apiVersion: apps/v1
kind: Deployment
metadata:
  name: admin-csa-app
spec:
  replicas: 1
  selector:
    matchLabels:
      app: admin-csa
  template:
    metadata:
      labels:
        app: admin-csa
    spec:
      serviceAccountName: admin-csa-sa
      securityContext:
        runAsUser: 1000
        runAsGroup: 3000
        fsGroup: 2000
      containers:
        - name: admin-csa
          image: usn/admin-csa:v1
          ports:
            - containerPort: 3000
          envFrom:
            - configMapRef:
                name: admin-csa-config
            - secretRef:
                name: admin-csa-secret
          resources:
            requests:
              memory: "256Mi"
              cpu: "250m"
            limits:
              memory: "512Mi"
              cpu: "500m"

          readinessProbe:
            httpGet:
              path: /
              port: 3000
            initialDelaySeconds: 40
            timeoutSeconds: 10
            periodSeconds: 5

          livenessProbe:
            httpGet:
              path: /
              port: 3000
            initialDelaySeconds: 50
            timeoutSeconds: 5
            periodSeconds: 10

          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            readOnlyRootFilesystem: false