226 lines
		
	
	
	
		
			6.4 KiB
		
	
	
	
		
			Jsonnet
		
	
	
	
	
	
			
		
		
	
	
			226 lines
		
	
	
	
		
			6.4 KiB
		
	
	
	
		
			Jsonnet
		
	
	
	
	
	
| function (slug, sha) {
 | |
| 
 | |
|   local app = "symposion-app-" + slug,
 | |
|   local namespace = "rego-review",
 | |
|   local domain = slug + ".dev.lca2019.org",
 | |
|   local tls_secret = slug + "-tls",
 | |
| 
 | |
|   "deployment.json":
 | |
|     {
 | |
|       "apiVersion": "v1",
 | |
|       "items": [
 | |
|         {
 | |
|           "apiVersion": "v1",
 | |
|           "kind": "Service",
 | |
|           "metadata": {
 | |
|             "labels": {
 | |
|               "app":  app,
 | |
|               "slug": slug
 | |
|             },
 | |
|             "name": app,
 | |
|             "namespace": namespace
 | |
|           },
 | |
|           "spec": {
 | |
|             "ports": [
 | |
|               {
 | |
|                 "port": 8000,
 | |
|                 "protocol": "TCP",
 | |
|                 "targetPort": 8000
 | |
|               }
 | |
|             ],
 | |
|             "selector": {
 | |
|               "app": app,
 | |
|               "slug": slug
 | |
|             },
 | |
|             "sessionAffinity": "None",
 | |
|             "type": "ClusterIP"
 | |
|           }
 | |
|         },
 | |
|         {
 | |
|           "apiVersion": "extensions/v1beta1",
 | |
|           "kind": "Deployment",
 | |
|           "metadata": {
 | |
|             "labels": {
 | |
|               "app": app,
 | |
|               "slug": slug,
 | |
|             },
 | |
|             "name": app,
 | |
|             "namespace": namespace
 | |
|           },
 | |
|           "spec": {
 | |
|             "replicas": 1,
 | |
|             "revisionHistoryLimit": 1,
 | |
|             "selector": {
 | |
|               "matchLabels": {
 | |
|                 "app": app,
 | |
|                 "slug": slug
 | |
|               }
 | |
|             },
 | |
|             "strategy": {
 | |
|               "rollingUpdate": {
 | |
|                 "maxSurge": 1,
 | |
|                 "maxUnavailable": 1
 | |
|               },
 | |
|               "type": "RollingUpdate"
 | |
|             },
 | |
|             "template": {
 | |
|               "metadata": {
 | |
|                 "labels": {
 | |
|                   "app": app,
 | |
|                   "slug": slug
 | |
|                 }
 | |
|               },
 | |
|               "spec": {
 | |
|                 "containers": [
 | |
|                   {
 | |
|                     "env": [
 | |
|                       {
 | |
|                         "name": "SYMPOSION_APP_DEBUG",
 | |
|                         "value": "1"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "DJANGO_SECRET_KEY",
 | |
|                         "value": "paGhahQuain5ohYoh0moorai"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "DATABASE_URL",
 | |
|                         "value": "sqlite:////tmp/symposion.sqlite"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "GCS_BUCKET",
 | |
|                         "value": "CEA51A5-A613-4AEF-A9FB-D0A57D77C13B"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "GOOGLE_APPLICATION_CREDENTIALS",
 | |
|                         "value": "/dev/null"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "STRIPE_PUBLIC_KEY",
 | |
|                         "value": "5CEA51A5-A613-4AEF-A9FB-D0A57D77C13B"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "STRIPE_SECRET_KEY",
 | |
|                         "value": "5CEA51A5-A613-4AEF-A9FB-D0A57D77C13B"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "SYMPOSION_DEV_MODE",
 | |
|                         "value": "LAPTOP"
 | |
|                       },
 | |
|                       {
 | |
|                         "name": "ANALYTICS_KEY",
 | |
|                         "value": "UA-000000000-1"
 | |
|                       }
 | |
|                     ],
 | |
|                     "image": "asia.gcr.io/linuxconfsydney/symposion_app_2019_dev:" + sha,
 | |
|                     "imagePullPolicy": "Always",
 | |
|                     "livenessProbe": {
 | |
|                       "failureThreshold": 3,
 | |
|                       "httpGet": {
 | |
|                         "path": "/admin/login/",
 | |
|                         "port": 8000,
 | |
|                         "scheme": "HTTP"
 | |
|                       },
 | |
|                       "initialDelaySeconds": 180,
 | |
|                       "periodSeconds": 10,
 | |
|                       "successThreshold": 1,
 | |
|                       "timeoutSeconds": 5
 | |
|                     },
 | |
|                     "name": app,
 | |
|                     "ports": [
 | |
|                       {
 | |
|                         "containerPort": 8000,
 | |
|                         "protocol": "TCP"
 | |
|                       }
 | |
|                     ],
 | |
|                     "resources": {},
 | |
|                     "terminationMessagePath": "/dev/termination-log",
 | |
|                     "terminationMessagePolicy": "File"
 | |
|                   }
 | |
|                 ],
 | |
|                 "dnsPolicy": "ClusterFirst",
 | |
|                 "restartPolicy": "Always",
 | |
|                 "schedulerName": "default-scheduler",
 | |
|                 "securityContext": {},
 | |
|                 "terminationGracePeriodSeconds": 30
 | |
|               }
 | |
|             }
 | |
|           }
 | |
|         }
 | |
|       ],
 | |
|       "kind": "List"
 | |
|     },
 | |
|   "ingress.json":
 | |
|     {
 | |
|         "kind": "Ingress",
 | |
|         "apiVersion": "extensions/v1beta1",
 | |
|         "metadata": {
 | |
|             "name": app,
 | |
|             "namespace": namespace,
 | |
|             "annotations": {
 | |
|                 "kubernetes.io/ingress.class": "nginx-review",
 | |
|             }
 | |
|         },
 | |
|         "spec": {
 | |
|             "backend": {
 | |
|                 "serviceName": app,
 | |
|                 "servicePort": 80
 | |
|             },
 | |
|             "tls": [
 | |
|                 {
 | |
|                     "hosts": [
 | |
|                         domain
 | |
|                     ],
 | |
|                     "secretName": tls_secret,
 | |
|                 }
 | |
|             ],
 | |
|             "rules": [
 | |
|                 {
 | |
|                     "host": domain,
 | |
|                     "http": {
 | |
|                         "paths": [
 | |
|                             {
 | |
|                                 "path": "/",
 | |
|                                 "backend": {
 | |
|                                     "serviceName": app,
 | |
|                                     "servicePort": 8000
 | |
|                                 }
 | |
|                             }
 | |
|                         ]
 | |
|                     }
 | |
|                 }
 | |
|             ]
 | |
|         }
 | |
|     },
 | |
|   "certificate.json":
 | |
|     {
 | |
|       "apiVersion": "certmanager.k8s.io/v1alpha1",
 | |
|       "kind": "Certificate",
 | |
|       "metadata": {
 | |
|         "name": slug,
 | |
|         "namespace": "rego-review",
 | |
|       },
 | |
|       "spec": {
 | |
|         "acme": {
 | |
|           "config": [
 | |
|             {
 | |
|               "domains": [
 | |
|                 domain
 | |
|                     ],
 | |
|               "http01": {
 | |
|                       "ingressClass": "nginx-review"
 | |
|                     }
 | |
|                 }
 | |
|             ]
 | |
|         },
 | |
|         "commonName": "",
 | |
|         "dnsNames": [
 | |
|             domain
 | |
|         ],
 | |
|         "issuerRef": {
 | |
|             "kind": "ClusterIssuer",
 | |
|             "name": "letsencrypt-prod"
 | |
|         },
 | |
|         "secretName": tls_secret
 | |
|       }
 | |
|     }
 | |
| }
 | 
