apiVersion: apps/v1
kind: Deployment
metadata:
  name: k8s-reboot-coordinator
  labels:
    app.kubernetes.io/name: k8s-reboot-coordinator
    app.kubernetes.io/component: k8s-reboot-coordinator
    app.kubernetes.io/part-of: k8s-reboot-coordinator
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: k8s-reboot-coordinator
      app.kubernetes.io/component: k8s-reboot-coordinator
  template:
    metadata:
      labels:
        app.kubernetes.io/name: k8s-reboot-coordinator
        app.kubernetes.io/component: k8s-reboot-coordinator
        app.kubernetes.io/part-of: k8s-reboot-coordinator
    spec:
      containers:
      - name: k8s-reboot-coordinator
        image: k8s-reboot-coordinator
        ports:
        - name: http
          containerPort: 8000
        env:
        - name: RUST_LOG
          value: info
        - name: ROCKET_ADDRESS
          value: 0.0.0.0
        startupProbe:
          httpGet:
            path: /healthz
            port: http
          periodSeconds: 1
          failureThreshold: 30
        readinessProbe:
          httpGet:
            path: /healthz
            port: http
          periodSeconds: 600
          failureThreshold: 3
        securityContext:
          readOnlyRootFilesystem: true
      securityContext:
        runAsUser: 15473
        runAsGroup: 15473
        runAsNonRoot: true
      serviceAccountName: k8s-reboot-coordinator