apiVersion: apps/v1
kind: Deployment
metadata:
  name: opal-server
  namespace: <NAMESPACE>
  labels:
    app: opal-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: opal-server
  template:
    metadata:
      labels:
        app: opal-server
      name: opal-server
    spec:
      containers:
      - name: opal-server
        image: permitio/opal-server:0.4.0
        ports:
        - name: http
          containerPort: 7002
        env:
          - name: OPAL_POLICY_REPO_URL
            valueFrom:
              secretKeyRef:
                name: opal-server-secret
                key: OPAL_POLICY_REPO_URL
          - name: OPAL_POLICY_REPO_SSH_KEY
            valueFrom:
              secretKeyRef:
                name: opal-server-secret
                key: OPAL_POLICY_REPO_SSH_KEY
          - name: OPAL_POLICY_REPO_POLLING_INTERVAL
            value: "30"
          - name: OPAL_LOG_FORMAT_INCLUDE_PID
            value: "true"
          - name: OPAL_DATA_CONFIG_SOURCES
            value: "{\"config\":{\"entries\":[]}}"
          - name: OPAL_POLICY_REPO_MAIN_BRANCH
            value: "main"
---
kind: Service
apiVersion: v1
metadata:
  name: opal-server
  namespace: <NAMESPACE>
  labels:
    app: opal-server
spec:
  selector:
    app: opal-server
  ports:
    - name: http
      protocol: TCP
      port: 80
      targetPort: 7002