apiVersion: apps/v1
kind: Deployment
metadata:
  name: immich-valkey
  namespace: immich
  annotations:
    reloader.stakater.com/auto: 'true'
  labels:
    app: immich-valkey
spec:
  replicas: 1
  selector:
    matchLabels:
      app: immich-valkey
  template:
    metadata:
      labels:
        app: immich-valkey
    spec:
      automountServiceAccountToken: false
      # securityContext:
      #   runAsUser: 10001
      #   runAsGroup: 10001
      #   fsGroup: 10001
      containers:
        - name: immich-valkey
          # https://hub.docker.com/r/valkey/valkey/
          # https://github.com/valkey-io/valkey/releases
          image: docker.io/valkey/valkey:8.1.4 # {"$imagepolicy": "immich:immich-valkey"}
          imagePullPolicy: IfNotPresent
          resources:
            limits:
              memory: 1Gi
            requests:
              memory: 100Mi
              cpu: 20m
          ports:
            - name: redis
              containerPort: 6379
              protocol: TCP
          livenessProbe:
            exec:
              command:
                - sh
                - -c
                - redis-cli ping || exit 1
            failureThreshold: 5
            initialDelaySeconds: 20
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 6
          readinessProbe:
            exec:
              command:
                - sh
                - -c
                - redis-cli ping || exit 1
            failureThreshold: 5
            initialDelaySeconds: 20
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 2
          securityContext:
            privileged: false
            seccompProfile:
              type: 'RuntimeDefault'
          volumeMounts:
            - name: immich-valkey
              mountPath: /data/
      imagePullSecrets:
        - name: registry-dockerhub
      volumes:
        - name: immich-valkey
          emptyDir:
            sizeLimit: 1Gi