apiVersion: apps/v1
kind: Deployment
metadata:
  name: omada-controller
  namespace: default
  annotations:
    reloader.stakater.com/auto: "true"
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: omada-controller
  template:
    metadata:
      labels:
        app: omada-controller
    spec:
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        runAsNonRoot: true
        fsGroup: 1000
        fsGroupChangePolicy: "OnRootMismatch"
        seccompProfile:
          type: RuntimeDefault
      containers:
      - name: omada-controller
        image: mbentley/omada-controller:6.2
        imagePullPolicy: Always
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
        env:
        - name: ROOTLESS
          value: "true"
        - name: MANAGE_HTTP_PORT
          value: "8088"
        - name: MANAGE_HTTPS_PORT
          value: "8043"
        - name: PORTAL_HTTP_PORT
          value: "8088"
        - name: PORTAL_HTTPS_PORT
          value: "8843"
        - name: UPGRADE_HTTPS_PORT
          value: "8043"
        - name: PORT_APP_DISCOVERY
          value: "27001"
        - name: PORT_ADOPT_V1
          value: "29812"
        - name: PORT_UPGRADE_V1
          value: "29813"
        - name: PORT_MANAGER_V1
          value: "29811"
        - name: PORT_MANAGER_V2
          value: "29814"
        - name: PORT_DISCOVERY
          value: "29810"
        - name: PORT_TRANSFER_V2
          value: "29815"
        - name: PORT_RTTY
          value: "29816"
        - name: PORT_DEVICE_MONITOR
          value: "29817"
        - name: WEB_CONFIG_OVERRIDE
          value: "false"
        - name: SHOW_SERVER_LOGS
          value: "true"
        - name: SHOW_MONGODB_LOGS
          value: "false"
        - name: SSL_CERT_NAME
          value: tls.crt
        - name: SSL_KEY_NAME
          value: tls.key
        - name: TZ
          value: America/New_York
        - name: SKIP_USERMOD
          value: "true"
        - name: JAVA_MAX_HEAP_SIZE
          value: "512m"
        - name: JAVA_MIN_HEAP_SIZE
          value: "128m"
        - name: MONGOD_EXTRA_ARGS
          value: "--wiredTigerCacheSizeGB 0.25"
        - name: OPENJ9_JAVA_OPTIONS
          value: "-Xmx512m -Xms128m -XX:+IdleTuningGcOnIdle -XX:+IdleTuningCompileAtIdle"
        volumeMounts:
        - name: omada-data
          mountPath: /opt/tplink/EAPController/data
        - name: omada-logs
          mountPath: /opt/tplink/EAPController/logs
      volumes:
      - name: omada-data
        nfs:
          server: birdfeeder2.home.nest
          path: /k3s/omada-controller/data
      - name: omada-logs
        nfs:
          server: birdfeeder2.home.nest
          path: /k3s/omada-controller/logs
      restartPolicy: Always