apiVersion: apps/v1
kind: Deployment
metadata:
  name: matrix-hookshot
  labels:
    app.kubernetes.io/controller: main
    app.kubernetes.io/instance: matrix-synapse
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: matrix-hookshot
    helm.sh/chart: matrix-hookshot-5.0.1
  namespace: matrix-synapse
spec:
  revisionHistoryLimit: 3
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/controller: main
      app.kubernetes.io/name: matrix-hookshot
      app.kubernetes.io/instance: matrix-synapse
  template:
    metadata:
      labels:
        app.kubernetes.io/controller: main
        app.kubernetes.io/instance: matrix-synapse
        app.kubernetes.io/name: matrix-hookshot
    spec:
      enableServiceLinks: false
      serviceAccountName: matrix-synapse
      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
      dnsPolicy: ClusterFirst
      containers:
        - image: halfshot/matrix-hookshot:7.3.2@sha256:44283e5131a1a5818bbbf6d9d1e07dccdc29ac5bb6002fcf159af6ac09cf8085
          name: main
          resources:
            requests:
              cpu: 5m
              memory: 90Mi
          volumeMounts:
            - mountPath: /data/config.yml
              mountPropagation: None
              name: config
              readOnly: true
              subPath: config.yml
            - mountPath: /data
              name: data
            - mountPath: /data/passkey.pem
              mountPropagation: None
              name: passkey
              readOnly: true
              subPath: passkey.pem
            - mountPath: /data/registration.yml
              mountPropagation: None
              name: registration
              readOnly: true
              subPath: registration.yml
      volumes:
        - csi:
            driver: secrets-store.csi.k8s.io
            readOnly: true
            volumeAttributes:
              secretProviderClass: matrix-hookshot-config
          name: config
        - name: data
          persistentVolumeClaim:
            claimName: matrix-hookshot
        - csi:
            driver: secrets-store.csi.k8s.io
            readOnly: true
            volumeAttributes:
              secretProviderClass: matrix-hookshot-config
          name: passkey
        - csi:
            driver: secrets-store.csi.k8s.io
            readOnly: true
            volumeAttributes:
              secretProviderClass: matrix-hookshot-config
          name: registration
