---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "kiali-server.fullname" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "kiali-server.labels" . | nindent 4 }}
spec:
  replicas: {{ .Values.deployment.replicas }}
  selector:
    matchLabels:
      {{- include "kiali-server.selectorLabels" . | nindent 6 }}
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      name: {{ include "kiali-server.fullname" . }}
      labels:
        {{- include "kiali-server.labels" . | nindent 8 }}
      annotations:
        {{- if .Values.server.metrics_enabled }}
        prometheus.io/scrape: "true"
        prometheus.io/port: {{ .Values.server.metrics_port | quote }}
        {{- else }}
        prometheus.io/scrape: "false"
        prometheus.io/port: null
        {{- end }}
        kiali.io/runtimes: go,kiali
        {{- if .Values.deployment.pod_annotations }}
        {{- toYaml .Values.deployment.pod_annotations | nindent 8 }}
        {{- end }}
    spec:
      serviceAccountName: {{ include "kiali-server.fullname" . }}
      {{- if .Values.deployment.priority_class_name }}
      priorityClassName: {{ .Values.deployment.priority_class_name | quote }}
      {{- end }}
      {{- if .Values.deployment.image_pull_secrets }}
      imagePullSecrets:
      {{- range .Values.deployment.image_pull_secrets }}
      - name: {{ . }}
      {{- end }}
      {{- end }}
      containers:
      - image: "{{ template "system_default_registry" . }}{{ .Values.deployment.repository }}:{{ .Values.deployment.tag }}"
        imagePullPolicy: {{ .Values.deployment.image_pull_policy | default "Always" }}
        name: {{ include "kiali-server.fullname" . }}
        command:
        - "/opt/kiali/kiali"
        - "-config"
        - "/kiali-configuration/config.yaml"
        - "-v"
        - "{{ .Values.deployment.verbose_mode }}"
        ports:
        - name: api-port
          containerPort: {{ .Values.server.port | default 20001 }}
        {{- if .Values.server.metrics_enabled }}
        - name: http-metrics
          containerPort: {{ .Values.server.metrics_port | default 9090 }}
        {{- end }}
        readinessProbe:
          httpGet:
            path: {{ include "kiali-server.server.web_root" . | trimSuffix "/"  }}/healthz
            port: api-port
            {{- if (include "kiali-server.identity.cert_file" .) }}
            scheme: HTTPS
            {{- else }}
            scheme: HTTP
            {{- end }}
          initialDelaySeconds: 5
          periodSeconds: 30
        livenessProbe:
          httpGet:
            path: {{ include "kiali-server.server.web_root" . | trimSuffix "/"  }}/healthz
            port: api-port
            {{- if (include "kiali-server.identity.cert_file" .) }}
            scheme: HTTPS
            {{- else }}
            scheme: HTTP
            {{- end }}
          initialDelaySeconds: 5
          periodSeconds: 30
        env:
        - name: ACTIVE_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        {{- if .Values.web_root_override }}
        - name: kiali-console
          subPath: env.js
          mountPath: /opt/kiali/console/env.js
        {{- end }}
        - name: {{ include "kiali-server.fullname" . }}-configuration
          mountPath: "/kiali-configuration"
        - name: {{ include "kiali-server.fullname" . }}-cert
          mountPath: "/kiali-cert"
        - name: {{ include "kiali-server.fullname" . }}-secret
          mountPath: "/kiali-secret"
        {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }}
        - name: {{ include "kiali-server.fullname" . }}-cabundle
          mountPath: "/kiali-cabundle"
        {{- end }}
        {{- if .Values.deployment.resources }}
        resources:
        {{- toYaml .Values.deployment.resources | nindent 10 }}
        {{- end }}
      volumes:
      {{- if .Values.web_root_override }}
      - name: kiali-console
        configMap:
          name: kiali-console
          items:
          - key: env.js
            path: env.js
      {{- end }}
      - name: {{ include "kiali-server.fullname" . }}-configuration
        configMap:
          name: {{ include "kiali-server.fullname" . }}
      - name: {{ include "kiali-server.fullname" . }}-cert
        secret:
          {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }}
          secretName: {{ include "kiali-server.fullname" . }}-cert-secret
          {{- else }}
          secretName: istio.{{ include "kiali-server.fullname" . }}-service-account
          {{- end }}
          {{- if not (include "kiali-server.identity.cert_file" .) }}
          optional: true
          {{- end }}
      - name: {{ include "kiali-server.fullname" . }}-secret
        secret:
          secretName: {{ .Values.deployment.secret_name }}
          optional: true
      {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }}
      - name: {{ include "kiali-server.fullname" . }}-cabundle
        configMap:
          name: {{ include "kiali-server.fullname" . }}-cabundle
      {{- end }}
      {{- if or (.Values.deployment.affinity.node) (or (.Values.deployment.pod) (.Values.deployment.pod_anti)) }}
      affinity:
        {{- if .Values.deployment.affinity.node }}
        nodeAffinity:
        {{- toYaml .Values.deployment.affinity.node | nindent 10 }}
        {{- end }}
        {{- if .Values.deployment.affinity.pod }}
        podAffinity:
        {{- toYaml .Values.deployment.affinity.pod | nindent 10 }}
        {{- end }}
        {{- if .Values.deployment.affinity.pod_anti }}
        podAntiAffinity:
        {{- toYaml .Values.deployment.affinity.pod_anti | nindent 10 }}
        {{- end }}
      {{- end }}
      {{- if .Values.deployment.tolerations }}
      tolerations:
      {{- toYaml .Values.deployment.tolerations | nindent 8 }}
      {{- end }}
      {{- if .Values.deployment.node_selector }}
      nodeSelector:
      {{- toYaml .Values.deployment.node_selector | nindent 8 }}
      {{- end }}
...