apiVersion: apps/v1
kind: Deployment
metadata:
  name: mqtt-emqx
  namespace: customer-x
  labels:
    app: mqtt-emqx
spec:
  replicas: 1
  selector:
    matchLabels:
      app: mqtt-emqx
  template:
    metadata:
      labels:
        app: mqtt-emqx
    spec:
      containers:
        - name: mqtt-emqx
          image: emqx/emqx:5.0.8
          ports:
            - containerPort: 1883
              name: mqtt-port
            - containerPort: 8083
              name: websocket-port
            - containerPort: 18083
              name: http-dashboard
          env:
            - name: EMQX_NODE__COOKIE
              value: "super-secret-cookie-secret" # TODO: use secret manager
            - name: EMQX_DASHBOARD__DEFAULT_USERNAME
              value: "admin"
            - name: EMQX_DASHBOARD__DEFAULT_PASSWORD
              value: "pass" # TODO: use secret manager
            - name: EMQX_AUTHENTICATION__1__MECHANISM
              value: "password_based"
            - name: EMQX_AUTHENTICATION__1__BACKEND
              value: "built_in_database"
            - name: EMQX_AUTHENTICATION__1__USER_ID_TYPE
              value: "username"

        # init container for our EMQX broker
        - name: mqtt-emqx-init
          image: alpine/curl
          volumeMounts:
            - name: emqx-init-script
              mountPath: /emqx_init.sh
              subPath: emqx_init.sh
          env:
            - name: MY_POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: EMQX_DASHBOARD__DEFAULT_USERNAME
              value: "admin"
            - name: EMQX_DASHBOARD__DEFAULT_PASSWORD
              value: "pass" # TODO: use secret manager
          command:
            - sh
            - /emqx_init.sh
      volumes:
        - name: emqx-init-script
          configMap:
            name: emqx-init-script-configmap
      tolerations:
        - key: instance_type
          value: spot
          effect: NoSchedule
          operator: Equal
---
apiVersion: v1
kind: Service
metadata:
  name: mqtt-emqx
  namespace: customer-x
spec:
  type: NodePort
  selector:
    app: mqtt-emqx
  ports:
    - port: 1883
      name: mqtt-port
    - port: 8083
      name: websocket-port
    - port: 18083
      name: http-dashboard
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: emqx-init-script-configmap
data:
  emqx_init.sh: |
    echo $MY_POD_IP
    BASE_API_URL="http://$EMQX_DASHBOARD__DEFAULT_USERNAME:$EMQX_DASHBOARD__DEFAULT_PASSWORD@$MY_POD_IP:18083/api/v5"

    while ! curl -s \
        "$BASE_API_URL/authentication/password_based:built_in_database/users";
    do
        echo 'waiting for EMQX to start..';
        sleep 5;
    done;

    echo 'EMQX started, ready to initialize..';

    curl -s \
        "$BASE_API_URL/authentication/password_based:built_in_database/users" \
        -H 'Content-Type: application/json' \
        -d '{ "user_id": "admin", "password": "password" }'

    echo 'done!'
    sleep 10

    while true; do echo 'idling..'; sleep 60; done