sync-github.tf

resource "kubernetes_deployment" "sync_github" {
  count = var.sync_github ? 1 : 0

  metadata {
    name = "sync-github"
    labels = {
      "gropius.app" = "sync-github"
    }
    namespace = kubernetes_namespace.gropius.metadata[0].name
  }

  spec {
    replicas = 1

    selector {
      match_labels = {
        "gropius.app" = "sync-github"
      }
    }

    template {
      metadata {
        labels = {
          "gropius.app" = "sync-github"
        }
      }

      spec {
        container {
          name              = "sync-github"
          image             = "ghcr.io/ccims/gropius-sync-github:${var.gropius_version}"
          image_pull_policy = "Always"


          env {
            name  = "GROPIUS_CORE_CREATE_INDICES_ON_STARTUP"
            value = "false"
          }

          env {
            name  = "GRAPHGLUE_CORE_USE_NEO4J_PLUGIN"
            value = "true"
          }

          env {
            name  = "LOGGING_LEVEL_ROOT"
            value = "INFO"
          }

          env {
            name = "SPRING_NEO4J_AUTHENTICATION_PASSWORD"
            value_from {
              secret_key_ref {
                name = kubernetes_secret.neo4j_password_secret.metadata[0].name
                key  = "password"
              }
            }
          }

          env {
            name  = "SPRING_NEO4J_AUTHENTICATION_USERNAME"
            value = "neo4j"
          }

          env {
            name  = "SPRING_NEO4J_URI"
            value = "bolt://neo4j-db:7687"
          }

          env {
            name  = "SPRING_DATA_MONGODB_HOST"
            value = "mongodb"
          }

          env {
            name  = "SPRING_DATA_MONGODB_PORT"
            value = "27017"
          }

          env {
            name  = "SPRING_DATA_MONGODB_DATABASE"
            value = "gropius"
          }

          env {
            name  = "SPRING_DATA_MONGODB_USERNAME"
            value = "root"
          }

          env {
            name = "SPRING_DATA_MONGODB_PASSWORD"
            value_from {
              secret_key_ref {
                name = kubernetes_secret.mongo_password_secret.metadata[0].name
                key  = "password"
              }
            }
          }

          env {
            name  = "GROPIUS_SYNC_LOGIN_SERVICE_BASE"
            value = "http://login-service:3000"
          }

          env {
            name = "GROPIUS_SYNC_API_SECRET"
            value_from {
              secret_key_ref {
                name = kubernetes_secret.login_service_secrets.metadata[0].name
                key  = "sync_api_secret"
              }
            }
          }

          liveness_probe {
            http_get {
              port = "8080"
              path = "/health"
            }
            failure_threshold     = 20
            initial_delay_seconds = 120
            period_seconds        = 5
            timeout_seconds       = 10
          }
        }
      }
    }
  }
}