maestro/deploy/helm-chart/templates/deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ .Values.app_name }}
  namespace: applications
  labels:
    app: {{ .Values.app_name }}

spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      app: {{ .Values.app_name }}
  
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: {{ .Values.app_name }}
    
    spec:
      imagePullSecrets:
        - name: {{ .Values.imagePullSecrets }}
      nodeSelector:
        "beta.kubernetes.io/os": linux
      {{- if .Values.affinity }}
      affinity:
        {{- toYaml .Values.affinity | nindent 8 }}
      {{- end }}

      tolerations:
      - key: "kubernetes.azure.com/scalesetpriority"
        operator: "Equal"
        value: "spot"
        effect: "NoSchedule"

      containers:
        - name: maestro
          image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
          ports:
            - containerPort: {{ .Values.containerPort }}
          {{- if .Values.resources }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          {{- end }}
          env:
            # Auth Provider Configuration (cognito or keycloak)
            - name: AUTH_PROVIDER
              value: {{ .Values.maestro.auth_provider | default "cognito" | quote }}
            - name: AWS_IDENTITY_POOL_ID
              value: {{ .Values.maestro.aws_identity_pool_id }}
            - name: AWS_REGION
              value: "us-east-1"
            - name: BASE_HOST
              value: "maestro_prd"
            - name: BUCKET_CUSTOMER_CSV_ASSETS
              value: {{ .Values.maestro.bucket_customer_csv_assets }}
            - name: CONNECTORS_INDEX
              value: "connectors"
            - name: DUC_URL
              value: {{ .Values.maestro.duc_url }}
            - name: ELASTIC_APM_ENVIRONMENT
              value: {{ .Values.maestro.env }}
            - name: ELASTIC_APM_SERVER_URL
              value: "https://apm-server.dadosfera.ai"
            - name: ELASTIC_APM_SERVICE_NAME
              value: {{ .Values.maestro.apm_service }}
            - name: ENV
              value: {{ .Values.maestro.env }}
            - name: INFACTORY_URL
              value: {{ .Values.maestro.in_factory_url }}
            - name: LOGGER_GELF_HOST
              value: "logstash-pipelines.dadosfera.ai"
            - name: LOGGER_GELF_PORT
              value: "{{ .Values.maestro.logger_gelf_port }}"
            - name: LOGGER_CONSOLE_EXTRA
              value: "true"
            - name: NIMBUS_BASE_URL
              value: "http://nimbus-api"
            - name: NPM_TOKEN
              value: {{ .Values.maestro.npm_token }}
            - name: PB_TOKEN_PATH
              value: {{ .Values.maestro.pb_token_path }}
            - name: PIFACTORY_URL
              value: {{ .Values.maestro.pi_factory_url }}
            - name: SM_OAUTH_PATH
              value: {{ .Values.maestro.sm_oauth_path }}
            - name: TRFACTORY_URL
              value: {{ .Values.maestro.tr_factory_url }}
            - name: UPLOAD_FILE_AGENT_CONNECTION
              value: {{ .Values.maestro.upload_file_agent_connection }}
            - name: OPEN_CUSTOMER_ID
              value: {{ .Values.maestro.open_customer_id }}
            - name: OPEN_GROUP_ID
              value: {{ .Values.maestro.open_group_id }}
            - name: DEDICATED_PROXY
              value: {{ .Values.maestro.dedicated_proxy }}
            - name: COOKIE_SECRET
              value: {{ .Values.maestro.cookie_secret }}
            - name: REDIS_DATABASE
              value: "{{ .Values.maestro.redis_database }}"
            - name: REDIS_HOST
              value: {{ .Values.maestro.redis_host }}
            - name: REDIS_PORT
              value: "{{ .Values.maestro.redis_port }}"
            - name: REDIS_TLS
              value: "{{ .Values.maestro.redis_tls }}"
            - name: PLATFORM_API_URL
              value: {{ .Values.maestro.platform_api_url }}
            - name: CONNECTIONS_API_URL
              value: {{ .Values.maestro.connections_api_url | default "" | quote }}
            - name: STORAGE_EXPLORER_API_URL
              value: {{ .Values.maestro.storage_explorer_api_url | quote }}
            - name: FIREBASE_BASE_URL
              value: {{ .Values.maestro.firebase_base_url }}
            - name: JWT_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: prd-duc
                  key: jwt_token
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: prd-{{ .Values.app_name }}
                  key: AWS_ACCESS_KEY_ID
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: prd-{{ .Values.app_name }}
                  key: AWS_SECRET_ACCESS_KEY
            - name: AWS_DEFAULT_REGION
              valueFrom:
                secretKeyRef:
                  name: prd-{{ .Values.app_name }}
                  key: AWS_DEFAULT_REGION
            # Elasticsearch
            - name: ELASTICSEARCH_URL
              valueFrom:
                secretKeyRef:
                  name: prd-{{ .Values.app_name }}
                  key: ELASTICSEARCH_URL
            - name: ELASTICSEARCH_API_KEY
              valueFrom:
                secretKeyRef:
                  name: prd-{{ .Values.app_name }}
                  key: ELASTICSEARCH_API_KEY