
      targetPort: 3000
      protocol: TCP