---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: frontend-auth
  namespace: apps
spec:
  replicas: 1
  selector:
    matchLabels:
      app: frontend
  template:
    metadata:
      labels:
        app: frontend
      annotations:
        sidecar.aws.signing-proxy/inject: "true"
        #
        # Custom domain name of the destination service
        # If not using cusotom domain name, this should be the VPC Lattice generated FQDN for the destination service
        #
        sidecar.aws.signing-proxy/host: "datastore-lambda.sarathy.io"
        #
        # If you have enabled SSL/TLS for the destination Lattice service, you must use HTTPS here. Othersie, use HTTP
        #
        sidecar.aws.signing-proxy/upstream-url-scheme: "HTTPS"           
        sidecar.aws.signing-proxy/name: "vpc-lattice-svcs"
        sidecar.aws.signing-proxy/region: "us-west-2"
        sidecar.aws.signing-proxy/unsigned-payload: "true"      
    spec: 
      serviceAccountName: aws-sigv4-client
      containers:          
        - name: go  
          image: public.ecr.aws/awsvijisarathy/k8s-frontend:v1     
          imagePullPolicy: Always   
          env:
            - name: DATASTORE_SERVICE_URL
              value: localhost:8005
          ports:
            - name: http
              containerPort: 3000
              protocol: TCP
          resources:
            requests:
              cpu: "50m"
              memory: "128Mi"
          livenessProbe:
            httpGet: 
              path: /live
              port: 3000
            initialDelaySeconds: 10
            timeoutSeconds: 1
            periodSeconds: 10
            failureThreshold: 3            
          readinessProbe:
            httpGet: 
              path: /ready
              port: 3000
            initialDelaySeconds: 10
            timeoutSeconds: 1
            periodSeconds: 10
            failureThreshold: 3        
---
apiVersion: v1
kind: Service
metadata:
  name: frontend-svc
  namespace: apps
spec:
  type: ClusterIP  
  ports:
  - port: 80
    protocol: TCP
    targetPort: 3000
  selector:
    app: frontend