apiVersion: apps/v1
kind: Deployment
metadata:
  name: semaphore
  annotations:
    keel.sh/policy: "all"
    keel.sh/match-tag: "true"
    keel.sh/schedule: "0 3 * * *"
spec:
  replicas: 1
  selector:
    matchLabels:
      app: semaphore
  template:
    metadata:
      labels:
        app: semaphore
    spec:
      initContainers:
        - name: fix-volume-permissions
          image: busybox
          command: ["sh", "-c", "chown -R 1001:1001 /etc/semaphore && chmod 775 /etc/semaphore"]
          volumeMounts:
            - name: semaphore-data
              mountPath: /etc/semaphore
      containers:
        - name: semaphore
          image: semaphoreui/semaphore:latest
          ports:
            - containerPort: 3000
          envFrom:
            - secretRef:
                name: ansible-secret
          env:
            - name: SEMAPHORE_DB_DIALECT
              value: sqlite
            - name: SEMAPHORE_DB_PATH
              value: /etc/semaphore/semaphore.sqlite
            - name: SEMAPHORE_ADMIN
              value: "admin"
          volumeMounts:
            - name: semaphore-data
              mountPath: /etc/semaphore
      volumes:
        - name: semaphore-data
          persistentVolumeClaim:
            claimName: semaphore-pvc