# services/comms/livekit-token-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: livekit-token-service
  labels:
    app: livekit-token-service
spec:
  replicas: 1
  selector:
    matchLabels:
      app: livekit-token-service
  template:
    metadata:
      labels:
        app: livekit-token-service
    spec:
      nodeSelector:
        hardware: rpi5
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 50
              preference:
                matchExpressions:
                  - key: hardware
                    operator: In
                    values: ["rpi5","rpi4"]
      hostAliases:
        - ip: 10.43.60.6
          hostnames:
            - live.bstein.dev
      containers:
        - name: token-service
          image: ghcr.io/element-hq/lk-jwt-service:0.3.0
          env:
            - name: LIVEKIT_URL
              value: wss://kit.live.bstein.dev/livekit/sfu
            - name: LIVEKIT_KEY
              value: primary
            - name: LIVEKIT_SECRET
              valueFrom:
                secretKeyRef:
                  name: livekit-api
                  key: primary
            - name: LIVEKIT_FULL_ACCESS_HOMESERVERS
              value: live.bstein.dev
          ports:
            - containerPort: 8080
              name: http
          resources:
            requests:
              cpu: 50m
              memory: 128Mi
            limits:
              cpu: 300m
              memory: 256Mi
---
apiVersion: v1
kind: Service
metadata:
  name: livekit-token-service
spec:
  selector:
    app: livekit-token-service
  ports:
    - name: http
      port: 8080
      targetPort: 8080