--- {{- if .Values.matomo.queuedTrackingProcess.enabled }} apiVersion: apps/v1 kind: Deployment metadata: name: matomo-queuedtracking-process namespace: {{.Values.namespace}} labels: app: matomo-queuedtracking-process {{- if .Values.matomo.extralabels }} {{ toYaml .Values.matomo.extralabels | indent 4 }} {{- end }} spec: replicas: {{.Values.matomo.queuedTrackingProcess.replicas}} selector: matchLabels: app: matomo-queuedtracking-process template: metadata: labels: app: matomo-queuedtracking-process {{- if .Values.matomo.extralabels }} {{ toYaml .Values.matomo.extralabels | indent 8 }} {{- end }} annotations: checksum/config: {{ include (print $.Template.BasePath "/configmap-matomo.yaml") . | sha256sum }} spec: {{ include "matomo.init" . | nindent 6 }} containers: - name: matomo image: {{.Values.matomo.image}} resources: requests: memory: "128Mi" cpu: "250m" limits: memory: "220Mi" cpu: "1" securityContext: runAsUser: {{.Values.matomo.runAsUser}} privileged: false allowPrivilegeEscalation: false imagePullPolicy: Always env: - name: MATOMO_DB_PASSWORD valueFrom: secretKeyRef: name: {{ .Values.db.password.secretKeyRef.name }} key: {{ .Values.db.password.secretKeyRef.key }} {{ include "matomo.license" . | nindent 8 }} command: [ 'sh' , '-c' , 'supervisord -n' ] volumeMounts: - name: static-data mountPath: /var/www/html - name: matomo-supervisor-queuedtrackingprocess mountPath: /etc/supervisor.d readOnly: true {{ include "matomo.images.pullSecrets" ( dict "images" (list .Values.matomo) "global" .Values.global) | nindent 6 }} volumes: - name: matomo-configuration configMap: name: matomo-configuration - name: static-data emptyDir: {} - name: matomo-supervisor-queuedtrackingprocess configMap: name: matomo-supervisor-queuedtrackingprocess {{- end -}}