apiVersion: edge.ncr.com/v1alpha1
kind: Persistence
metadata:
  name: samhain
  namespace: fim
  labels:
    platform.edge.ncr.com/component: fim
spec:
  statefulSet:
    apiVersion: apps/v1
    kind: StatefulSet
    metadata:
      name: samhain
      namespace: fim
      labels:
        platform.edge.ncr.com/component: fim
    spec:
      replicas: 1
      selector:
        matchLabels:
          platform.edge.ncr.com/component: fim
      template:
        metadata:
          labels:
            platform.edge.ncr.com/component: fim
        spec:
          priorityClassName: edge-p4-operability-services
          initContainers:
          - name: init-fim
            image: bzl://cmd/sds/fim:container_push
            command: ["sh", "/samhain/config/init-script.sh"]
            resources:
              limits:
                cpu: "100m"
                memory: "120Mi"
            volumeMounts:
            - name: config-map
              mountPath: /samhain/config/samhainrc
              subPath: samhainrc
            - name: filter-map
              mountPath: /samhain/config/filter
              subPath: filter
            - name: host-fs
              readOnly: true
              mountPath: /ien_fs/
            - name: samhain-storage
              mountPath: /samhain/db/
            imagePullPolicy: IfNotPresent
          containers:
          - name: fim
            image: bzl://cmd/sds/fim:container_push
            command:
            - /bin/bash
            - -c
            - |
              /usr/bin/python3 /samhain/config/mount-monitor.py &
              /samhain/sbin/samhain -t check -p err -f
            resources:
              limits:
                cpu: "100m"
                memory: "120Mi"
            volumeMounts:
            - name: config-map
              mountPath: /samhain/config/samhainrc
              subPath: samhainrc
            - name: samhain-storage
              mountPath: /samhain/db/
            - name: host-fs
              readOnly: true
              mountPath: /ien_fs/
              mountPropagation: HostToContainer
            imagePullPolicy: IfNotPresent
            tty: true
            startupProbe:
              exec:
                command: [sh, -c, 'cat /samhain/samhain_log | grep "MARK" | tail -1 | grep "TIMESTAMP"']
              failureThreshold: 60
              periodSeconds: 10
          volumes:
          - name: config-map
            configMap:
              name: samhain-config
              items:
              - key: samhainrc
                path: samhainrc
          - name: filter-map
            configMap:
              name: samhain-filter
              items:
              - key: filter
                path: filter
          - name: host-fs
            hostPath:
              type: Directory
              path: /
          imagePullSecrets:
          - name: edge-docker-pull-secret
      volumeClaimTemplates:
      - metadata:
          name: samhain-storage
          labels:
            platform.edge.ncr.com/component: fim
        spec:
          resources:
            requests:
              storage: "64M"
          accessModes: ["ReadWriteOnce"]
          storageClassName: local-path
      serviceName: samhain
      updateStrategy: {}