apiVersion: apps/v1
kind: Deployment
metadata:
  name: login-ui
  namespace: ory
spec:
  replicas: 1
  selector:
    matchLabels:
      app: login-ui
  template:
    metadata:
      labels:
        app: login-ui
    spec:
      containers:
        - name: login-ui
          image: oryd/kratos-selfservice-ui-node:v1.3.0
          ports:
            - name: http
              containerPort: 3000
              protocol: TCP
          env:
            - name: KRATOS_PUBLIC_URL
              value: "http://kratos-public.ory.svc.cluster.local:80"
            - name: KRATOS_BROWSER_URL
              value: "https://auth.DOMAIN_SUFFIX/kratos"
            - name: HYDRA_ADMIN_URL
              value: "http://hydra-admin.ory.svc.cluster.local:4445"
            - name: PORT
              value: "3000"
            - name: COOKIE_SECRET
              valueFrom:
                secretKeyRef:
                  name: login-ui-secrets
                  key: cookie-secret
            - name: CSRF_COOKIE_NAME
              value: "csrf"
            - name: CSRF_COOKIE_SECRET
              valueFrom:
                secretKeyRef:
                  name: login-ui-secrets
                  key: csrf-cookie-secret
          resources:
            limits:
              memory: 256Mi
            requests:
              memory: 128Mi
              cpu: 25m
---
apiVersion: v1
kind: Service
metadata:
  name: login-ui
  namespace: ory
spec:
  selector:
    app: login-ui
  ports:
    - name: http
      port: 3000
      targetPort: 3000
      protocol: TCP