apiVersion: apps/v1
kind: Deployment
metadata:
  name: connect-proxy
  labels:
    app.kubernetes.io/component: tower-connect-proxy
spec:
  selector:
    matchLabels:
      app.kubernetes.io/component: tower-connect-proxy
  template:
    metadata:
      labels:
        app.kubernetes.io/component: tower-connect-proxy
    spec:
      imagePullSecrets:
        - name: "cr.seqera.io"
      nodeSelector:
        kubernetes.io/arch: amd64
      containers:
        - name: proxy
          image: cr.seqera.io/enterprise/studios/proxy:0.14.0
          env:
            - name: CONNECT_HTTP_PORT
              value: "8081"
            - name: CONNECT_REDIS_ADDRESS
              value: <CONNECT_REDIS_ADDRESS>:6379
            - name: CONNECT_REDIS_PREFIX
              value: "connect:session"
            - name: CONNECT_REDIS_TLS_ENABLE
              value: "false"
            - name: CONNECT_REDIS_DB
              value: "1"
            - name: CONNECT_PROXY_URL
              value: <CONNECT_PROXY_URL>
            - name: CONNECT_TUNNEL_URL
              value: connect-server:7070
            - name: PLATFORM_URL
              value: <PLATFORM_URL>
            - name: CONNECT_OIDC_CLIENT_REGISTRATION_TOKEN
              value: <YOUR_RANDOMLY_GENERATED_SECRET>
            - name: LOCAL_CACHE_TTL
              value: 2m
          ports:
            - containerPort: 8081
              name: proxy
          securityContext:
            capabilities:
              add:
                - NET_BIND_SERVICE
              drop:
                - ALL
            readOnlyRootFilesystem: false
            runAsNonRoot: true
            runAsUser: 65532
            runAsGroup: 65532
          volumeMounts:
            - mountPath: /data
              name: caddy-temp-data-volume
      securityContext:
        fsGroup: 65532
      volumes:
        - name: caddy-temp-data-volume
          emptyDir:
            sizeLimit: 100Mi
---
apiVersion: v1
kind: Service
metadata:
  name: connect-proxy
  labels:
    app.kubernetes.io/component: tower-connect-proxy
spec:
  type: NodePort
  ports:
    - port: 80
      name: connect-proxy
      targetPort: proxy
  selector:
    app.kubernetes.io/component: tower-connect-proxy