Feature/deploy website ae

services/aefeup/website/00-namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: website-ae

services/aefeup/website/01-deployment.yaml

@@ -0,0 +1,44 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: website-ae
+  namespace: website-ae
+  annotations:
+    keel.sh/policy: "force"
+    keel.sh/match-tag: "true" 
+spec:
+  selector:
+    matchLabels:
+      app: website-ae
+  template:
+    metadata:
+      labels:
+        app: website-ae
+    spec:
+      containers:
+      - name: website-ae
+        image: registry.niaefeup.pt/niaefeup/website-ae:main
+        resources:
+          limits:
+            memory: "256Mi"
+            cpu: "500m"
+        ports:
+        - containerPort: 3000
+        imagePullPolicy: Always
+      imagePullSecrets:
+        - name: harbor-pull-secret
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: website-ae-service
+  namespace: website-ae
+spec:
+  selector:
+    app: website-ae
+  ports:
+  - port: 80
+    targetPort: 3000
+  type: "ClusterIP"
+

services/aefeup/website/02-certificates.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: website-ae-cert
+  namespace: website-ae
+spec:
+  secretName: website-ae-cert
+  issuerRef:
+    name: letsencrypt-aefeup
+    kind: ClusterIssuer
+  commonName: aefeup.pt
+  dnsNames:
+    - aefeup.pt
+    - www.aefeup.pt

services/aefeup/website/03-ingress-routes.yaml

@@ -0,0 +1,19 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: website-ae-https
+  namespace: website-ae
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`aefeup.pt`) || Host(`www.aefeup.pt`)
+      kind: Rule
+      services:
+        - name: website-ae-service
+          port: 80
+
+  tls:
+    secretName: website-ae-cert
+---
+

services/cert-manager/01-cluster-issuer.yaml

@@ -8,6 +8,16 @@ type: Opaque
 stringData:
   api-token: <FILL-IN>
 
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloudflare-aefeup-api-token-secret
+  namespace: cert-manager
+type: Opaque
+stringData:
+  api-token: <FILL-IN>
+
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -29,6 +39,24 @@ spec:
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
+metadata:
+  name: letsencrypt-aefeup
+spec:
+  acme:
+    email: geral@aefeup.pt
+    privateKeySecretRef:
+      name: letsencrypt-aefeup
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - dns01:
+        cloudflare:
+          email: geral@aefeup.pt
+          apiTokenSecretRef:
+            name: cloudflare-aefeup-api-token-secret
+            key: api-token
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
 metadata:
   name: letsencrypt-production
 spec:
@@ -43,4 +71,4 @@ spec:
           email: ni@aefeup.pt
           apiTokenSecretRef:
             name: cloudflare-api-token-secret
-            key: api-token
+            key: api-token

services/databases/postgresql/cnpg-cluster.yaml

@@ -39,6 +39,12 @@ spec:
         login: true
         passwordSecret:
           name: tts-staging-secret
+      - name: website-ae
+        ensure: present
+        createdb: false
+        login: true
+        passwordSecret:
+          name: website-ae-secret
 
   storage:
     size: 20Gi

services/databases/postgresql/cnpg-secrets.yaml

@@ -46,4 +46,15 @@ kind: Secret
 metadata:
   name: sinf-website-2023-secret
   namespace: pg
-type: kubernetes.io/basic-auth
+type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+stringData:
+  password: <FILL-IN>
+  username: website-ae
+kind: Secret
+metadata:
+  name: website-ae-secret
+  namespace: pg
+type: kubernetes.io/basic-auth
+