{{- if .Values.hyperlane.validator.enabled }}
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: {{ include "validator.fullname" . }}
  labels:
    {{- include "agent-common.labels" . | nindent 4 }}
    app.kubernetes.io/component: validator
spec:
  selector:
    matchLabels:
      {{- include "agent-common.selectorLabels" . | nindent 6 }}
      app.kubernetes.io/component: validator
  replicas: {{ len .Values.hyperlane.validator.configs }}
  serviceName: {{ include "validator.fullname" . }}
  template:
    metadata:
      annotations:
        checksum/configmap: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
        checksum/validator-configmap: {{ include (print $.Template.BasePath "/validator-configmap.yaml") . | sha256sum }}
        {{- with .Values.podAnnotations }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
        {{- with .Values.hyperlane.validator.podAnnotations }}
        {{ toYaml . | nindent 8 }}
        {{- end }}
      labels:
        {{- include "agent-common.labels" . | nindent 8 }}
        app.kubernetes.io/component: validator
        {{- with .Values.podCommonLabels }}
        {{ toYaml . | nindent 8 }}
        {{- end }}
        {{- with .Values.hyperlane.validator.podLabels }}
        {{ toYaml . | nindent 8 }}
        {{- end }}
    spec:
      {{- with .Values.imagePullSecrets }}
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
      securityContext:
        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: agent
        securityContext:
          {{- toYaml .Values.securityContext | nindent 10 }}
        image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
        imagePullPolicy: {{ .Values.image.pullPolicy }}
        command: ["/bin/sh", "-c"]
        args:
        - |
            RID=$(echo $REPLICA_NAME | grep -Eo '[0-9]+$')
            env $(cat /config-env-vars/validator-$RID.env /secret-env-vars/validator-$RID.env | xargs) ./validator
        envFrom:
        - configMapRef:
            name: {{ include "agent-common.fullname" . }}
        - secretRef:
            name: {{ include "agent-common.fullname" . }}-secret
        - secretRef:
            name: {{ include "validator.fullname" . }}-secret
        env:
          - name: REPLICA_NAME
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
        resources:
          {{- toYaml .Values.hyperlane.validator.resources | nindent 10 }}
        volumeMounts:
        - name: state
          mountPath: {{ .Values.hyperlane.dbPath }}
        - name: config-env-vars
          mountPath: /config-env-vars
        - name: secret-env-vars
          mountPath: /secret-env-vars
        ports: 
        - name: metrics
          containerPort: {{ .Values.hyperlane.metrics.port }}
      volumes:
      - name: config-env-vars
        configMap:
          name: {{ include "validator.fullname" . }}
      - name: secret-env-vars
        secret:
          secretName: {{ include "validator.fullname" . }}-secret
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
  volumeClaimTemplates:
  - metadata:
      name: state
    spec:
      storageClassName: {{ .Values.storage.storageClass }}
      accessModes: [ {{ .Values.storage.accessModes }} ]
      {{- if .Values.hyperlane.validator.storage.snapshot.enabled }}
      dataSource:
        name: {{ .Values.hyperlane.validator.storage.snapshot.name }}
        kind: VolumeSnapshot
        apiGroup: snapshot.storage.k8s.io
      {{- end }}
      resources:
        requests:
          storage: {{ .Values.hyperlane.validator.storage.size }}
{{- end }}