chore(skaffold): refine shokohsc profile

k8s/base/deployment.yaml

@@ -18,14 +18,6 @@ spec:
       containers:
         - name: flame
           image: shokohsc/flame
-          command:
-            - npm
-          args:
-            - run
-            - skaffold
-          env:
-            - name: NODE_ENV
-              value: development
           ports:
             - name: http
               containerPort: 5005

k8s/overlays/shokohsc/deployment.yaml

@@ -0,0 +1,36 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: flame
+spec:
+  selector:
+    matchLabels:
+      app: flame
+  template:
+    metadata:
+      labels:
+        app: flame
+    spec:
+      serviceAccountName: flame-dev
+      securityContext:
+        fsGroup: 1000
+      containers:
+        - name: flame
+          image: shokohsc/flame
+          command:
+            - npm
+          args:
+            - run
+            - skaffold
+          env:
+            - name: NODE_ENV
+              value: development
+          ports:
+            - name: http
+              containerPort: 5005
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /
+              port: http

k8s/overlays/shokohsc/ingress.yaml

@@ -6,9 +6,6 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: nginx
     cert-manager.io/cluster-issuer: ca-cluster-issuer
-    forecastle.stakater.com/expose: "true"
-    forecastle.stakater.com/group: dev
-    forecastle.stakater.com/appName: flame
     flame.pawelmalak/name: flame
     flame.pawelmalak/url: dev.flame.shokohsc.home
     flame.pawelmalak/type: app

k8s/overlays/shokohsc/kustomization.yaml

@@ -1,6 +1,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-bases:
+namespace: flame-dev
-  - ../../base
+resources:
-patchesStrategicMerge:
+  - namespace.yaml
+  - deployment.yaml
+  - service.yaml
   - ingress.yaml
+  - rbac.yaml

k8s/overlays/shokohsc/namespace.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: flame-dev
+  labels:
+    namespace: flame-dev
+    goldilocks.fairwinds.com/enabled: "true"

k8s/overlays/shokohsc/rbac.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: flame-dev
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: flame-dev
+rules:
+- apiGroups: ["networking.k8s.io"]
+  resources: ["ingresses"]
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: flame-dev
+subjects:
+- kind: ServiceAccount
+  name: flame-dev
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: flame-dev

k8s/overlays/shokohsc/service.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: flame
+  labels:
+    app: flame
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app: flame