kind: Deployment
apiVersion: apps/v1
metadata:
  name: desktop-bureau
  namespace: desktop
spec:
  replicas: 0
  selector:
    matchLabels:
      app: desktop-bureau
  template:
    metadata:
      labels:
        app: desktop-bureau
    spec:
      restartPolicy: Always
      serviceAccountName: selkies-sa
      schedulerName: default-scheduler
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/hostname
                    operator: In
                    values:
                      - bureau.local.pentou.ovh
      terminationGracePeriodSeconds: 30
      securityContext:
        runAsUser: 1000
      containers:
        - resources:
            limits:
              nvidia.com/gpu: '1'
            requests:
              cpu: 200m
              memory: 1Gi
              nvidia.com/gpu: '1'
          stdin: true
          terminationMessagePath: /dev/termination-log
          name: selkies-glx
          env:
            - name: TZ
              value: Europe/Paris
            - name: DISPLAY_SIZEW
              value: '1920'
            - name: DISPLAY_SIZEH
              value: '1080'
            - name: DISPLAY_REFRESH
              value: '120'
            - name: DISPLAY_DPI
              value: '96'
            - name: VIDEO_PORT
              value: HDMI-0
            - name: DISPLAY_CDEPTH
              value: '24'
            - name: PASSWD
              valueFrom:
                secretKeyRef:
                  name: my-pass
                  key: my-pass
            - name: SELKIES_ENCODER
              value: nvh264enc
            - name: SELKIES_ENABLE_RESIZE
              value: 'true'
            - name: SELKIES_VIDEO_BITRATE
              value: '40000'
            - name: SELKIES_FRAMERATE
              value: '120'
            - name: SELKIES_AUDIO_BITRATE
              value: '320000'
            - name: SELKIES_ENABLE_BASIC_AUTH
              value: 'true'
            - name: SELKIES_ENABLE_HTTPS
              value: 'false'
            - name: SELKIES_TURN_HOST
              value: turn.local.pentou.ovh
            - name: SELKIES_TURN_PORT
              value: '3478'
            - name: SELKIES_TURN_PROTOCOL
              value: UDP
            - name: SELKIES_TURN_TLS
              value: 'false'
            - name: SELKIES_TURN_USERNAME
              valueFrom:
                secretKeyRef:
                  name: turn-password
                  key: user
            - name: SELKIES_TURN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: turn-password
                  key: password
            - name: LANG
              value: fr_FR.utf8
            - name: LANGUAGE
              value: 'fr_FR:fr'
            - name: LC_ALL
              value: fr_FR.UTF-8
          securityContext:
            capabilities:
              add:
                - SETUID
                - SETGID
            privileged: true
            allowPrivilegeEscalation: true
          ports:
            - name: http
              containerPort: 8080
              protocol: TCP
            - name: stream
              containerPort: 8080
              protocol: UDP
          imagePullPolicy: Always
          volumeMounts:
            - name: dshm
              mountPath: /dev/shm
            - name: egl-cache-vol
              mountPath: /cache
            - name: egl-root-vol
              mountPath: /home/ubuntu
            - name: custom-certificate-authority
              mountPath: /usr/local/share/ca-certificates/ocp-certificate.crt
              subPath: service-ca.crt
            - name: config-xfce4
              mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml
              subPath: xfce4-panel.xml
            - name: config-xfce4
              mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xsettings.xml
              subPath: xsettings.xml
            - name: config-xfce4
              mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfwm4.xml
              subPath: xfwm4.xml
            - name: config-xfce4
              mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-desktop.xml
              subPath: xfce4-desktop.xml
          terminationMessagePolicy: File
          tty: true
          image: 'image-registry.openshift-image-registry.svc:5000/desktop/desktop:latest'
      hostname: desktop-bureau
      serviceAccount: selkies-sa
      volumes:
        - name: dshm
          emptyDir:
            medium: Memory
        - name: egl-cache-vol
          emptyDir: {}
        - name: egl-root-vol
          emptyDir: {}
        - name: custom-certificate-authority
          configMap:
            name: openshift-service-ca.crt
            defaultMode: 420
        - name: config-xfce4
          configMap:
            name: config-xfce4
            defaultMode: 420
      dnsPolicy: ClusterFirst
  strategy:
    type: Recreate
  revisionHistoryLimit: 1
  progressDeadlineSeconds: 600