apiVersion: extensions/v1beta1
kind: Deployment
metadata:
   name: certmgr
   namespace: cert-mgmt-dev
spec:
   revisionHistoryLimit: 10
   minReadySeconds: 10
   strategy:
      type: RollingUpdate
      rollingUpdate:
         maxUnavailable: 0
   replicas: 3
   template:
      metadata:
         labels:
            microservice: certmgr
      spec:
         imagePullSecrets:
         - name: bluemix-cert-mgmt-dev-secret
         containers:
         - name: certmgr
           image: registry.ng.bluemix.net/certmgmt_dev/certmgr:latest
           ports:
           - containerPort: 8080
           livenessProbe:
              httpGet:
                path: /healthz
                port: 8080
              initialDelaySeconds: 10
              periodSeconds: 10
           readinessProbe:
              httpGet:
                path: /ready
                port: 8080
              initialDelaySeconds: 5
              periodSeconds: 30
           env:
##### ENVIRONMENT VARIABLES - REDIS SECRET
           - name: redis_host
             valueFrom:
               secretKeyRef:
                  name: redis-credentials
                  key: host
           - name: redis_port
             valueFrom:
               secretKeyRef:
                  name: redis-credentials
                  key: port
           - name: redis_auth
             valueFrom:
               secretKeyRef:
                  name: redis-credentials
                  key: auth
##### ENVIRONMENT VARIABLES - CLOUDANT SECRET
           - name: cloudant_url
             valueFrom:
               secretKeyRef:
                  name: cloudant-credentials
                  key: url
##### ENVIRONMENT VARIABLES - KEYPROTECT SECRET
           - name: keyprotect_username
             valueFrom:
               secretKeyRef:
                  name: keyprotect-credentials
                  key: username
           - name: keyprotect_password
             valueFrom:
               secretKeyRef:
                  name: keyprotect-credentials
                  key: password
           - name: keyprotect_CMSKey
             valueFrom:
               secretKeyRef:
                  name: keyprotect-credentials
                  key: CMSKey
##### ENVIRONMENT VARIABLES - IAM SECRET
           - name: iamConfig
             valueFrom:
               secretKeyRef:
                  name: iam-config
                  key: iamConfig
##### ENVIRONMENT VARIABLES
           - name: LOG_LEVEL
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: LOG_LEVEL
           - name: instancesServiceUrl
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: instancesServiceUrl
           - name: secretStoreEndpoint
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: secretStoreEndpoint
           - name: bluemixSpace
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: bluemixSpace
           - name: bluemixOrg
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: bluemixOrg
           - name: tokenEndpoint
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: tokenEndpoint
           - name: iamTokenValidationURL
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: iamTokenValidationURL
           - name: iamTokenURL
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: iamTokenURL
           - name: iamPDPURL
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: iamPDPURL
           - name: iamPAPURL
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: iamPAPURL
           - name: bluemixAccount
             valueFrom:
               configMapKeyRef:
                  name: certmgr-environment-configuration
                  key: bluemixAccount