feat : overwite buzz.sudloh.com/guide

k8s/base/ci-rbac.yaml

@@ -26,7 +26,7 @@ rules:
     verbs: ["get"]
   - apiGroups: ["apps"]
     resources: ["deployments"]
-    resourceNames: ["buzz-sheet", "buzz-sheet-worker", "buzz-sheet-discord-worker"]
+    resourceNames: ["buzz-sheet", "buzz-sheet-mirror", "buzz-sheet-worker", "buzz-sheet-discord-worker"]
     verbs: ["get", "watch", "patch", "update"]
   - apiGroups: ["apps"]
     resources: ["replicasets"]

k8s/base/ingress.yaml

@@ -19,3 +19,13 @@ spec:
                 name: buzz-sheet
                 port:
                   number: 3000
+    - host: buzz.sudloh.com
+      http:
+        paths:
+          - path: /guide
+            pathType: Prefix
+            backend:
+              service:
+                name: buzz-sheet-mirror
+                port:
+                  number: 3000

k8s/base/kustomization.yaml

@@ -5,14 +5,21 @@ resources:
   - namespace.yaml
   - configmap.yaml
   - deployment.yaml
+  - mirror-deployment.yaml
   - worker-deployment.yaml
   - discord-worker-deployment.yaml
   - service.yaml
+  - mirror-service.yaml
   - ingress.yaml
   - hpa.yaml
+  - mirror-hpa.yaml
   - pdb.yaml
+  - mirror-pdb.yaml
   - ci-rbac.yaml
 images:
   - name: buzz-sheet-app
     newName: registry.neko-piranha.ts.net/astral/buzz-sheet
     newTag: replace-me
+  - name: buzz-sheet-mirror
+    newName: registry.neko-piranha.ts.net/astral/buzz-sheet
+    newTag: mirror-replace-me

k8s/base/mirror-deployment.yaml

@@ -0,0 +1,100 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: buzz-sheet-mirror
+  labels:
+    app.kubernetes.io/name: buzz-sheet
+    app.kubernetes.io/component: public-mirror
+spec:
+  replicas: 2
+  revisionHistoryLimit: 3
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: buzz-sheet
+      app.kubernetes.io/component: public-mirror
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: buzz-sheet
+        app.kubernetes.io/component: public-mirror
+    spec:
+      automountServiceAccountToken: false
+      terminationGracePeriodSeconds: 30
+      nodeSelector:
+        kubernetes.io/arch: arm64
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: app
+          image: buzz-sheet-mirror
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 3000
+              protocol: TCP
+          envFrom:
+            - configMapRef:
+                name: buzz-sheet-config
+            - secretRef:
+                name: buzz-sheet-env
+          env:
+            - name: NEXT_DEPLOYMENT_ID
+              valueFrom:
+                configMapKeyRef:
+                  name: buzz-sheet-config
+                  key: NEXT_DEPLOYMENT_ID
+            - name: PUBLIC_MIRROR
+              value: "true"
+          resources:
+            requests:
+              cpu: 500m
+              memory: 1Gi
+            limits:
+              cpu: "1"
+              memory: 2Gi
+          startupProbe:
+            httpGet:
+              path: /guide/api/health
+              port: http
+            failureThreshold: 30
+            periodSeconds: 2
+          readinessProbe:
+            httpGet:
+              path: /guide/api/health?ready=1
+              port: http
+            failureThreshold: 3
+            periodSeconds: 10
+            timeoutSeconds: 4
+          livenessProbe:
+            httpGet:
+              path: /guide/api/health
+              port: http
+            failureThreshold: 3
+            periodSeconds: 20
+            timeoutSeconds: 3
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+            readOnlyRootFilesystem: true
+          volumeMounts:
+            - name: next-cache
+              mountPath: /app/.next/cache
+            - name: temporary
+              mountPath: /tmp
+      volumes:
+        - name: next-cache
+          emptyDir: {}
+        - name: temporary
+          emptyDir: {}

k8s/base/mirror-hpa.yaml

@@ -0,0 +1,31 @@
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: buzz-sheet-mirror
+  labels:
+    app.kubernetes.io/name: buzz-sheet
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: buzz-sheet-mirror
+  minReplicas: 2
+  maxReplicas: 6
+  behavior:
+    scaleDown:
+      stabilizationWindowSeconds: 300
+    scaleUp:
+      stabilizationWindowSeconds: 30
+  metrics:
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: 70
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: 75

k8s/base/mirror-pdb.yaml

@@ -0,0 +1,12 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: buzz-sheet-mirror
+  labels:
+    app.kubernetes.io/name: buzz-sheet
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: buzz-sheet
+      app.kubernetes.io/component: public-mirror

k8s/base/mirror-service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: buzz-sheet-mirror
+  labels:
+    app.kubernetes.io/name: buzz-sheet
+    app.kubernetes.io/component: public-mirror
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: buzz-sheet
+    app.kubernetes.io/component: public-mirror
+  ports:
+    - name: http
+      port: 3000
+      targetPort: http
+      protocol: TCP