apiVersion: v1
kind: Namespace
metadata:
  name: bookstack
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: bookstack-database
  namespace: bookstack
spec:
  replicas: 1
  selector:
    matchLabels:
      app: bookstack-database
  template:
    metadata:
      labels:
        app: bookstack-database
    spec:
      containers:
      - name: bookstack-database
        image: lscr.io/linuxserver/mariadb
        imagePullPolicy: Always
        ports:
        - containerPort: 3306
          name: database-port
        env:
        - name: MYSQL_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              name: bookstack-credentials
              key: DB_PASS
        - name: MYSQL_DATABASE
          valueFrom:
            secretKeyRef:
              name: bookstack-credentials
              key: DB_DATABASE
        - name: MYSQL_USER
          valueFrom:
            secretKeyRef:
              name: bookstack-credentials
              key: DB_USER
        - name: MYSQL_PASSWORD
          valueFrom:
            secretKeyRef:
              name: bookstack-credentials
              key: DB_PASS
        envFrom:
#        - secretRef:
#            name: bookstack-credentials
        - configMapRef:
            name: config


        volumeMounts:
        - name: bookstack-database
          mountPath: /config


      volumes:
      - name: bookstack-database
        persistentVolumeClaim:
          claimName: bookstack-database
      securityContext:
        fsGroup: 33

---
apiVersion: v1
kind: Service
metadata:
  name: db
  namespace: bookstack
spec:
  ports:
    - name: db
      port: 3306
      protocol: TCP
  selector:
    app: bookstack-database