neiam /apollos_crib

#cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Namespace
metadata:
  name: apollos-crib
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: apollos-crib
  namespace: apollos-crib
  labels:
    name: apollos-crib
    keel.sh/policy: force
    keel.sh/trigger: poll
spec:
  replicas: 1
  selector:
    matchLabels:
      name: apollos-crib
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
  template:
    metadata:
      labels:
        name: apollos-crib
#      annotations:
    spec:
      containers:
        - image: r.g.gmp.io/lambentri/apollos-crib:latest
          resources:
            requests:
              memory: "1536Mi"
              cpu: "250m"
            limits:
              memory: "3000Mi"
              cpu: "500m"

          imagePullPolicy: Always
#          livenessProbe:
#            httpGet:
#              path: /health/live
#              port: 4040
#
#            initialDelaySeconds: 90
#            periodSeconds: 3
#
#          readinessProbe:
#            httpGet:
#              path: /health/ready
#              port: 4040
#
#            initialDelaySeconds: 90
#            periodSeconds: 3
          env:
            - name: SENTRY_DSN
              valueFrom:
                secretKeyRef:
                  name: elixir-args
                  key: sentry_dsn
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: elixir-args
                  key: secret_key_base

            - name: POSTGRES_HOST
              value: postgres-apollos-crib.demo
                
            - name: POSTGRES_PORT
              valueFrom:
                secretKeyRef:
                  name: postgres-auth
                  key: port

            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  name: postgres-apollos-crib-auth
                  key: username

            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: postgres-apollos-crib-auth
                  key: password

            - name: AMQP_USER
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-default-user
                  key: username

            - name: AMQP_PASS
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-default-user
                  key: password

            - name: DATABASE_URL
              value: ecto://$(POSTGRES_USER):$(POSTGRES_PASSWORD)@$(POSTGRES_HOST):$(POSTGRES_PORT)/apollos-crib

            - name: RABBIT_URL
              value: amqp://$(AMQP_USER):$(AMQP_PASS)@rabbitmq:5672

            - name: PHX_HOST
              value: ac.gmp.io

            # Basemap tiles, from our own renderd server rather than CARTO.
            # See CUSTOM_MAPS.md. The label-only overlays are what let the
            # theme tint wash the basemap without washing the place names.
            - name: TILE_URL
              value: https://tiles.neiam.org/grayscale/{z}/{x}/{y}.png

            - name: TILE_URL_DARK
              value: https://tiles.neiam.org/dark/{z}/{x}/{y}.png

            - name: TILE_LABELS_URL
              value: https://tiles.neiam.org/grayscale_only_labels/{z}/{x}/{y}.png

            - name: TILE_LABELS_URL_DARK
              value: https://tiles.neiam.org/dark_only_labels/{z}/{x}/{y}.png

            - name: TILE_MAX_ZOOM
              value: '20'

            - name: TILE_ATTRIBUTION
              value: >-
                &copy; <a
                href="https://www.openstreetmap.org/copyright">OpenStreetMap</a>
                contributors

            # Scribus resolutions come from the browser-snap-mutant
            # MutantDeployment via the mutant operator's API. The token is
            # a copy, in this namespace, of the operator's mutantops-api
            # secret (mutants namespace).
            - name: MUTANT_API_URL
              value: http://mutantops-api.mutants.svc
            - name: MUTANT_API_TOKEN
              valueFrom:
                secretKeyRef:
                  name: mutantops-api
                  key: token
                  optional: true

            # Comma-separated emails of users who may start and stop
            # Scribus resolutions.
            - name: CRIB_ADMIN_EMAILS
              value: ""

          name: apollos-crib
          ports:
            - containerPort: 4000
            - containerPort: 4001

      imagePullSecrets:
        - name: gitlabgmp
      priorityClassName: high-priority
---
apiVersion: v1
kind: Service
metadata:
  name: apollos-crib-svc
  namespace: apollos-crib
spec:
  ports:
    - port: 80
      targetPort: 4000
      protocol: TCP
  selector:
    name: apollos-crib
---
apiVersion: v1
kind: Service
metadata:
  name: apollos-crib-hermes-svc
  namespace: apollos-crib
spec:
  ports:
    - port: 80
      targetPort: 4001
      protocol: TCP
  selector:
    name: apollos-crib
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: apollos-crib-ingress
  namespace: apollos-crib
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    kubernetes.io/ingress.class: "traefik"
spec:
  tls:
    - hosts:
        # CHANGE ME
        - ac.gmp.io
        - apollos.gmp.io
        - apollos-crib.gmp.io
      secretName: apollos-crib-tls
  rules:
    # CHANGE ME
    - host: ac.gmp.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: apollos-crib-svc
                port:
                  number: 80
    - host: apollos.gmp.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: apollos-crib-svc
                port:
                  number: 80
    - host: apollos-crib.gmp.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: apollos-crib-svc
                port:
                  number: 80

#  EOF