---
apiVersion: codemowers.cloud/v1beta1
kind: SecretClaim
metadata:
  name: wildduck-exporter
  namespace: wildduck
spec:
  size: 32
  mapping:
    - key: PROMETHEUS_BEARER_TOKEN
      value: "%(plaintext)s"
---
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
metadata:
  name: wildduck-exporter
  namespace: wildduck
spec:
  podMetricsEndpoints:
    - bearerTokenSecret:
        key: PROMETHEUS_BEARER_TOKEN
        name: wildduck-exporter
      targetPort: 3001
  selector:
    matchLabels:
      app: wildduck-exporter
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: wildduck-exporter
  namespace: wildduck
spec:
  revisionHistoryLimit: 0
  replicas: 1
  selector:
    matchLabels:
      app: wildduck-exporter
  template:
    metadata:
      labels:
        app: wildduck-exporter
    spec:
      containers:
        - name: webmail
          image: harbor.k-space.ee/k-space/wildduck-exporter
          securityContext:
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 65534
          command:
            - /wildduck_exporter.py
          args:
            - info
            - accounting
          ports:
            - containerPort: 3001
              name: metrics
          env:
            - name: MONGODB_HOST
              valueFrom:
                secretKeyRef:
                  name: wildduck-mongodb-wildduck-readwrite
                  key: connectionString.standard
            - name: PROMETHEUS_BEARER_TOKEN
              valueFrom:
                secretKeyRef:
                  name: wildduck-exporter
                  key: PROMETHEUS_BEARER_TOKEN