apiVersion: apps/v1
kind: Deployment
metadata:
  name: mosquitto
  namespace: mosquitto
spec:
  replicas: 1
  selector:
    matchLabels:
      app: mosquitto
  template:
    metadata:
      labels:
        app: mosquitto
    spec:
      containers:
      - name: mosquitto
        image: eclipse-mosquitto
        ports:
        - containerPort: 8883
        - containerPort: 9443
        volumeMounts:
        - mountPath: /mosquitto/config/mosquitto.conf
          subPath: mosquitto.conf
          name: config
        - mountPath: /mosquitto/secrets 
          name: passwd 
        - mountPath: /mosquitto/data/
          name: data
        - mountPath: /mosquitto/certs
          name: tls-certs
          readOnly: true
        - mountPath: /mosquitto/config/acl.conf
          name: acl
          subPath: acl
          readOnly: true  
      volumes:
      - name: config
        configMap:
          name: mosquitto-config
      - name: passwd
        secret:
          secretName: mosquitto-passwd    
      - name: data
        persistentVolumeClaim:
          claimName: mosquitto-data 
      - name: tls-certs
        secret:
          secretName: mosquitto-tls    
      - name: acl
        secret:
          secretName: mosquitto-acl