Add Kubernetes manifests for communitarian application including deployments, services, ingress, middleware, PVC, and kustomization

2026-02-18 13:23:04 +00:00
parent 1e8425c98d
commit f9938f4ca6
10 changed files with 242 additions and 0 deletions
--- a/communitarian/deployment-app.yaml
+++ b/communitarian/deployment-app.yaml
@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: communitarian-app
+  namespace: "{{ .namespace }}"
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      component: app
+  template:
+    metadata:
+      labels:
+        component: app
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+      - name: communitarian-app
+        image: "{{ .appImage }}"
+        ports:
+        - containerPort: {{ .appPort }}
+          name: http
+        env:
+        - name: TZ
+          value: "{{ .timezone }}"
+        - name: API_URL
+          value: "http://communitarian-api:{{ .apiPort }}"
+        - name: NEXT_PUBLIC_API_URL
+          value: "/api"
+        resources:
+          requests:
+            memory: "128Mi"
+            cpu: "100m"
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: [ALL]
+          readOnlyRootFilesystem: false