apiVersion: apps/v1
kind: Deployment
metadata:
  name: semaphore
  namespace: semaphore
spec:
  replicas: 1
  selector:
    matchLabels:
      app: semaphore
  template:
    metadata:
      labels:
        app: semaphore
    spec:
      securityContext:
        fsGroup: 1000
      containers:
        - name: semaphore
          image: semaphoreui/semaphore:latest

          command: ["semaphore"]
          args: ["server"]

          env:
            - name: SEMAPHORE_DB_DIALECT
              value: bolt

            - name: SEMAPHORE_DB_PATH
              value: /var/lib/semaphore/semaphore.db

            - name: SEMAPHORE_PLAYBOOK_PATH
              value: /tmp/semaphore/

            - name: SEMAPHORE_PORT
              value: "3000"

            # ---- AUTO ADMIN USER ----
            - name: SEMAPHORE_ADMIN
              value: admin
            - name: SEMAPHORE_ADMIN_NAME
              value: "Administrator"
            - name: SEMAPHORE_ADMIN_EMAIL
              value: admin@local
            - name: SEMAPHORE_ADMIN_PASSWORD
              value: admin123

            # ---- OPTIONAL URL ----
            - name: SEMAPHORE_ACCESS_KEY_ENCRYPTION
              value: "mysecretkey"

          ports:
            - containerPort: 3000

          volumeMounts:
            - name: semaphore-data
              mountPath: /var/lib/semaphore

      volumes:
        - name: semaphore-data
          persistentVolumeClaim:
            claimName: semaphore-data