apiVersion: apps/v1
kind: Deployment
metadata:
  name: dashboard
  namespace: netbird
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: dashboard
  template:
    metadata:
      labels:
        app.kubernetes.io/name: dashboard
    spec:
      securityContext:
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: dashboard
          image: docker.io/netbirdio/dashboard:v2.20.1 # renovate: docker=docker.io/netbirdio/dashboard
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: false
            capabilities:
              drop: [ ALL ]
              add: [ NET_BIND_SERVICE, CHOWN, SETGID, SETUID, DAC_OVERRIDE ]
          envFrom:
            - configMapRef:
                name: dashboard-config
            - secretRef:
                name: authelia-oidc-credentials
          ports:
            - name: http
              containerPort: 80
          volumeMounts:
            - name: tmp
              mountPath: /tmp
          readinessProbe:
            httpGet:
              path: /
              port: http
          resources:
            requests:
              memory: 32Mi
              cpu: 10m
            limits:
              memory: 128Mi
              cpu: 2000m
      volumes:
        - name: tmp
          emptyDir: { }