apiVersion: apps/v1
kind: Deployment
metadata:
  name: drone-deployment
  namespace: drone
  labels:
    app: drone-deployment
    # keel.sh/policy: force
spec:
  replicas: 1
  selector:
    matchLabels:
      app: drone-deployment
  template:
    metadata:
      labels:
        app: drone-deployment
    spec:
      containers:
      - name: drone-deployment
        image: drone/drone:2
        ports:
        - containerPort: 80
        env:
        - name: DRONE_GITEA_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: gitea-client-id
        - name: DRONE_GITEA_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: gitea-client-secret
        - name: DRONE_GITEA_SERVER
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: gitea-server
        - name: DRONE_GIT_ALWAYS_AUTH
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: git-always-auth
        - name: DRONE_RPC_SECRET
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: drone-rpc-secret
        - name: DRONE_SERVER_HOST
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: drone-server-host
        - name: DRONE_SERVER_PROTO
          valueFrom:
            secretKeyRef:
              name: drone-secrets
              key: drone-server-proto
      imagePullSecrets:
      - name: registry-creds