knoQのk8s移行

knoq/backend-deployment.yaml

@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: knoq-backend
+  labels:
+    app: knoq-backend
+
+spec:
+  selector:
+    matchLabels:
+      app: knoq-backend
+  template:
+    metadata:
+      labels:
+        app: knoq-backend
+    spec:
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - preference:
+                matchExpressions:
+                  - key: kubernetes.io/hostname
+                    operator: In
+                    values:
+                      - las211.tokyotech.org
+              weight: 1
+
+      containers:
+        - name: knoq-backend
+          image: ghcr.io/traptitech/knoq:main
+          env:
+            - name: DB_USER
+              value: "service_knoq"
+            - name: DB_PORT
+              value: "3306"
+            - name: DB_HOST
+              value: "tailscale.kmbk.tokyotech.org"
+            - name: DB_NAME
+              value: "service_knoq"
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: knoq-secrets
+                  key: DB_PASSWORD
+          ports:
+            - containerPort: 3000
+          resources:
+            requests:
+              cpu: "10m"
+              memory: "10Mi"
+            limits:
+              cpu: "200m"
+              memory: "300Mi"

knoq/backend-service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: knoq-backend-service
+
+spec:
+  type: ClusterIP
+  selector:
+    app: knoq-backend
+  ports:
+    - name: http
+      port: 3000
+      targetPort: 3000

knoq/certificate.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: knoq-certificate
+
+spec:
+  issuerRef:
+    kind: ClusterIssuer
+    name: cluster-issuer
+  secretName: knoq-tls
+  duration: 2160h0m0s # 90d
+  renewBefore: 720h0m0s # 30d
+  dnsNames:
+    - knoq.trap.jp

knoq/ingress-route.yaml

@@ -0,0 +1,21 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: knoq-ingressroute
+
+spec:
+  entryPoints:
+    - websecure
+  tls:
+    secretName: knoq-tls
+
+  routes:
+    - match: (Host(`knoq.trap.jp`) && PathPrefix(`/api/`)
+      middlewares:
+        - name: auth-trap-jp-hard
+          namespace: auth
+      services:
+        - kind: Service
+          name: knoq-backend-service
+          port: 3000
+          scheme: http

knoq/kustamization.yaml

@@ -0,0 +1,5 @@
+resources:
+  - backend-deployment.yaml
+  - backend-service.yaml
+  - ingress-route.yaml
+  - certificate.yaml