MàJ - Application.properties
This commit is contained in:
DahoudG
@@ -0,0 +1,70 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-production
|
||||||
|
annotations:
|
||||||
|
config.kubernetes.io/local-config: "true"
|
||||||
|
|
||||||
|
namespace: lions-apps
|
||||||
|
|
||||||
|
resources:
|
||||||
|
- ../../kubernetes/namespace.yaml
|
||||||
|
- ../../kubernetes/configmap.yaml
|
||||||
|
- ../../kubernetes/secret.yaml
|
||||||
|
- ../../kubernetes/rbac.yaml
|
||||||
|
- ../../kubernetes/deployment.yaml
|
||||||
|
- ../../kubernetes/service.yaml
|
||||||
|
- ../../kubernetes/ingress.yaml
|
||||||
|
- ../../kubernetes/hpa.yaml
|
||||||
|
|
||||||
|
images:
|
||||||
|
- name: registry.lions.dev/lionsdev/lionsdev-client
|
||||||
|
newTag: latest
|
||||||
|
|
||||||
|
replicas:
|
||||||
|
- name: lionsdev-client
|
||||||
|
count: 3
|
||||||
|
|
||||||
|
patchesStrategicMerge:
|
||||||
|
- patches/configmap-production.yaml
|
||||||
|
- patches/ingress-production.yaml
|
||||||
|
- patches/deployment-production.yaml
|
||||||
|
|
||||||
|
patchesJson6902:
|
||||||
|
- target:
|
||||||
|
group: apps
|
||||||
|
version: v1
|
||||||
|
kind: Deployment
|
||||||
|
name: lionsdev-client
|
||||||
|
path: patches/deployment-resources.yaml
|
||||||
|
|
||||||
|
configMapGenerator:
|
||||||
|
- name: lionsdev-client-production-config
|
||||||
|
literals:
|
||||||
|
- ENVIRONMENT=production
|
||||||
|
- DOMAIN=lions.dev
|
||||||
|
- LOG_LEVEL=INFO
|
||||||
|
- QUARKUS_PROFILE=prod
|
||||||
|
- CLUSTER_NAME=k2
|
||||||
|
- REPLICA_COUNT=3
|
||||||
|
|
||||||
|
secretGenerator:
|
||||||
|
- name: lionsdev-client-production-secrets
|
||||||
|
literals:
|
||||||
|
- DATABASE_URL=jdbc:postgresql://postgresql-service.postgresql.svc.cluster.local:5432/lionsdb
|
||||||
|
- VAULT_ADDR=https://vault.lions.dev
|
||||||
|
- PROMETHEUS_URL=https://prometheus.lions.dev
|
||||||
|
- GRAFANA_URL=https://grafana.lions.dev
|
||||||
|
|
||||||
|
commonLabels:
|
||||||
|
environment: production
|
||||||
|
cluster: k2
|
||||||
|
tier: frontend
|
||||||
|
app.kubernetes.io/instance: lionsdev-client-production
|
||||||
|
|
||||||
|
commonAnnotations:
|
||||||
|
deployment.kubernetes.io/environment: production
|
||||||
|
deployment.kubernetes.io/cluster: k2
|
||||||
|
deployment.kubernetes.io/managed-by: lionsctl
|
||||||
|
contact: gbanedahoud@gmail.com
|
||||||
@@ -0,0 +1,102 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-config
|
||||||
|
namespace: lions-apps
|
||||||
|
data:
|
||||||
|
# Production-specific application configuration
|
||||||
|
application.properties: |
|
||||||
|
# Quarkus Configuration
|
||||||
|
quarkus.application.name=lionsdev-client
|
||||||
|
quarkus.application.version=1.0.0
|
||||||
|
|
||||||
|
# HTTP Configuration - Production
|
||||||
|
quarkus.http.port=8080
|
||||||
|
quarkus.http.host=0.0.0.0
|
||||||
|
quarkus.http.cors=true
|
||||||
|
quarkus.http.cors.origins=https://lions.dev,https://www.lions.dev
|
||||||
|
|
||||||
|
# Database Configuration - Production
|
||||||
|
quarkus.datasource.db-kind=postgresql
|
||||||
|
quarkus.datasource.jdbc.url=jdbc:postgresql://postgresql-service.postgresql.svc.cluster.local:5432/lionsdb
|
||||||
|
quarkus.datasource.jdbc.max-size=50
|
||||||
|
quarkus.datasource.jdbc.min-size=10
|
||||||
|
quarkus.datasource.jdbc.acquisition-timeout=30
|
||||||
|
quarkus.datasource.jdbc.leak-detection-interval=10M
|
||||||
|
|
||||||
|
# Hibernate Configuration - Production
|
||||||
|
quarkus.hibernate-orm.database.generation=validate
|
||||||
|
quarkus.hibernate-orm.log.sql=false
|
||||||
|
quarkus.hibernate-orm.sql-load-script=no-file
|
||||||
|
quarkus.hibernate-orm.statistics=false
|
||||||
|
|
||||||
|
# Logging Configuration - Production
|
||||||
|
quarkus.log.level=INFO
|
||||||
|
quarkus.log.category."dev.lions".level=INFO
|
||||||
|
quarkus.log.category."org.hibernate".level=WARN
|
||||||
|
quarkus.log.category."io.quarkus".level=INFO
|
||||||
|
quarkus.log.console.enable=true
|
||||||
|
quarkus.log.console.format=%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c{3.}] (%t) %s%e%n
|
||||||
|
quarkus.log.console.json=false
|
||||||
|
|
||||||
|
# Health Check Configuration
|
||||||
|
quarkus.health.extensions.enabled=true
|
||||||
|
quarkus.smallrye-health.root-path=/health
|
||||||
|
quarkus.smallrye-health.liveness-path=/health/live
|
||||||
|
quarkus.smallrye-health.readiness-path=/health/ready
|
||||||
|
quarkus.smallrye-health.startup-path=/health/started
|
||||||
|
|
||||||
|
# Metrics Configuration - Production
|
||||||
|
quarkus.micrometer.enabled=true
|
||||||
|
quarkus.micrometer.export.prometheus.enabled=true
|
||||||
|
quarkus.micrometer.export.prometheus.path=/metrics
|
||||||
|
quarkus.micrometer.binder.jvm=true
|
||||||
|
quarkus.micrometer.binder.system=true
|
||||||
|
quarkus.micrometer.binder.http-server.enabled=true
|
||||||
|
|
||||||
|
# OpenAPI Configuration - Production (disabled for security)
|
||||||
|
quarkus.swagger-ui.enable=false
|
||||||
|
quarkus.openapi.path=/api/openapi
|
||||||
|
mp.openapi.extensions.smallrye.info.title=Lions Dev Client API
|
||||||
|
mp.openapi.extensions.smallrye.info.version=1.0.0
|
||||||
|
mp.openapi.extensions.smallrye.info.description=Lions Dev professional website and client portal
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.email=contact@lions.dev
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.name=Lions Dev Team
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.url=https://lions.dev
|
||||||
|
|
||||||
|
# Security Configuration - Production
|
||||||
|
quarkus.http.auth.basic=false
|
||||||
|
quarkus.security.jpa.enabled=false
|
||||||
|
quarkus.http.ssl.certificate.reload-period=24H
|
||||||
|
|
||||||
|
# Static Resources Configuration - Production
|
||||||
|
quarkus.http.static-resources."/"=META-INF/resources
|
||||||
|
quarkus.http.static-resources.cache-control=max-age=31536000, public, immutable
|
||||||
|
quarkus.http.enable-compression=true
|
||||||
|
|
||||||
|
# Performance Configuration
|
||||||
|
quarkus.thread-pool.core-threads=8
|
||||||
|
quarkus.thread-pool.max-threads=50
|
||||||
|
quarkus.thread-pool.queue-size=1000
|
||||||
|
|
||||||
|
# Production environment configuration
|
||||||
|
environment: "production"
|
||||||
|
domain: "lions.dev"
|
||||||
|
log-level: "INFO"
|
||||||
|
cluster: "k2"
|
||||||
|
|
||||||
|
# Lions Dev Production Configuration
|
||||||
|
lions.dev.company.name=Lions Dev
|
||||||
|
lions.dev.company.email=contact@lions.dev
|
||||||
|
lions.dev.company.phone=+225 01 01 75 95 25
|
||||||
|
lions.dev.company.address=Abidjan, Côte d'Ivoire
|
||||||
|
lions.dev.company.website=https://lions.dev
|
||||||
|
lions.dev.company.description=Enterprise digital transformation partner delivering mission-critical solutions across Africa
|
||||||
|
|
||||||
|
# Production feature flags
|
||||||
|
lions.dev.features.analytics.enabled=true
|
||||||
|
lions.dev.features.monitoring.enabled=true
|
||||||
|
lions.dev.features.contact-form.enabled=true
|
||||||
|
lions.dev.features.newsletter.enabled=true
|
||||||
|
lions.dev.features.debug.enabled=false
|
||||||
|
lions.dev.features.swagger.enabled=false
|
||||||
@@ -0,0 +1,70 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client
|
||||||
|
namespace: lions-apps
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/environment: "production"
|
||||||
|
deployment.kubernetes.io/cluster: "k2"
|
||||||
|
deployment.kubernetes.io/domain: "lions.dev"
|
||||||
|
spec:
|
||||||
|
replicas: 3
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
prometheus.io/scrape: "true"
|
||||||
|
prometheus.io/port: "8080"
|
||||||
|
prometheus.io/path: "/metrics"
|
||||||
|
deployment.kubernetes.io/environment: "production"
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: lionsdev-client
|
||||||
|
image: registry.lions.dev/lionsdev/lionsdev-client:latest
|
||||||
|
env:
|
||||||
|
- name: QUARKUS_PROFILE
|
||||||
|
value: "prod"
|
||||||
|
- name: ENVIRONMENT
|
||||||
|
value: "production"
|
||||||
|
- name: CLUSTER_NAME
|
||||||
|
value: "k2"
|
||||||
|
- name: DOMAIN
|
||||||
|
value: "lions.dev"
|
||||||
|
- name: JAVA_OPTS
|
||||||
|
value: "-Xms512m -Xmx1024m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+OptimizeStringConcat"
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: "512Mi"
|
||||||
|
cpu: "300m"
|
||||||
|
limits:
|
||||||
|
memory: "1Gi"
|
||||||
|
cpu: "1000m"
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/live
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
periodSeconds: 30
|
||||||
|
timeoutSeconds: 10
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/ready
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
startupProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/started
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
failureThreshold: 60
|
||||||
|
successThreshold: 1
|
||||||
@@ -0,0 +1,100 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-ingress
|
||||||
|
namespace: lions-apps
|
||||||
|
annotations:
|
||||||
|
# Production-specific Nginx configurations
|
||||||
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||||
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||||
|
nginx.ingress.kubernetes.io/use-regex: "true"
|
||||||
|
|
||||||
|
# SSL/TLS Configuration for Production
|
||||||
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||||
|
cert-manager.io/acme-challenge-type: "http01"
|
||||||
|
|
||||||
|
# Production performance optimizations
|
||||||
|
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-connect-timeout: "30"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "30"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "30"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-buffering: "on"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-buffers-number: "8"
|
||||||
|
|
||||||
|
# Production caching strategy
|
||||||
|
nginx.ingress.kubernetes.io/server-snippet: |
|
||||||
|
# Static assets - long-term caching
|
||||||
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot|webp|avif)$ {
|
||||||
|
expires 1y;
|
||||||
|
add_header Cache-Control "public, immutable";
|
||||||
|
add_header X-Content-Type-Options "nosniff";
|
||||||
|
add_header Vary "Accept-Encoding";
|
||||||
|
gzip_static on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTML files - short-term caching
|
||||||
|
location ~* \.(html|htm)$ {
|
||||||
|
expires 1h;
|
||||||
|
add_header Cache-Control "public, must-revalidate";
|
||||||
|
add_header X-Content-Type-Options "nosniff";
|
||||||
|
add_header X-Frame-Options "DENY";
|
||||||
|
add_header X-XSS-Protection "1; mode=block";
|
||||||
|
add_header Referrer-Policy "strict-origin-when-cross-origin";
|
||||||
|
}
|
||||||
|
|
||||||
|
# API endpoints - no caching
|
||||||
|
location ~* ^/api/ {
|
||||||
|
expires -1;
|
||||||
|
add_header Cache-Control "no-cache, no-store, must-revalidate";
|
||||||
|
add_header Pragma "no-cache";
|
||||||
|
}
|
||||||
|
|
||||||
|
# Production security headers
|
||||||
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||||
|
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
|
||||||
|
add_header X-Content-Type-Options "nosniff" always;
|
||||||
|
add_header X-Frame-Options "DENY" always;
|
||||||
|
add_header X-XSS-Protection "1; mode=block" always;
|
||||||
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
||||||
|
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https: blob:; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self';" always;
|
||||||
|
add_header Permissions-Policy "geolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), speaker=(), fullscreen=(self)" always;
|
||||||
|
|
||||||
|
# Production rate limiting
|
||||||
|
nginx.ingress.kubernetes.io/rate-limit: "200"
|
||||||
|
nginx.ingress.kubernetes.io/rate-limit-window: "1m"
|
||||||
|
nginx.ingress.kubernetes.io/rate-limit-connections: "50"
|
||||||
|
|
||||||
|
# Production monitoring
|
||||||
|
nginx.ingress.kubernetes.io/enable-access-log: "true"
|
||||||
|
nginx.ingress.kubernetes.io/enable-rewrite-log: "false"
|
||||||
|
|
||||||
|
# Production redirect from www to non-www
|
||||||
|
nginx.ingress.kubernetes.io/from-to-www-redirect: "true"
|
||||||
|
spec:
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- lions.dev
|
||||||
|
- www.lions.dev
|
||||||
|
secretName: lionsdev-client-tls-prod
|
||||||
|
rules:
|
||||||
|
- host: lions.dev
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: lionsdev-client-service
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
|
- host: www.lions.dev
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: lionsdev-client-service
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
85
applications/lionsdev-client/kubernetes/configmap.yaml
Normal file
85
applications/lionsdev-client/kubernetes/configmap.yaml
Normal file
@@ -0,0 +1,85 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-config
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
data:
|
||||||
|
# Application configuration
|
||||||
|
application.properties: |
|
||||||
|
# Quarkus Configuration
|
||||||
|
quarkus.application.name=lionsdev-client
|
||||||
|
quarkus.application.version=1.0.0
|
||||||
|
|
||||||
|
# HTTP Configuration
|
||||||
|
quarkus.http.port=8080
|
||||||
|
quarkus.http.host=0.0.0.0
|
||||||
|
quarkus.http.cors=true
|
||||||
|
quarkus.http.cors.origins=https://lions.dev,https://staging.lions.dev,https://dev.lions.dev
|
||||||
|
|
||||||
|
# Database Configuration (will be overridden by secrets)
|
||||||
|
quarkus.datasource.db-kind=postgresql
|
||||||
|
quarkus.datasource.jdbc.url=jdbc:postgresql://postgresql-service.postgresql.svc.cluster.local:5432/lionsdb
|
||||||
|
quarkus.datasource.jdbc.max-size=20
|
||||||
|
quarkus.datasource.jdbc.min-size=5
|
||||||
|
|
||||||
|
# Hibernate Configuration
|
||||||
|
quarkus.hibernate-orm.database.generation=update
|
||||||
|
quarkus.hibernate-orm.log.sql=false
|
||||||
|
quarkus.hibernate-orm.sql-load-script=no-file
|
||||||
|
|
||||||
|
# Logging Configuration
|
||||||
|
quarkus.log.level=INFO
|
||||||
|
quarkus.log.category."dev.lions".level=DEBUG
|
||||||
|
quarkus.log.console.enable=true
|
||||||
|
quarkus.log.console.format=%d{HH:mm:ss} %-5p [%c{2.}] (%t) %s%e%n
|
||||||
|
|
||||||
|
# Health Check Configuration
|
||||||
|
quarkus.health.extensions.enabled=true
|
||||||
|
quarkus.smallrye-health.root-path=/health
|
||||||
|
|
||||||
|
# Metrics Configuration
|
||||||
|
quarkus.micrometer.enabled=true
|
||||||
|
quarkus.micrometer.export.prometheus.enabled=true
|
||||||
|
quarkus.micrometer.export.prometheus.path=/metrics
|
||||||
|
|
||||||
|
# OpenAPI Configuration
|
||||||
|
quarkus.swagger-ui.enable=true
|
||||||
|
quarkus.swagger-ui.path=/swagger-ui
|
||||||
|
mp.openapi.extensions.smallrye.info.title=Lions Dev Client API
|
||||||
|
mp.openapi.extensions.smallrye.info.version=1.0.0
|
||||||
|
mp.openapi.extensions.smallrye.info.description=Lions Dev professional website and client portal
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.email=contact@lions.dev
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.name=Lions Dev Team
|
||||||
|
mp.openapi.extensions.smallrye.info.contact.url=https://lions.dev
|
||||||
|
|
||||||
|
# Security Configuration
|
||||||
|
quarkus.http.auth.basic=false
|
||||||
|
quarkus.security.jpa.enabled=false
|
||||||
|
|
||||||
|
# Static Resources Configuration
|
||||||
|
quarkus.http.static-resources."/"=META-INF/resources
|
||||||
|
quarkus.http.static-resources.cache-control=max-age=86400
|
||||||
|
|
||||||
|
# Environment-specific overrides (will be patched per environment)
|
||||||
|
environment: "production"
|
||||||
|
domain: "lions.dev"
|
||||||
|
log-level: "INFO"
|
||||||
|
|
||||||
|
# Lions Dev specific configuration
|
||||||
|
lions.dev.company.name=Lions Dev
|
||||||
|
lions.dev.company.email=contact@lions.dev
|
||||||
|
lions.dev.company.phone=+225 01 01 75 95 25
|
||||||
|
lions.dev.company.address=Abidjan, Côte d'Ivoire
|
||||||
|
lions.dev.company.website=https://lions.dev
|
||||||
|
lions.dev.company.description=Enterprise digital transformation partner delivering mission-critical solutions across Africa
|
||||||
|
|
||||||
|
# Feature flags
|
||||||
|
lions.dev.features.analytics.enabled=true
|
||||||
|
lions.dev.features.monitoring.enabled=true
|
||||||
|
lions.dev.features.contact-form.enabled=true
|
||||||
|
lions.dev.features.newsletter.enabled=true
|
||||||
149
applications/lionsdev-client/kubernetes/deployment.yaml
Normal file
149
applications/lionsdev-client/kubernetes/deployment.yaml
Normal file
@@ -0,0 +1,149 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
app.kubernetes.io/version: "1.0.0"
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: "1"
|
||||||
|
description: "Lions Dev professional website and client portal"
|
||||||
|
spec:
|
||||||
|
replicas: 3
|
||||||
|
strategy:
|
||||||
|
type: RollingUpdate
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 1
|
||||||
|
maxUnavailable: 0
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: lionsdev-client
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/version: "1.0.0"
|
||||||
|
annotations:
|
||||||
|
prometheus.io/scrape: "true"
|
||||||
|
prometheus.io/port: "8080"
|
||||||
|
prometheus.io/path: "/metrics"
|
||||||
|
spec:
|
||||||
|
serviceAccountName: lionsdev-client
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1001
|
||||||
|
runAsGroup: 1001
|
||||||
|
fsGroup: 1001
|
||||||
|
containers:
|
||||||
|
- name: lionsdev-client
|
||||||
|
image: registry.lions.dev/lionsdev/lionsdev-client:latest
|
||||||
|
imagePullPolicy: Always
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
containerPort: 8080
|
||||||
|
protocol: TCP
|
||||||
|
- name: metrics
|
||||||
|
containerPort: 8080
|
||||||
|
protocol: TCP
|
||||||
|
env:
|
||||||
|
- name: KUBERNETES_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: HOSTNAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: QUARKUS_PROFILE
|
||||||
|
value: "prod"
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: lionsdev-client-config
|
||||||
|
- secretRef:
|
||||||
|
name: lionsdev-client-secrets
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: "256Mi"
|
||||||
|
cpu: "200m"
|
||||||
|
limits:
|
||||||
|
memory: "1Gi"
|
||||||
|
cpu: "1000m"
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/live
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/ready
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
periodSeconds: 5
|
||||||
|
timeoutSeconds: 3
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
startupProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/started
|
||||||
|
port: http
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
periodSeconds: 5
|
||||||
|
timeoutSeconds: 3
|
||||||
|
failureThreshold: 30
|
||||||
|
successThreshold: 1
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1001
|
||||||
|
capabilities:
|
||||||
|
drop:
|
||||||
|
- ALL
|
||||||
|
volumeMounts:
|
||||||
|
- name: tmp
|
||||||
|
mountPath: /tmp
|
||||||
|
- name: logs
|
||||||
|
mountPath: /app/logs
|
||||||
|
volumes:
|
||||||
|
- name: tmp
|
||||||
|
emptyDir: {}
|
||||||
|
- name: logs
|
||||||
|
emptyDir: {}
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: registry-lions-dev
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
tolerations:
|
||||||
|
- key: "node.kubernetes.io/not-ready"
|
||||||
|
operator: "Exists"
|
||||||
|
effect: "NoExecute"
|
||||||
|
tolerationSeconds: 300
|
||||||
|
- key: "node.kubernetes.io/unreachable"
|
||||||
|
operator: "Exists"
|
||||||
|
effect: "NoExecute"
|
||||||
|
tolerationSeconds: 300
|
||||||
|
affinity:
|
||||||
|
podAntiAffinity:
|
||||||
|
preferredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
- weight: 100
|
||||||
|
podAffinityTerm:
|
||||||
|
labelSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: app
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- lionsdev-client
|
||||||
|
topologyKey: kubernetes.io/hostname
|
||||||
67
applications/lionsdev-client/kubernetes/hpa.yaml
Normal file
67
applications/lionsdev-client/kubernetes/hpa.yaml
Normal file
@@ -0,0 +1,67 @@
|
|||||||
|
apiVersion: autoscaling/v2
|
||||||
|
kind: HorizontalPodAutoscaler
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-hpa
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
spec:
|
||||||
|
scaleTargetRef:
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
name: lionsdev-client
|
||||||
|
minReplicas: 2
|
||||||
|
maxReplicas: 10
|
||||||
|
metrics:
|
||||||
|
- type: Resource
|
||||||
|
resource:
|
||||||
|
name: cpu
|
||||||
|
target:
|
||||||
|
type: Utilization
|
||||||
|
averageUtilization: 70
|
||||||
|
- type: Resource
|
||||||
|
resource:
|
||||||
|
name: memory
|
||||||
|
target:
|
||||||
|
type: Utilization
|
||||||
|
averageUtilization: 80
|
||||||
|
behavior:
|
||||||
|
scaleDown:
|
||||||
|
stabilizationWindowSeconds: 300
|
||||||
|
policies:
|
||||||
|
- type: Percent
|
||||||
|
value: 50
|
||||||
|
periodSeconds: 60
|
||||||
|
- type: Pods
|
||||||
|
value: 2
|
||||||
|
periodSeconds: 60
|
||||||
|
selectPolicy: Min
|
||||||
|
scaleUp:
|
||||||
|
stabilizationWindowSeconds: 60
|
||||||
|
policies:
|
||||||
|
- type: Percent
|
||||||
|
value: 100
|
||||||
|
periodSeconds: 30
|
||||||
|
- type: Pods
|
||||||
|
value: 4
|
||||||
|
periodSeconds: 30
|
||||||
|
selectPolicy: Max
|
||||||
|
---
|
||||||
|
apiVersion: policy/v1
|
||||||
|
kind: PodDisruptionBudget
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-pdb
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
spec:
|
||||||
|
minAvailable: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: lionsdev-client
|
||||||
89
applications/lionsdev-client/kubernetes/ingress.yaml
Normal file
89
applications/lionsdev-client/kubernetes/ingress.yaml
Normal file
@@ -0,0 +1,89 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-ingress
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
# Nginx Ingress Controller annotations
|
||||||
|
kubernetes.io/ingress.class: "nginx"
|
||||||
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||||
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||||
|
nginx.ingress.kubernetes.io/use-regex: "true"
|
||||||
|
|
||||||
|
# SSL/TLS Configuration
|
||||||
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||||
|
cert-manager.io/acme-challenge-type: "http01"
|
||||||
|
|
||||||
|
# Performance and caching
|
||||||
|
nginx.ingress.kubernetes.io/proxy-body-size: "10m"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-buffering: "on"
|
||||||
|
nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
|
||||||
|
|
||||||
|
# Static assets caching
|
||||||
|
nginx.ingress.kubernetes.io/server-snippet: |
|
||||||
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
||||||
|
expires 1y;
|
||||||
|
add_header Cache-Control "public, immutable";
|
||||||
|
add_header X-Content-Type-Options "nosniff";
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(html|htm)$ {
|
||||||
|
expires 1h;
|
||||||
|
add_header Cache-Control "public, must-revalidate";
|
||||||
|
add_header X-Content-Type-Options "nosniff";
|
||||||
|
add_header X-Frame-Options "DENY";
|
||||||
|
add_header X-XSS-Protection "1; mode=block";
|
||||||
|
add_header Referrer-Policy "strict-origin-when-cross-origin";
|
||||||
|
}
|
||||||
|
|
||||||
|
# Security headers
|
||||||
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
|
||||||
|
add_header X-Content-Type-Options "nosniff" always;
|
||||||
|
add_header X-Frame-Options "DENY" always;
|
||||||
|
add_header X-XSS-Protection "1; mode=block" always;
|
||||||
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
||||||
|
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self'; frame-ancestors 'none';" always;
|
||||||
|
|
||||||
|
# Rate limiting
|
||||||
|
nginx.ingress.kubernetes.io/rate-limit: "100"
|
||||||
|
nginx.ingress.kubernetes.io/rate-limit-window: "1m"
|
||||||
|
|
||||||
|
# Monitoring
|
||||||
|
nginx.ingress.kubernetes.io/enable-access-log: "true"
|
||||||
|
nginx.ingress.kubernetes.io/enable-rewrite-log: "false"
|
||||||
|
spec:
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- lions.dev
|
||||||
|
- www.lions.dev
|
||||||
|
secretName: lionsdev-client-tls
|
||||||
|
rules:
|
||||||
|
- host: lions.dev
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: lionsdev-client-service
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
|
- host: www.lions.dev
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: lionsdev-client-service
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
47
applications/lionsdev-client/kubernetes/namespace.yaml
Normal file
47
applications/lionsdev-client/kubernetes/namespace.yaml
Normal file
@@ -0,0 +1,47 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: lions-apps
|
||||||
|
labels:
|
||||||
|
name: lions-apps
|
||||||
|
app.kubernetes.io/name: lions-apps
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
description: "Lions Dev applications namespace"
|
||||||
|
contact: "infrastructure@lions.dev"
|
||||||
|
environment: "multi-environment"
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ResourceQuota
|
||||||
|
metadata:
|
||||||
|
name: lions-apps-quota
|
||||||
|
namespace: lions-apps
|
||||||
|
spec:
|
||||||
|
hard:
|
||||||
|
requests.cpu: "4"
|
||||||
|
requests.memory: 8Gi
|
||||||
|
limits.cpu: "8"
|
||||||
|
limits.memory: 16Gi
|
||||||
|
persistentvolumeclaims: "10"
|
||||||
|
services: "20"
|
||||||
|
secrets: "50"
|
||||||
|
configmaps: "50"
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: LimitRange
|
||||||
|
metadata:
|
||||||
|
name: lions-apps-limits
|
||||||
|
namespace: lions-apps
|
||||||
|
spec:
|
||||||
|
limits:
|
||||||
|
- default:
|
||||||
|
cpu: "1"
|
||||||
|
memory: "1Gi"
|
||||||
|
defaultRequest:
|
||||||
|
cpu: "100m"
|
||||||
|
memory: "128Mi"
|
||||||
|
type: Container
|
||||||
|
- default:
|
||||||
|
storage: "10Gi"
|
||||||
|
type: PersistentVolumeClaim
|
||||||
71
applications/lionsdev-client/kubernetes/rbac.yaml
Normal file
71
applications/lionsdev-client/kubernetes/rbac.yaml
Normal file
@@ -0,0 +1,71 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-role
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["configmaps", "secrets"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["pods"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
- apiGroups: ["apps"]
|
||||||
|
resources: ["deployments", "replicasets"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["services", "endpoints"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-rolebinding
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: lionsdev-client
|
||||||
|
namespace: lions-apps
|
||||||
|
roleRef:
|
||||||
|
kind: Role
|
||||||
|
name: lionsdev-client-role
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: registry-lions-dev
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
type: kubernetes.io/dockerconfigjson
|
||||||
|
data:
|
||||||
|
.dockerconfigjson: eyJhdXRocyI6eyJyZWdpc3RyeS5saW9ucy5kZXYiOnsidXNlcm5hbWUiOiJsaW9uc3JlZ2lzdHJ5IiwicGFzc3dvcmQiOiJMaW9uc1JlZ2lzdHJ5MjAyNSEiLCJhdXRoIjoiYkdsdmJuTnlaV2RwYzNSeWVUcE1hVzl1YzFKbFoybHpkSEo1TWpBeU5TRT0ifX19
|
||||||
|
# Base64 encoded Docker config for registry.lions.dev
|
||||||
|
# Username: lionsregistry
|
||||||
|
# Password: LionsRegistry2025!
|
||||||
61
applications/lionsdev-client/kubernetes/secret.yaml
Normal file
61
applications/lionsdev-client/kubernetes/secret.yaml
Normal file
@@ -0,0 +1,61 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-secrets
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
vault.hashicorp.com/agent-inject: "true"
|
||||||
|
vault.hashicorp.com/role: "lionsdev-client"
|
||||||
|
vault.hashicorp.com/agent-inject-secret-database: "secret/lionsdev-client/database"
|
||||||
|
vault.hashicorp.com/agent-inject-template-database: |
|
||||||
|
{{- with secret "secret/lionsdev-client/database" -}}
|
||||||
|
QUARKUS_DATASOURCE_USERNAME={{ .Data.data.username }}
|
||||||
|
QUARKUS_DATASOURCE_PASSWORD={{ .Data.data.password }}
|
||||||
|
{{- end }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
# Database credentials (base64 encoded)
|
||||||
|
# These will be injected by Vault in production
|
||||||
|
# Default values for development/testing
|
||||||
|
QUARKUS_DATASOURCE_USERNAME: bGlvbnNfdXNlcg== # lions_user
|
||||||
|
QUARKUS_DATASOURCE_PASSWORD: TGlvbnNEZXYyMDI1IQ== # LionsDev2025!
|
||||||
|
|
||||||
|
# SMTP Configuration for contact forms
|
||||||
|
QUARKUS_MAILER_HOST: c210cC5nbWFpbC5jb20= # smtp.gmail.com
|
||||||
|
QUARKUS_MAILER_PORT: NTg3 # 587
|
||||||
|
QUARKUS_MAILER_USERNAME: Y29udGFjdEBsaW9ucy5kZXY= # contact@lions.dev
|
||||||
|
QUARKUS_MAILER_PASSWORD: "" # Will be injected by Vault
|
||||||
|
|
||||||
|
# JWT Secret for session management
|
||||||
|
JWT_SECRET: TGlvbnNEZXZKV1RTZWNyZXQyMDI1IUVudGVycHJpc2U= # LionsDevJWTSecret2025!Enterprise
|
||||||
|
|
||||||
|
# API Keys for external services
|
||||||
|
GOOGLE_ANALYTICS_ID: "" # Will be injected by Vault
|
||||||
|
GOOGLE_MAPS_API_KEY: "" # Will be injected by Vault
|
||||||
|
|
||||||
|
# Monitoring and observability
|
||||||
|
PROMETHEUS_AUTH_TOKEN: "" # Will be injected by Vault
|
||||||
|
GRAFANA_API_KEY: "" # Will be injected by Vault
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-tls
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/issuer: "letsencrypt-prod"
|
||||||
|
type: kubernetes.io/tls
|
||||||
|
data:
|
||||||
|
# TLS certificate and key will be automatically generated by cert-manager
|
||||||
|
tls.crt: ""
|
||||||
|
tls.key: ""
|
||||||
53
applications/lionsdev-client/kubernetes/service.yaml
Normal file
53
applications/lionsdev-client/kubernetes/service.yaml
Normal file
@@ -0,0 +1,53 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-service
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
service.beta.kubernetes.io/aws-load-balancer-type: "nlb"
|
||||||
|
prometheus.io/scrape: "true"
|
||||||
|
prometheus.io/port: "8080"
|
||||||
|
prometheus.io/path: "/metrics"
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
port: 80
|
||||||
|
targetPort: http
|
||||||
|
protocol: TCP
|
||||||
|
- name: metrics
|
||||||
|
port: 8080
|
||||||
|
targetPort: metrics
|
||||||
|
protocol: TCP
|
||||||
|
selector:
|
||||||
|
app: lionsdev-client
|
||||||
|
sessionAffinity: None
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: lionsdev-client-headless
|
||||||
|
namespace: lions-apps
|
||||||
|
labels:
|
||||||
|
app: lionsdev-client
|
||||||
|
app.kubernetes.io/name: lionsdev-client
|
||||||
|
app.kubernetes.io/part-of: lions-infrastructure
|
||||||
|
app.kubernetes.io/managed-by: lionsctl
|
||||||
|
annotations:
|
||||||
|
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
clusterIP: None
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
port: 80
|
||||||
|
targetPort: http
|
||||||
|
protocol: TCP
|
||||||
|
selector:
|
||||||
|
app: lionsdev-client
|
||||||
|
publishNotReadyAddresses: true
|
||||||
212
deploy-lionsdev-client.sh
Normal file
212
deploy-lionsdev-client.sh
Normal file
@@ -0,0 +1,212 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Lions Dev Client Deployment Script
|
||||||
|
# This script deploys the Lions Dev application using lionsctl pipeline
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Configuration
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
LIONSCTL_PATH="${SCRIPT_DIR}/../lions-infrastructure-2025/lionsctl/lionsctl.exe"
|
||||||
|
REPO_URL="https://git.lions.dev/lionsctl-bot/lionsctl-deployments"
|
||||||
|
BRANCH="main"
|
||||||
|
JAVA_VERSION=17
|
||||||
|
NOTIFICATION_EMAIL="gbanedahoud@gmail.com"
|
||||||
|
|
||||||
|
# Colors for output
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m' # No Color
|
||||||
|
|
||||||
|
# Logging functions
|
||||||
|
log_info() {
|
||||||
|
echo -e "${BLUE}[INFO]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
log_success() {
|
||||||
|
echo -e "${GREEN}[SUCCESS]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
log_warning() {
|
||||||
|
echo -e "${YELLOW}[WARNING]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
log_error() {
|
||||||
|
echo -e "${RED}[ERROR]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Help function
|
||||||
|
show_help() {
|
||||||
|
cat << EOF
|
||||||
|
Lions Dev Client Deployment Script
|
||||||
|
|
||||||
|
Usage: $0 [OPTIONS]
|
||||||
|
|
||||||
|
OPTIONS:
|
||||||
|
-e, --environment Target environment (dev|staging|production) [default: production]
|
||||||
|
-c, --cluster Target cluster (k1|k2) [default: k2 for production, k1 for dev/staging]
|
||||||
|
-b, --branch Git branch to deploy [default: main]
|
||||||
|
-m, --email Notification email [default: gbanedahoud@gmail.com]
|
||||||
|
-j, --java-version Java version to use [default: 17]
|
||||||
|
-h, --help Show this help message
|
||||||
|
|
||||||
|
EXAMPLES:
|
||||||
|
# Deploy to production (default)
|
||||||
|
$0
|
||||||
|
|
||||||
|
# Deploy to staging
|
||||||
|
$0 --environment staging
|
||||||
|
|
||||||
|
# Deploy to development
|
||||||
|
$0 --environment dev --cluster k1
|
||||||
|
|
||||||
|
# Deploy specific branch to production
|
||||||
|
$0 --branch feature/new-design --environment production
|
||||||
|
|
||||||
|
ENVIRONMENTS:
|
||||||
|
- dev: Development environment on k1 cluster (dev.lions.dev)
|
||||||
|
- staging: Staging environment on k1 cluster (staging.lions.dev)
|
||||||
|
- production: Production environment on k2 cluster (lions.dev)
|
||||||
|
|
||||||
|
EOF
|
||||||
|
}
|
||||||
|
|
||||||
|
# Parse command line arguments
|
||||||
|
ENVIRONMENT="production"
|
||||||
|
CLUSTER=""
|
||||||
|
EMAIL="$NOTIFICATION_EMAIL"
|
||||||
|
|
||||||
|
while [[ $# -gt 0 ]]; do
|
||||||
|
case $1 in
|
||||||
|
-e|--environment)
|
||||||
|
ENVIRONMENT="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
-c|--cluster)
|
||||||
|
CLUSTER="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
-b|--branch)
|
||||||
|
BRANCH="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
-m|--email)
|
||||||
|
EMAIL="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
-j|--java-version)
|
||||||
|
JAVA_VERSION="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
-h|--help)
|
||||||
|
show_help
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
log_error "Unknown option: $1"
|
||||||
|
show_help
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
# Set default cluster based on environment if not specified
|
||||||
|
if [[ -z "$CLUSTER" ]]; then
|
||||||
|
case $ENVIRONMENT in
|
||||||
|
production)
|
||||||
|
CLUSTER="k2"
|
||||||
|
;;
|
||||||
|
dev|staging)
|
||||||
|
CLUSTER="k1"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
log_error "Invalid environment: $ENVIRONMENT. Must be dev, staging, or production."
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Validate inputs
|
||||||
|
if [[ ! "$ENVIRONMENT" =~ ^(dev|staging|production)$ ]]; then
|
||||||
|
log_error "Invalid environment: $ENVIRONMENT. Must be dev, staging, or production."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ! "$CLUSTER" =~ ^(k1|k2)$ ]]; then
|
||||||
|
log_error "Invalid cluster: $CLUSTER. Must be k1 or k2."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check if lionsctl exists
|
||||||
|
if [[ ! -f "$LIONSCTL_PATH" ]]; then
|
||||||
|
log_error "lionsctl not found at: $LIONSCTL_PATH"
|
||||||
|
log_info "Please build lionsctl first:"
|
||||||
|
log_info " cd ../lions-infrastructure-2025/lionsctl && go build -o lionsctl.exe"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Display deployment information
|
||||||
|
log_info "🚀 Lions Dev Client Deployment"
|
||||||
|
log_info "================================"
|
||||||
|
log_info "Repository: $REPO_URL"
|
||||||
|
log_info "Branch: $BRANCH"
|
||||||
|
log_info "Environment: $ENVIRONMENT"
|
||||||
|
log_info "Cluster: $CLUSTER"
|
||||||
|
log_info "Java Version: $JAVA_VERSION"
|
||||||
|
log_info "Email: $EMAIL"
|
||||||
|
log_info "================================"
|
||||||
|
|
||||||
|
# Confirm deployment
|
||||||
|
if [[ "$ENVIRONMENT" == "production" ]]; then
|
||||||
|
log_warning "⚠️ You are about to deploy to PRODUCTION!"
|
||||||
|
log_warning "This will affect the live Lions Dev website at https://lions.dev"
|
||||||
|
read -p "Are you sure you want to continue? (y/N): " -n 1 -r
|
||||||
|
echo
|
||||||
|
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
||||||
|
log_info "Deployment cancelled."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Execute deployment
|
||||||
|
log_info "🔄 Starting deployment..."
|
||||||
|
|
||||||
|
"$LIONSCTL_PATH" pipeline \
|
||||||
|
--url "$REPO_URL" \
|
||||||
|
--branch "$BRANCH" \
|
||||||
|
--java-version "$JAVA_VERSION" \
|
||||||
|
--environment "$ENVIRONMENT" \
|
||||||
|
--cluster "$CLUSTER" \
|
||||||
|
--mail "$EMAIL" \
|
||||||
|
--verbose
|
||||||
|
|
||||||
|
DEPLOYMENT_STATUS=$?
|
||||||
|
|
||||||
|
if [[ $DEPLOYMENT_STATUS -eq 0 ]]; then
|
||||||
|
log_success "🎉 Deployment completed successfully!"
|
||||||
|
|
||||||
|
case $ENVIRONMENT in
|
||||||
|
production)
|
||||||
|
log_success "✅ Lions Dev is now live at: https://lions.dev"
|
||||||
|
;;
|
||||||
|
staging)
|
||||||
|
log_success "✅ Staging environment is available at: https://staging.lions.dev"
|
||||||
|
;;
|
||||||
|
dev)
|
||||||
|
log_success "✅ Development environment is available at: https://dev.lions.dev"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
log_info "📊 You can monitor the deployment at:"
|
||||||
|
log_info " - Kubernetes Dashboard: https://k8s.lions.dev"
|
||||||
|
log_info " - Grafana Monitoring: https://grafana.lions.dev"
|
||||||
|
log_info " - Application Logs: kubectl logs -n lions-apps -l app=lionsdev-client"
|
||||||
|
|
||||||
|
else
|
||||||
|
log_error "❌ Deployment failed with exit code: $DEPLOYMENT_STATUS"
|
||||||
|
log_info "🔍 Check the logs above for error details"
|
||||||
|
log_info "📧 A notification email has been sent to: $EMAIL"
|
||||||
|
exit $DEPLOYMENT_STATUS
|
||||||
|
fi
|
||||||
Reference in New Issue
Block a user