# P4.3-P4.9 — runtime-operacao do escolinha. GERADO por scripts/consolidar_demo.py a partir
# da uniao do ambiente dos servicos que ele absorve. Nao edite a mao sem rodar o
# --check de novo.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: runtime-operacao
  namespace: escolinha-prod
  labels:
    app: runtime-operacao
spec:
  replicas: 1
  selector:
    matchLabels:
      app: runtime-operacao
  template:
    metadata:
      labels:
        app: runtime-operacao
        athleticmap.io/contexto: runtime-operacao
    spec:
      containers:
      - name: runtime-operacao
        image: docker.io/library/runtime-operacao:1.26-sem-fed-admin
        imagePullPolicy: Never
        ports:
        - containerPort: 8083
        env:
        # Segredo do desafio anti-robo do convite publico (05/10/2026).
        - name: ATM_CAMPEONATO_DESAFIO_SEGREDO
          valueFrom:
            secretKeyRef:
              name: desafio-convite
              key: segredo
              optional: true
        - name: SPRING_DATASOURCE_URL
          value: jdbc:postgresql://postgres:5432/athleticmap
        - name: SPRING_DATASOURCE_USERNAME
          value: atm
        - name: SPRING_DATASOURCE_PASSWORD
          valueFrom:
            secretKeyRef:
              name: db-credentials
              key: password
        - name: ATM_JWK_SET_URI
          value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-4/protocol/openid-connect/certs
        - name: ATM_ISSUER
          value: https://auth.athleticmap.com/realms/athleticmap-4
        - name: ATM_TENANT
          value: escolinha
        - name: ATM_PLANO
          value: institucional
        - name: ATM_CONSENTIMENTO_SEGREDO
          valueFrom:
            secretKeyRef:
              name: consentimento-selo
              key: segredo
        - name: SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE
          value: '10'
        resources:
          requests:
            cpu: 50m
            memory: 384Mi
          limits:
            cpu: '1'
            memory: 768Mi
        readinessProbe:
          httpGet:
            path: /actuator/health/readiness
            port: 8083
          initialDelaySeconds: 25
          periodSeconds: 10
          failureThreshold: 30
        livenessProbe:
          httpGet:
            path: /actuator/health/liveness
            port: 8083
          initialDelaySeconds: 90
          periodSeconds: 20
          failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
  name: runtime-operacao
  namespace: escolinha-prod
  labels:
    app: runtime-operacao
spec:
  selector:
    app: runtime-operacao
  ports:
  - name: http
    port: 80
    targetPort: 8083