apiVersion: v1
kind: Pod
metadata:
  name: "collabora-code-{{ item.key }}"
spec:
  securityContext:
    allowPrivilegeEscalation: false
  containers:
  - name: collabora-code
    image: "collabora/code:{{ item.value.version }}"
    # securityContext:
    #   runAsUser: {{ collabora_code_app_uid }}
    #   runAsGroup: {{ collabora_code_app_gid }}
    resources:
      limits:
        memory: "4Gi"
    env:
    - name: "DONT_GEN_SSL_CERT"
      value: "1"
    - name: "username"
      value: "{{ item.value.admin_user }}"
    - name: "password"
      value: "{{ item.value.admin_password }}"
    - name: "extra_params"
      value: "--o:ssl.enable=false --o:ssl.termination=true"
    ports:
    - containerPort: 9980
      hostPort: {{ item.value.port }}