duplicati-deploy.yml

kind: Deployment
apiVersion: apps/v1
metadata:
  name: duplicati
  labels:
    app: duplicati
    part-of: duplicati
spec:
  replicas: 1
  selector:
    matchLabels:
      app: duplicati
      part-of: duplicati
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: duplicati
        part-of: duplicati
    spec:
      serviceAccountName: duplicati
      containers:
      - name: duplicati
        image: lscr.io/linuxserver/duplicati:2.0.6
        ports:
        - name: duplicati
          containerPort: 8200
        env:
        - name: PUID
          value: "0"
        - name: PGID
          value: "0"
        - name: TZ
          value: "Europe/Paris"
        - name: UMASK
          value: "022"
        - name: CLI_ARGS
          valueFrom:
            secretKeyRef:
              name: duplicati
              key: ARGS
        volumeMounts:
        - name: duplicati
          mountPath: /config
        - name: sources
          mountPath: /sources
        - name: duplicati-secrets
          mountPath: "/mnt/vault"
          readOnly: true
        securityContext:
          allowPrivilegeEscalation: false
          runAsUser: 0
#        resources:
#          limits:
#            memory: 150Mi
#          requests:
#            memory: 100Mi
        readinessProbe:
          tcpSocket:
            port: duplicati
          initialDelaySeconds: 5
          periodSeconds: 10
        livenessProbe:
          tcpSocket:
            port: duplicati
          initialDelaySeconds: 15
          periodSeconds: 20
      volumes:
      - name: duplicati
        persistentVolumeClaim:
          claimName: duplicati
      - name: sources
        persistentVolumeClaim:
          claimName: sources
      - name: duplicati-secrets
        csi:
          driver: "secrets-store.csi.k8s.io"
          readOnly: true
          volumeAttributes:
            secretProviderClass: "duplicati"