---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: lldap
  namespace: personal-services
  labels:
    app.kubernetes.io/created-by: tyil
    app.kubernetes.io/managed-by: manual
    app.kubernetes.io/name: lldap
    app.kubernetes.io/part-of: personal-services
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/created-by: tyil
      app.kubernetes.io/managed-by: manual
      app.kubernetes.io/name: lldap
      app.kubernetes.io/part-of: personal-services
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/created-by: tyil
        app.kubernetes.io/managed-by: manual
        app.kubernetes.io/name: lldap
        app.kubernetes.io/part-of: personal-services
    spec:
      containers:
      - env:
        - name: GID
          value: "1001"
        - name: LLDAP_JWT_SECRET
          valueFrom:
            secretKeyRef:
              name: lldap-credentials
              key: lldap-jwt-secret
        - name: LLDAP_LDAP_BASE_DN
          valueFrom:
            secretKeyRef:
              name: lldap-credentials
              key: base-dn
        - name: LLDAP_LDAP_USER_PASS
          valueFrom:
            secretKeyRef:
              name: lldap-credentials
              key: lldap-ldap-user-pass
        - name: TZ
          value: CET
        - name: UID
          value: "1001"
        image: nitnelave/lldap:latest
        name: lldap
        ports:
        - containerPort: 3890
        - containerPort: 6360
        - containerPort: 17170
        volumeMounts:
        - mountPath: /data
          name: data
      restartPolicy: Always
      volumes:
      - name: data
        persistentVolumeClaim:
          claimName: lldap
...