apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: mysql-pvc-syifa
  #namespace: intern-workspace
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 2Gi
  volumeMode: Filesystem   
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mysql-app-syifa
  #namespace: intern-workspace
spec:
  replicas: 1
  selector:
    matchLabels:
      app: mysql-datasiswa
  template:
    metadata:
      labels:
        app: mysql-datasiswa
    spec:
      serviceAccountName: mysql-sa-syifa
      securityContext:
        runAsUser: 999
        runAsGroup: 999
        fsGroup: 999
      containers:
        - name: mysql
          image: mysql:8
          ports:
            - containerPort: 3306
          env:
            - name: MYSQL_ALLOW_EMPTY_PASSWORD
              value: "yes"
            - name: MYSQL_DATABASE
              value: "datasiswa"
          volumeMounts:
            - mountPath: /var/lib/mysql
              name: mysql-storage
          resources:
            requests:
              memory: "256Mi"
              cpu: "250m"
            limits:
              memory: "512Mi"
              cpu: "500m"
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            readOnlyRootFilesystem: false
      volumes:
        - name: mysql-storage
          persistentVolumeClaim:
            claimName: mysql-pvc-syifa
---
apiVersion: v1
kind: Service
metadata:
  name: mysql-app-syifa
  #namespace: intern-workspace
spec:
  type: ClusterIP
  selector:
    app: mysql-datasiswa
  ports:
    - port: 3306
      targetPort: 3306