{{- define "storj.workload" -}}
workload:
  storj:
    enabled: true
    primary: true
    type: Deployment
    podSpec:
      hostNetwork: {{ .Values.storjNetwork.hostNetwork }}
      terminationGracePeriodSeconds: {{ .Values.storjConfig.gracePeriod }}
      containers:
        storj:
          enabled: true
          primary: true
          imageSelector: image
          securityContext:
            runAsUser: {{ .Values.storjRunAs.user }}
            runAsGroup: {{ .Values.storjRunAs.group }}
            readOnlyRootFilesystem: false
          {{- include "storj.args" $ | nindent 10 }}
          envFrom:
            - secretRef:
                name: storj-config
          {{ with .Values.storjConfig.additionalEnvs }}
          envList:
            {{ range $env := . }}
            - name: {{ $env.name }}
              value: {{ $env.value }}
            {{ end }}
          {{ end }}
          probes:
            liveness:
              enabled: false
            readiness:
              enabled: false
            startup:
              enabled: false
      initContainers:
        {{- include "ix.v1.common.app.permissions" (dict "containerName" "01-permissions"
                                                                "UID" .Values.storjRunAs.user
                                                                "GID" .Values.storjRunAs.group
                                                                "mode" "check"
                                                                "type" "install") | nindent 8 }}
        02-generateid:
          enabled: true
          type: init
          imageSelector: curlImage
          securityContext:
            runAsUser: 0
            runAsGroup: 0
            runAsNonRoot: false
            readOnlyRootFilesystem: false
            capabilities:
              add:
                - CHOWN
                - FOWNER
                - DAC_OVERRIDE
          command:
            - /bin/sh
            - -c
          args:
            - ./init_script/init_config.sh
          env:
            DEFAULT_CERT_PATH: {{ template "storj.idPath" }}/ca.cert
            DEFAULT_IDENTITY_CERT_PATH: {{ template "storj.idPath" }}/identity.cert
            AUTH_KEY:
              secretKeyRef:
                name: storj
                key: authToken
        03-setup:
          enabled: true
          type: init
          imageSelector: image
          envFrom:
            - secretRef:
                name: storj-config
          securityContext:
            runAsUser: {{ .Values.storjRunAs.user }}
            runAsGroup: {{ .Values.storjRunAs.group }}
            readOnlyRootFilesystem: false
          command:
            - /bin/sh
            - -c
            - |
              if test ! -f /app/config/config.yaml; then
                echo "Setting up Storj"
                export SETUP="true"
                /entrypoint
              else
                echo "Storj already setup"
              fi
{{- end -}}