kind: DeploymentConfig
apiVersion: apps.openshift.io/v1
metadata:
  selfLink: >-
    /apis/apps.openshift.io/v1/namespaces/3scale-er2/deploymentconfigs/system-app
  resourceVersion: '15811830'
  name: system-app
  uid: 4835c9ff-7aca-484b-ae7c-883b9d74e625
  creationTimestamp: '2020-11-06T12:26:17Z'
  generation: 2
  namespace: 3scale-er2
  ownerReferences:
    - apiVersion: apps.3scale.net/v1alpha1
      kind: APIManager
      name: 3scale-minio
      uid: b0570cf2-ec1e-454a-b57f-c218450083db
      controller: true
      blockOwnerDeletion: true
  labels:
    app: 3scale-api-management
    threescale_component: system
    threescale_component_element: app
spec:
  strategy:
    type: Rolling
    rollingParams:
      updatePeriodSeconds: 1
      intervalSeconds: 1
      timeoutSeconds: 1200
      maxUnavailable: 25%
      maxSurge: 25%
      pre:
        failurePolicy: Retry
        execNewPod:
          command:
            - bash
            - '-c'
            - 'bundle exec rake boot openshift:deploy'
          env:
            - name: AMP_RELEASE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: AMP_RELEASE
            - name: APICAST_REGISTRY_URL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: APICAST_REGISTRY_URL
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: FORCE_SSL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FORCE_SSL
            - name: PROVIDER_PLAN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: PROVIDER_PLAN
            - name: RAILS_ENV
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_ENV
            - name: RAILS_LOG_LEVEL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_LEVEL
            - name: RAILS_LOG_TO_STDOUT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_TO_STDOUT
            - name: SSL_CERT_DIR
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: SSL_CERT_DIR
            - name: THINKING_SPHINX_PORT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THINKING_SPHINX_PORT
            - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
            - name: THREESCALE_SUPERDOMAIN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SUPERDOMAIN
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: URL
            - name: MASTER_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_DOMAIN
            - name: MASTER_USER
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_USER
            - name: MASTER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_PASSWORD
            - name: ADMIN_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_ACCESS_TOKEN
            - name: USER_LOGIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_USER
            - name: USER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_PASSWORD
            - name: USER_EMAIL
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_EMAIL
            - name: TENANT_NAME
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: TENANT_NAME
            - name: THINKING_SPHINX_ADDRESS
              value: system-sphinx
            - name: THINKING_SPHINX_CONFIGURATION_FILE
              value: /tmp/sphinx.conf
            - name: EVENTS_SHARED_SECRET
              valueFrom:
                secretKeyRef:
                  name: system-events-hook
                  key: PASSWORD
            - name: RECAPTCHA_PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PUBLIC_KEY
            - name: RECAPTCHA_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PRIVATE_KEY
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: system-app
                  key: SECRET_KEY_BASE
            - name: MEMCACHE_SERVERS
              valueFrom:
                secretKeyRef:
                  name: system-memcache
                  key: SERVERS
            - name: REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: URL
            - name: MESSAGE_BUS_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_URL
            - name: REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: NAMESPACE
            - name: MESSAGE_BUS_REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_NAMESPACE
            - name: REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_HOSTS
            - name: REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_ROLE
            - name: MESSAGE_BUS_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_HOSTS
            - name: MESSAGE_BUS_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_ROLE
            - name: BACKEND_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_URL
            - name: BACKEND_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_HOSTS
            - name: BACKEND_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_ROLE
            - name: APICAST_BACKEND_ROOT_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: BACKEND_ROUTE
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: SMTP_ADDRESS
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: address
            - name: SMTP_USER_NAME
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: username
            - name: SMTP_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: password
            - name: SMTP_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: domain
            - name: SMTP_PORT
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: port
            - name: SMTP_AUTHENTICATION
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: authentication
            - name: SMTP_OPENSSL_VERIFY_MODE
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: openssl.verify.mode
            - name: APICAST_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-master-apicast
                  key: ACCESS_TOKEN
            - name: ZYNC_AUTHENTICATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: zync
                  key: ZYNC_AUTHENTICATION_TOKEN
            - name: CONFIG_INTERNAL_API_USER
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: username
            - name: CONFIG_INTERNAL_API_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: password
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_ACCESS_KEY_ID
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: AWS_BUCKET
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_BUCKET
            - name: AWS_REGION
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_REGION
            - name: AWS_PROTOCOL
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PROTOCOL
                  optional: true
            - name: AWS_HOSTNAME
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_HOSTNAME
                  optional: true
            - name: AWS_PATH_STYLE
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PATH_STYLE
                  optional: true
            - name: MASTER_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_ACCESS_TOKEN
            - name: ORACLE_SYSTEM_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: ORACLE_SYSTEM_PASSWORD
                  optional: true
          containerName: system-master
      post:
        failurePolicy: Abort
        execNewPod:
          command:
            - bash
            - '-c'
            - 'bundle exec rake boot openshift:post_deploy'
          env:
            - name: ORACLE_SYSTEM_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: ORACLE_SYSTEM_PASSWORD
                  optional: true
          containerName: system-master
    resources: {}
    activeDeadlineSeconds: 21600
  triggers:
    - type: ConfigChange
    - type: ImageChange
      imageChangeParams:
        automatic: true
        containerNames:
          - system-provider
          - system-developer
          - system-master
        from:
          kind: ImageStreamTag
          namespace: 3scale-er2
          name: 'amp-system:2.10'
        lastTriggeredImage: >-
          registry.redhat.io/3scale-amp2/system-rhel7@sha256:bf154ca3c2c8c1e2b3c23571b5a34f46b8ef4329e511f04dc9d688fd863b0bb5
  replicas: 1
  revisionHistoryLimit: 10
  test: false
  selector:
    deploymentConfig: system-app
  template:
    metadata:
      creationTimestamp: null
      labels:
        com.redhat.product-name: 3scale
        app: 3scale-api-management
        com.redhat.component-type: application
        com.redhat.product-version: '2.10'
        deploymentConfig: system-app
        threescale_component_element: app
        threescale_component: system
        com.redhat.component-version: ''
        com.redhat.component-name: system-app
    spec:
      restartPolicy: Always
      serviceAccountName: amp
      schedulerName: default-scheduler
      terminationGracePeriodSeconds: 30
      securityContext: {}
      containers:
        - resources:
            limits:
              cpu: '1'
              memory: 800Mi
            requests:
              cpu: 50m
              memory: 600Mi
          readinessProbe:
            httpGet:
              path: /check.txt
              port: master
              scheme: HTTP
              httpHeaders:
                - name: X-Forwarded-Proto
                  value: https
            initialDelaySeconds: 60
            timeoutSeconds: 10
            periodSeconds: 30
            successThreshold: 1
            failureThreshold: 10
          terminationMessagePath: /dev/termination-log
          name: system-master
          livenessProbe:
            tcpSocket:
              port: master
            initialDelaySeconds: 40
            timeoutSeconds: 10
            periodSeconds: 10
            successThreshold: 1
            failureThreshold: 40
          env:
            - name: AMP_RELEASE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: AMP_RELEASE
            - name: APICAST_REGISTRY_URL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: APICAST_REGISTRY_URL
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: FORCE_SSL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FORCE_SSL
            - name: PROVIDER_PLAN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: PROVIDER_PLAN
            - name: RAILS_ENV
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_ENV
            - name: RAILS_LOG_LEVEL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_LEVEL
            - name: RAILS_LOG_TO_STDOUT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_TO_STDOUT
            - name: SSL_CERT_DIR
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: SSL_CERT_DIR
            - name: THINKING_SPHINX_PORT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THINKING_SPHINX_PORT
            - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
            - name: THREESCALE_SUPERDOMAIN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SUPERDOMAIN
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: URL
            - name: MASTER_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_DOMAIN
            - name: MASTER_USER
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_USER
            - name: MASTER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_PASSWORD
            - name: ADMIN_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_ACCESS_TOKEN
            - name: USER_LOGIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_USER
            - name: USER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_PASSWORD
            - name: USER_EMAIL
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_EMAIL
            - name: TENANT_NAME
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: TENANT_NAME
            - name: THINKING_SPHINX_ADDRESS
              value: system-sphinx
            - name: THINKING_SPHINX_CONFIGURATION_FILE
              value: /tmp/sphinx.conf
            - name: EVENTS_SHARED_SECRET
              valueFrom:
                secretKeyRef:
                  name: system-events-hook
                  key: PASSWORD
            - name: RECAPTCHA_PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PUBLIC_KEY
            - name: RECAPTCHA_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PRIVATE_KEY
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: system-app
                  key: SECRET_KEY_BASE
            - name: MEMCACHE_SERVERS
              valueFrom:
                secretKeyRef:
                  name: system-memcache
                  key: SERVERS
            - name: REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: URL
            - name: MESSAGE_BUS_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_URL
            - name: REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: NAMESPACE
            - name: MESSAGE_BUS_REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_NAMESPACE
            - name: REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_HOSTS
            - name: REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_ROLE
            - name: MESSAGE_BUS_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_HOSTS
            - name: MESSAGE_BUS_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_ROLE
            - name: BACKEND_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_URL
            - name: BACKEND_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_HOSTS
            - name: BACKEND_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_ROLE
            - name: APICAST_BACKEND_ROOT_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: BACKEND_ROUTE
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: SMTP_ADDRESS
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: address
            - name: SMTP_USER_NAME
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: username
            - name: SMTP_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: password
            - name: SMTP_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: domain
            - name: SMTP_PORT
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: port
            - name: SMTP_AUTHENTICATION
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: authentication
            - name: SMTP_OPENSSL_VERIFY_MODE
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: openssl.verify.mode
            - name: APICAST_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-master-apicast
                  key: ACCESS_TOKEN
            - name: ZYNC_AUTHENTICATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: zync
                  key: ZYNC_AUTHENTICATION_TOKEN
            - name: CONFIG_INTERNAL_API_USER
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: username
            - name: CONFIG_INTERNAL_API_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: password
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_ACCESS_KEY_ID
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: AWS_BUCKET
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_BUCKET
            - name: AWS_REGION
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_REGION
            - name: AWS_PROTOCOL
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PROTOCOL
                  optional: true
            - name: AWS_HOSTNAME
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_HOSTNAME
                  optional: true
            - name: AWS_PATH_STYLE
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PATH_STYLE
                  optional: true
            - name: PROMETHEUS_EXPORTER_PORT
              value: '9395'
          ports:
            - name: master
              containerPort: 3002
              protocol: TCP
            - name: master-metrics
              containerPort: 9395
              protocol: TCP
          imagePullPolicy: IfNotPresent
          volumeMounts:
            - name: system-config
              mountPath: /opt/system-extra-configs
          terminationMessagePolicy: File
          image: >-
            registry.redhat.io/3scale-amp2/system-rhel7@sha256:bf154ca3c2c8c1e2b3c23571b5a34f46b8ef4329e511f04dc9d688fd863b0bb5
          args:
            - env
            - TENANT_MODE=master
            - PORT=3002
            - container-entrypoint
            - bundle
            - exec
            - unicorn
            - '-c'
            - config/unicorn.rb
        - resources:
            limits:
              cpu: '1'
              memory: 800Mi
            requests:
              cpu: 50m
              memory: 600Mi
          readinessProbe:
            httpGet:
              path: /check.txt
              port: provider
              scheme: HTTP
              httpHeaders:
                - name: X-Forwarded-Proto
                  value: https
            initialDelaySeconds: 60
            timeoutSeconds: 10
            periodSeconds: 30
            successThreshold: 1
            failureThreshold: 10
          terminationMessagePath: /dev/termination-log
          name: system-provider
          livenessProbe:
            tcpSocket:
              port: provider
            initialDelaySeconds: 40
            timeoutSeconds: 10
            periodSeconds: 10
            successThreshold: 1
            failureThreshold: 40
          env:
            - name: AMP_RELEASE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: AMP_RELEASE
            - name: APICAST_REGISTRY_URL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: APICAST_REGISTRY_URL
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: FORCE_SSL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FORCE_SSL
            - name: PROVIDER_PLAN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: PROVIDER_PLAN
            - name: RAILS_ENV
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_ENV
            - name: RAILS_LOG_LEVEL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_LEVEL
            - name: RAILS_LOG_TO_STDOUT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_TO_STDOUT
            - name: SSL_CERT_DIR
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: SSL_CERT_DIR
            - name: THINKING_SPHINX_PORT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THINKING_SPHINX_PORT
            - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
            - name: THREESCALE_SUPERDOMAIN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SUPERDOMAIN
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: URL
            - name: MASTER_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_DOMAIN
            - name: MASTER_USER
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_USER
            - name: MASTER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_PASSWORD
            - name: ADMIN_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_ACCESS_TOKEN
            - name: USER_LOGIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_USER
            - name: USER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_PASSWORD
            - name: USER_EMAIL
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_EMAIL
            - name: TENANT_NAME
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: TENANT_NAME
            - name: THINKING_SPHINX_ADDRESS
              value: system-sphinx
            - name: THINKING_SPHINX_CONFIGURATION_FILE
              value: /tmp/sphinx.conf
            - name: EVENTS_SHARED_SECRET
              valueFrom:
                secretKeyRef:
                  name: system-events-hook
                  key: PASSWORD
            - name: RECAPTCHA_PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PUBLIC_KEY
            - name: RECAPTCHA_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PRIVATE_KEY
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: system-app
                  key: SECRET_KEY_BASE
            - name: MEMCACHE_SERVERS
              valueFrom:
                secretKeyRef:
                  name: system-memcache
                  key: SERVERS
            - name: REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: URL
            - name: MESSAGE_BUS_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_URL
            - name: REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: NAMESPACE
            - name: MESSAGE_BUS_REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_NAMESPACE
            - name: REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_HOSTS
            - name: REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_ROLE
            - name: MESSAGE_BUS_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_HOSTS
            - name: MESSAGE_BUS_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_ROLE
            - name: BACKEND_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_URL
            - name: BACKEND_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_HOSTS
            - name: BACKEND_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_ROLE
            - name: APICAST_BACKEND_ROOT_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: BACKEND_ROUTE
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: SMTP_ADDRESS
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: address
            - name: SMTP_USER_NAME
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: username
            - name: SMTP_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: password
            - name: SMTP_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: domain
            - name: SMTP_PORT
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: port
            - name: SMTP_AUTHENTICATION
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: authentication
            - name: SMTP_OPENSSL_VERIFY_MODE
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: openssl.verify.mode
            - name: APICAST_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-master-apicast
                  key: ACCESS_TOKEN
            - name: ZYNC_AUTHENTICATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: zync
                  key: ZYNC_AUTHENTICATION_TOKEN
            - name: CONFIG_INTERNAL_API_USER
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: username
            - name: CONFIG_INTERNAL_API_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: password
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_ACCESS_KEY_ID
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: AWS_BUCKET
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_BUCKET
            - name: AWS_REGION
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_REGION
            - name: AWS_PROTOCOL
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PROTOCOL
                  optional: true
            - name: AWS_HOSTNAME
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_HOSTNAME
                  optional: true
            - name: AWS_PATH_STYLE
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PATH_STYLE
                  optional: true
            - name: PROMETHEUS_EXPORTER_PORT
              value: '9396'
          ports:
            - name: provider
              containerPort: 3000
              protocol: TCP
            - name: prov-metrics
              containerPort: 9396
              protocol: TCP
          imagePullPolicy: IfNotPresent
          volumeMounts:
            - name: system-config
              mountPath: /opt/system-extra-configs
          terminationMessagePolicy: File
          image: >-
            registry.redhat.io/3scale-amp2/system-rhel7@sha256:bf154ca3c2c8c1e2b3c23571b5a34f46b8ef4329e511f04dc9d688fd863b0bb5
          args:
            - env
            - TENANT_MODE=provider
            - PORT=3000
            - container-entrypoint
            - bundle
            - exec
            - unicorn
            - '-c'
            - config/unicorn.rb
        - resources:
            limits:
              cpu: '1'
              memory: 800Mi
            requests:
              cpu: 50m
              memory: 600Mi
          readinessProbe:
            httpGet:
              path: /check.txt
              port: developer
              scheme: HTTP
              httpHeaders:
                - name: X-Forwarded-Proto
                  value: https
            initialDelaySeconds: 60
            timeoutSeconds: 10
            periodSeconds: 30
            successThreshold: 1
            failureThreshold: 10
          terminationMessagePath: /dev/termination-log
          name: system-developer
          livenessProbe:
            tcpSocket:
              port: developer
            initialDelaySeconds: 40
            timeoutSeconds: 10
            periodSeconds: 10
            successThreshold: 1
            failureThreshold: 40
          env:
            - name: AMP_RELEASE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: AMP_RELEASE
            - name: APICAST_REGISTRY_URL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: APICAST_REGISTRY_URL
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: FORCE_SSL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FORCE_SSL
            - name: PROVIDER_PLAN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: PROVIDER_PLAN
            - name: RAILS_ENV
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_ENV
            - name: RAILS_LOG_LEVEL
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_LEVEL
            - name: RAILS_LOG_TO_STDOUT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: RAILS_LOG_TO_STDOUT
            - name: SSL_CERT_DIR
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: SSL_CERT_DIR
            - name: THINKING_SPHINX_PORT
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THINKING_SPHINX_PORT
            - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
            - name: THREESCALE_SUPERDOMAIN
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: THREESCALE_SUPERDOMAIN
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: system-database
                  key: URL
            - name: MASTER_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_DOMAIN
            - name: MASTER_USER
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_USER
            - name: MASTER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: MASTER_PASSWORD
            - name: ADMIN_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_ACCESS_TOKEN
            - name: USER_LOGIN
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_USER
            - name: USER_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_PASSWORD
            - name: USER_EMAIL
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: ADMIN_EMAIL
            - name: TENANT_NAME
              valueFrom:
                secretKeyRef:
                  name: system-seed
                  key: TENANT_NAME
            - name: THINKING_SPHINX_ADDRESS
              value: system-sphinx
            - name: THINKING_SPHINX_CONFIGURATION_FILE
              value: /tmp/sphinx.conf
            - name: EVENTS_SHARED_SECRET
              valueFrom:
                secretKeyRef:
                  name: system-events-hook
                  key: PASSWORD
            - name: RECAPTCHA_PUBLIC_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PUBLIC_KEY
            - name: RECAPTCHA_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: system-recaptcha
                  key: PRIVATE_KEY
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: system-app
                  key: SECRET_KEY_BASE
            - name: MEMCACHE_SERVERS
              valueFrom:
                secretKeyRef:
                  name: system-memcache
                  key: SERVERS
            - name: REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: URL
            - name: MESSAGE_BUS_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_URL
            - name: REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: NAMESPACE
            - name: MESSAGE_BUS_REDIS_NAMESPACE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_NAMESPACE
            - name: REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_HOSTS
            - name: REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: SENTINEL_ROLE
            - name: MESSAGE_BUS_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_HOSTS
            - name: MESSAGE_BUS_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: system-redis
                  key: MESSAGE_BUS_SENTINEL_ROLE
            - name: BACKEND_REDIS_URL
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_URL
            - name: BACKEND_REDIS_SENTINEL_HOSTS
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_HOSTS
            - name: BACKEND_REDIS_SENTINEL_ROLE
              valueFrom:
                secretKeyRef:
                  name: backend-redis
                  key: REDIS_STORAGE_SENTINEL_ROLE
            - name: APICAST_BACKEND_ROOT_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: BACKEND_ROUTE
              valueFrom:
                secretKeyRef:
                  name: backend-listener
                  key: route_endpoint
            - name: SMTP_ADDRESS
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: address
            - name: SMTP_USER_NAME
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: username
            - name: SMTP_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: password
            - name: SMTP_DOMAIN
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: domain
            - name: SMTP_PORT
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: port
            - name: SMTP_AUTHENTICATION
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: authentication
            - name: SMTP_OPENSSL_VERIFY_MODE
              valueFrom:
                secretKeyRef:
                  name: system-smtp
                  key: openssl.verify.mode
            - name: APICAST_ACCESS_TOKEN
              valueFrom:
                secretKeyRef:
                  name: system-master-apicast
                  key: ACCESS_TOKEN
            - name: ZYNC_AUTHENTICATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: zync
                  key: ZYNC_AUTHENTICATION_TOKEN
            - name: CONFIG_INTERNAL_API_USER
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: username
            - name: CONFIG_INTERNAL_API_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: backend-internal-api
                  key: password
            - name: FILE_UPLOAD_STORAGE
              valueFrom:
                configMapKeyRef:
                  name: system-environment
                  key: FILE_UPLOAD_STORAGE
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_ACCESS_KEY_ID
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: AWS_BUCKET
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_BUCKET
            - name: AWS_REGION
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_REGION
            - name: AWS_PROTOCOL
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PROTOCOL
                  optional: true
            - name: AWS_HOSTNAME
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_HOSTNAME
                  optional: true
            - name: AWS_PATH_STYLE
              valueFrom:
                secretKeyRef:
                  name: aws-secret
                  key: AWS_PATH_STYLE
                  optional: true
            - name: PROMETHEUS_EXPORTER_PORT
              value: '9394'
          ports:
            - name: developer
              containerPort: 3001
              protocol: TCP
            - name: dev-metrics
              containerPort: 9394
              protocol: TCP
          imagePullPolicy: IfNotPresent
          volumeMounts:
            - name: system-config
              mountPath: /opt/system-extra-configs
          terminationMessagePolicy: File
          image: >-
            registry.redhat.io/3scale-amp2/system-rhel7@sha256:bf154ca3c2c8c1e2b3c23571b5a34f46b8ef4329e511f04dc9d688fd863b0bb5
          args:
            - env
            - PORT=3001
            - container-entrypoint
            - bundle
            - exec
            - unicorn
            - '-c'
            - config/unicorn.rb
      serviceAccount: amp
      volumes:
        - name: system-config
          configMap:
            name: system
            items:
              - key: zync.yml
                path: zync.yml
              - key: rolling_updates.yml
                path: rolling_updates.yml
              - key: service_discovery.yml
                path: service_discovery.yml
            defaultMode: 420
      dnsPolicy: ClusterFirst
status:
  observedGeneration: 2
  details:
    message: config change
    causes:
      - type: ConfigChange
  availableReplicas: 1
  unavailableReplicas: 0
  latestVersion: 1
  updatedReplicas: 1
  conditions:
    - type: Progressing
      status: 'True'
      lastUpdateTime: '2020-11-06T12:29:30Z'
      lastTransitionTime: '2020-11-06T12:27:34Z'
      reason: NewReplicationControllerAvailable
      message: replication controller "system-app-1" successfully rolled out
    - type: Available
      status: 'True'
      lastUpdateTime: '2020-11-19T12:37:38Z'
      lastTransitionTime: '2020-11-19T12:37:38Z'
      message: Deployment config has minimum availability.
  replicas: 1
  readyReplicas: 1

