---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: grafana-proxy
  namespace: grafana
spec:
  replicas: 1
  selector:
    matchLabels:
      app: grafana-proxy
  template:
    metadata:
      labels:
        app: grafana-proxy
    spec:
      containers:
      - image: quay.io/oauth2-proxy/oauth2-proxy:v5.1.0
        args: ["-email-domain=*"]
        imagePullPolicy: IfNotPresent
        name: grafana-proxy
        env:
        - name: OAUTH2_PROXY_HTTP_ADDRESS
          value: ":4180"
        - name: OAUTH2_PROXY_COOKIE_SECRET
          valueFrom:
            secretKeyRef:
              name: grafana-proxy
              key: cookie_secret
        - name: OAUTH2_PROXY_UPSTREAM
          value: http://grafana:3000
        - name: OAUTH2_PROXY_PROVIDER
          value: nextcloud
        - name: OAUTH2_PROXY_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: grafana-proxy
              key: client_id
        - name: OAUTH2_PROXY_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: grafana-proxy
              key: client_secret
        - name: OAUTH2_PROXY_LOGIN_URL
          value: https://cloud.shoup.io/index.php/apps/oauth2/authorize
        - name: OAUTH2_PROXY_REDEEM_URL
          value: https://cloud.shoup.io/index.php/apps/oauth2/api/v1/token
        - name: OAUTH2_PROXY_VALIDATE_URL
          value: https://cloud.shoup.io/ocs/v2.php/cloud/user?format=json
        livenessProbe:
          tcpSocket:
            port: 4180
          initialDelaySeconds: 600
          periodSeconds: 30
          timeoutSeconds: 5
          successThreshold: 1
          failureThreshold: 2
        ports:
        - containerPort: 443