apiVersion: apps/v1
kind: Deployment
metadata:
  name: woodpecker-agent
  namespace: woodpecker
spec:
  replicas: 1
  selector:
    matchLabels:
      app: woodpecker-agent
  template:
    metadata:
      labels:
        app: woodpecker-agent
    spec:
      containers:
      - name: agent
        image: woodpeckerci/woodpecker-agent:v3.8.0
        env:
        - name: WOODPECKER_SERVER
          value: "woodpecker-server:9000"
        - name: WOODPECKER_BACKEND_K8S_POD_ANNOTATIONS_ALLOW_FROM_STEP
          value: "true"        
        - name: WOODPECKER_BACKEND_K8S_STORAGE_CLASS
          value: azurefile-csi
        - name: WOODPECKER_AGENT_SECRET
          valueFrom:
            secretKeyRef:
              name: woodpecker-secret
              key: WOODPECKER_AGENT_SECRET
        volumeMounts:
          - name: secrets-store
            mountPath: "/mnt/secrets"
            readOnly: true
      volumes:
        - name: secrets-store
          csi:
            driver: secrets-store.csi.k8s.io
            readOnly: true
            volumeAttributes:
              secretProviderClass: "woodpecker-secrets"