---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ .Release.Name }}-openldap
spec:
  selector:
    matchLabels:
      instance: {{ .Release.Name }}-openldap
  replicas: 1
  template:
    metadata:
      labels:
        app: openldap
        instance: {{ .Release.Name }}-openldap
    spec:
      containers:
        - name: openldap
          image: osixia/openldap:1.5.0
          ports:
            - containerPort: 389
            - containerPort: 636
          volumeMounts:
            - name: openldap-data
              mountPath: "/var/lib/ldap"
          resources:
            requests:
              memory: "64Mi"
              cpu: "100m"
            limits:
              memory: "256Mi"
              cpu: "400m"
        - name: phpldapadmin
          image: osixia/phpldapadmin:0.9.0
          ports:
            - containerPort: 80
            - containerPort: 443
          env:
            - key: PHPLDAPADMIN_LDAP_HOSTS
              value: {{ .Release.Name }}-openldap
          resources:
            requests:
              memory: "64Mi"
              cpu: "100m"
            limits:
              memory: "256Mi"
              cpu: "400m"
      volumes:
        - name: openldap-data
          persistentVolumeClaim:
            claimName: {{ tpl .Values.identifier . }}-openldap-data
apiVersion: v1
kind: Service
metadata:
  name: {{ .Release.Name }}-openldap
  labels:
    instance: {{ .Release.Name }}-openldap
    app: openldap
spec:
  type: ClusterIP
  ports:
   - port: 389
     name: openldap
   - port: 636
     name: openldap-ssl
  selector:
   instance: {{ .Release.Name }}-openldap
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: {{ tpl .Values.identifier . }}-letsencrypt-certs
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 50Mi
  storageClassName: rook-ceph-block
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: {{ tpl .Values.identifier . }}-openldap-data
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: {{ .Values.dbsizeingb }}Gi
  storageClassName: rook-ceph-block

# ---
# apiVersion: v1
# kind: Secret
# metadata:
#   name: {{ tpl .Values.identifier . }}-openldap-config
#   annotations:
#     secret-generator.v1.mittwald.de/autogenerate: OPENLDAP_PASSWORD
# stringData:
#   OPENLDAP_USER: "openldap"
#   OPENLDAP_DB: "zammad"