apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: prod
  name: gopherbot-deployment
spec:
  replicas: 1 # more than 1 might cause duplicate GitHub comments
  selector:
    matchLabels:
      app: gopherbot
  template:
    metadata:
      labels:
        app: gopherbot
      annotations:
        container.seccomp.security.alpha.kubernetes.io/gopherbot: docker/default
        container.apparmor.security.beta.kubernetes.io/gopherbot: runtime/default
    spec:
      serviceAccountName: gopherbot
      nodeSelector:
        cloud.google.com/gke-nodepool: workload-identity-pool
      volumes:
      - name: cache-volume
        emptyDir: {}
      containers:
      - name: gopherbot
        image: gcr.io/symbolic-datum-552/gopherbot:latest
        imagePullPolicy: Always
        env:
        - name: XDG_CACHE_HOME
          value: "/cache"
        command: ["/gopherbot", "--daemon"]
        volumeMounts:
        - mountPath: /cache
          name: cache-volume
        resources:
          requests:
            cpu: "1"
            memory: "2Gi"
          limits:
            memory: "4Gi"