apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: mosquitto
  namespace: mqtt
  labels:
    app: mosquitto
spec:
  replicas: 1
  selector:
    matchLabels:
      app: mosquitto
  template:
    metadata:
      labels:
        app: mosquitto
    spec:
      hostNetwork: true
      nodeSelector:
        kubernetes.io/hostname: casa-mini-minion-01
      tolerations:
      - key: "infra.limbosolutions.com/dedicated"
        operator: "Equal"
        value: "casa-mini-minion-01"
        effect: "NoSchedule"
      containers:
      - name: mosquitto
        ### Maintained by flux - Image Update Automation
        image: eclipse-mosquitto:latest@sha256:860aeb5d63ce509508f6dcfb2bc8a1c1dd2bc60555b562b45ce90e52d8dabb0f # {"$imagepolicy": "mqtt:eclipse-mosquitto"}
        ###
        imagePullPolicy: IfNotPresent
        command: ["/usr/sbin/mosquitto"]
        args: ["-c", "/etc/mosquitto/mosquitto.conf"]
        ports:
        - containerPort: 8883 # Default MQTT port for encrypted communication using TLS/SSL
          #hostPort: 8883 
          protocol: TCP
        - containerPort: 1883 # Default MQTT port for unencrypted communication
          protocol: TCP
          #hostPort: 1883
        volumeMounts:
        - name: mosquitto-data
          mountPath: /mosquitto-data
        - mountPath: /etc/mosquitto/mosquitto.conf
          name: mosquitto-secret
          subPath: config
        resources:
          requests:
            memory: "50Mi"
            cpu: "100m"
          limits:
            memory: "100Mi"
            cpu: "200m"
      volumes:
      - name: mosquitto-data
        persistentVolumeClaim:
          claimName: mosquitto-data
      - name: mosquitto-secret
        secret:
          secretName: "mosquitto"