{{- if .Values.kubecostMetrics }}
{{- if .Values.kubecostMetrics.exporter }}
{{- if or .Values.kubecostMetrics.exporter.enabled .Values.agent }}
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ template "kubecost.kubeMetricsName" . }}
  labels:
    {{ unset (include "cost-analyzer.commonLabels" . | fromYaml) "app" | toYaml | nindent 4 }}
    app: {{ template "kubecost.kubeMetricsName" . }}
{{- with .Values.kubecostMetrics.exporter.labels }}
{{ toYaml . | indent 4 }}
{{- end }}
spec:
  replicas: {{ .Values.kubecostMetrics.exporter.replicas | default 1 }}
  selector:
    matchLabels:
      app: {{ include "kubecost.kubeMetricsName" . }}
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: {{ template "kubecost.kubeMetricsName" . }}
        {{- if .Values.global.additionalLabels }}
        {{ toYaml .Values.global.additionalLabels | nindent 8 }}
        {{- end }}
{{- with .Values.kubecostMetrics.exporter.labels }}
{{ toYaml . | indent 8 }}
{{- end }}
{{- if .Values.global.podAnnotations }}
      annotations:
{{- with .Values.global.podAnnotations }}
{{ toYaml . | indent 8 }}
{{- end }}
{{- end }}
    spec:
      restartPolicy: Always
      serviceAccountName: {{ template "cost-analyzer.serviceAccountName" . }}
      volumes:
        {{- if .Values.agent }}
        - name: config-store
          secret:
            secretName: {{ .Values.agentKeySecretName }}
        {{- end }}
        {{- if .Values.kubecostProductConfigs }}
        {{- if .Values.kubecostProductConfigs.gcpSecretName }}
        - name: gcp-key-secret
          secret:
            secretName: {{ .Values.kubecostProductConfigs.gcpSecretName }}
            items:
            - key: compute-viewer-kubecost-key.json
              path: service-key.json
        {{- end }}
        {{- if .Values.kubecostProductConfigs.serviceKeySecretName }}
        - name: service-key-secret
          secret:
            secretName: {{ .Values.kubecostProductConfigs.serviceKeySecretName }}
        {{- else if .Values.kubecostProductConfigs.createServiceKeySecret }}
        - name: service-key-secret
          secret:
            secretName: cloud-service-key
        {{- end }}
        {{- if .Values.kubecostProductConfigs.azureStorageSecretName }}
        - name: azure-storage-config
          secret:
            secretName: {{ .Values.kubecostProductConfigs.azureStorageSecretName }}
            items:
              - key: azure-storage-config.json
                path: azure-storage-config.json
        {{- else if .Values.kubecostProductConfigs.azureStorageCreateSecret }}
        - name: azure-storage-config
          secret:
            secretName: azure-storage-config
        {{- end }}
        {{- if .Values.kubecostProductConfigs.cloudIntegrationSecret }}
        - name: cloud-integration
          secret:
            secretName: {{ .Values.kubecostProductConfigs.cloudIntegrationSecret }}
            items:
              - key: cloud-integration.json
                path: cloud-integration.json
        {{- end }}
        {{- end }}
        - name: persistent-configs
{{- if .Values.persistentVolume }}
{{- if .Values.persistentVolume.enabled }}
          persistentVolumeClaim:
{{- if .Values.persistentVolume.existingClaim }}
            claimName: {{ .Values.persistentVolume.existingClaim }}
{{- else }}
            claimName: {{ template "cost-analyzer.fullname" . }}
{{- end -}}
{{- else }}
          emptyDir: {}
{{- end -}}
{{- else }}
          persistentVolumeClaim:
            claimName: {{ template "cost-analyzer.fullname" . }}
{{- end }}
      initContainers:
{{- if .Values.supportNFS }}
        - name: config-db-perms-fix
        {{- if .Values.initChownDataImage }}
          image: {{ .Values.initChownDataImage }}
        {{- else }}
          image: busybox
        {{- end }}
          resources:
{{ toYaml .Values.initChownData.resources | indent 12 }}
          command: ["sh", "-c", "/bin/chmod -R 777 /var/configs"]
          volumeMounts:
            - name: persistent-configs
              mountPath: /var/configs
          securityContext:
            runAsUser: 0
{{- end }}
      containers:
        {{- if .Values.kubecostModel }}
        {{- if .Values.kubecostModel.fullImageName }}
        - image: {{ .Values.kubecostModel.fullImageName }}
        {{- else if .Values.imageVersion }}
        - image: {{ .Values.kubecostModel.image }}:{{ .Values.imageVersion }}
        {{- else }}
        - image: {{ .Values.kubecostModel.image }}:prod-{{ $.Chart.AppVersion }}
        {{ end }}
        {{- else }}
        - image: gcr.io/kubecost1/cost-model:prod-{{ $.Chart.AppVersion }}
        {{ end }}
        {{- if .Values.kubecostModel.imagePullPolicy }}
          imagePullPolicy: {{ .Values.kubecostModel.imagePullPolicy }}
        {{- else }}
          imagePullPolicy: Always
        {{- end }}
          name: {{ template "kubecost.kubeMetricsName" . }}
          ports:
            - name: tcp-metrics
              protocol: TCP
              containerPort: {{ .Values.kubecostMetrics.exporter.port | default 9005 }}
          resources:
{{ toYaml .Values.kubecostMetrics.exporter.resources | indent 12 }}
          readinessProbe:
            httpGet:
              path: /healthz
              port: {{ .Values.kubecostMetrics.exporter.port | default 9005 }}
            initialDelaySeconds: 30
            periodSeconds: 10
            failureThreshold: 200
          volumeMounts:
            - name: persistent-configs
              mountPath: /var/configs
            {{- if .Values.agent }}
            - name: config-store
              mountPath: /var/secrets
            {{- end }}
            {{- if .Values.kubecostProductConfigs }}
            {{- if .Values.kubecostProductConfigs.gcpSecretName }}
            - name: gcp-key-secret
              mountPath: /var/secrets
            {{- end }}
            {{- if or .Values.kubecostProductConfigs.azureStorageSecretName .Values.kubecostProductConfigs.azureStorageCreateSecret}}
            - name: azure-storage-config
              mountPath: /var/azure-storage-config
            {{- end }}
            {{- if .Values.kubecostProductConfigs.cloudIntegrationSecret}}
            - name: cloud-integration
              mountPath: /var/cloud-integration
            {{- end }}
            {{- if or .Values.kubecostProductConfigs.serviceKeySecretName .Values.kubecostProductConfigs.createServiceKeySecret }}
            - name: service-key-secret
              mountPath: /var/secrets
            {{- end }}
            {{- end }}
          args:
            - agent
            {{- if .Values.kubecostMetrics.exporter.extraArgs }}
            {{ toYaml .Values.kubecostMetrics.exporter.extraArgs | nindent 12 }}
            {{- end }}
          env:
            - name: PROMETHEUS_SERVER_ENDPOINT
              valueFrom:
                configMapKeyRef:
                  name: {{ template "cost-analyzer.fullname" . }}
                  key: prometheus-server-endpoint
            - name: CLOUD_PROVIDER_API_KEY
              value: "AIzaSyDXQPG_MHUEy9neR7stolq6l0ujXmjJlvk" # The GCP Pricing API requires a key.
            {{- if .Values.kubecostProductConfigs.gcpSecretName }}
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /var/configs/key.json
            {{- end }}
            - name: CONFIG_PATH
              value: /var/configs/
            - name: KUBECOST_METRICS_PORT
              value: {{ (quote .Values.kubecostMetrics.exporter.port) | default (quote 9005) }}
            {{- if .Values.agent }}
            - name: KUBECOST_CONFIG_BUCKET
              value: /var/secrets/object-store.yaml
            - name: EXPORT_CLUSTER_INFO_ENABLED
              value: {{ (quote .Values.kubecostMetrics.exporter.exportClusterInfo) | default (quote true) }}
            - name: EXPORT_CLUSTER_CACHE_ENABLED
              value: {{ (quote .Values.kubecostMetrics.exporter.exportClusterCache) | default (quote true) }}
            {{- end }}
            - name: EMIT_POD_ANNOTATIONS_METRIC
              value: {{ (quote .Values.kubecostMetrics.emitPodAnnotations) | default (quote false) }}
            - name: EMIT_NAMESPACE_ANNOTATIONS_METRIC
              value: {{ (quote .Values.kubecostMetrics.emitNamespaceAnnotations) | default (quote false) }}
            - name: EMIT_KSM_V1_METRICS
              value: {{ (quote .Values.kubecostMetrics.emitKsmV1Metrics) | default (quote true) }}
            - name: EMIT_KSM_V1_METRICS_ONLY # ONLY emit KSM v1 metrics that do not exist in KSM 2 by default
              value: {{ (quote .Values.kubecostMetrics.emitKsmV1MetricsOnly) | default (quote false) }}
            - name: MAX_QUERY_CONCURRENCY
              value: {{ (quote .Values.kubecostModel.maxQueryConcurrency) | default (quote 5) }}
            {{- if .Values.global.prometheus.queryServiceBasicAuthSecretName}}
            - name: DB_BASIC_AUTH_USERNAME
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.global.prometheus.queryServiceBasicAuthSecretName }}
                  key: USERNAME
            - name: DB_BASIC_AUTH_PW
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.global.prometheus.queryServiceBasicAuthSecretName }}
                  key: PASSWORD
            {{- end }}
            {{- if .Values.global.prometheus.queryServiceBearerTokenSecretName }}
            - name: DB_BEARER_TOKEN
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.global.prometheus.queryServiceBearerTokenSecretName }}
                  key: TOKEN
            {{- end }}
            {{- if .Values.global.prometheus.insecureSkipVerify }}
            - name: INSECURE_SKIP_VERIFY
              value: {{ (quote .Values.global.prometheus.insecureSkipVerify) }}
            {{- end }}
            {{- if and (.Values.prometheus.server.global.external_labels.cluster_id) (not .Values.prometheus.server.clusterIDConfigmap) }}
            - name: CLUSTER_ID
              value: {{ .Values.prometheus.server.global.external_labels.cluster_id }}
            {{- end }}
            {{- if .Values.prometheus.server.clusterIDConfigmap }}
            - name: CLUSTER_ID
              valueFrom:
                configMapKeyRef:
                  name: {{ .Values.prometheus.server.clusterIDConfigmap }}
                  key: CLUSTER_ID
            {{- end }}
            {{- if .Values.kubecostModel.promClusterIDLabel }}
            - name: PROM_CLUSTER_ID_LABEL
              value: {{ .Values.kubecostModel.promClusterIDLabel }}
            {{- end }}
            - name: RELEASE_NAME
              value: {{ .Release.Name }}
            - name: KUBECOST_NAMESPACE
              value: {{ .Release.Namespace }}
            - name: KUBECOST_TOKEN
              valueFrom:
                configMapKeyRef:
                  name: {{ template "cost-analyzer.fullname" . }}
                  key: kubecost-token
      {{- if .Values.kubecostMetrics.exporter.priorityClassName }}
      priorityClassName: {{ .Values.kubecostMetrics.exporter.priorityClassName }}
      {{- end }}
      {{- with .Values.kubecostMetrics.exporter.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.kubecostMetrics.exporter.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.kubecostMetrics.exporter.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
{{- end }}
{{- end }}
{{- end }}