neiam /diogramos

apiVersion: v1
kind: Namespace
metadata:
  name: diogramos
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: diogramos
  namespace: diogramos
  labels:
    name: diogramos
    keel.sh/policy: force
    keel.sh/trigger: poll
spec:
  replicas: 2
  selector:
    matchLabels:
      name: diogramos
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  template:
    metadata:
      labels:
        name: diogramos
    spec:
      containers:
        - image: r.g.gmp.io/neiam/diogramos:latest
          imagePullPolicy: Always
          name: diogramos
          ports:
            - containerPort: 4000
          env:
            - name: PHX_HOST
              value: diogramos.neiam.co
            - name: PORT
              value: "4000"
            - name: PHX_SERVER
              value: "true"
            - name: POOL_SIZE
              value: "10"

            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: elixir-args
                  key: secret_key_base

            - name: SENTRY_DSN
              valueFrom:
                secretKeyRef:
                  name: elixir-args
                  key: sentry_dsn
                  optional: true

            # Postgres creds come from the StackGres-managed auth secret
            # (named after the SGCluster in pg.yml). runtime.exs reads
            # these directly — no URL composition — so passwords with
            # special characters don't get mangled by URL parsing.
            - name: POSTGRES_HOST
              value: postgres
            - name: POSTGRES_PORT
              value: "5432"
            - name: POSTGRES_DB
              value: diogramos
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  name: postgres
                  key: superuser-username
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: postgres
                  key: superuser-password
          readinessProbe:
            httpGet:
              path: /
              port: 4000
            initialDelaySeconds: 5
            periodSeconds: 10
          livenessProbe:
            httpGet:
              path: /
              port: 4000
            initialDelaySeconds: 30
            periodSeconds: 30
      imagePullSecrets:
        - name: gitlabgmp
---
apiVersion: v1
kind: Service
metadata:
  name: diogramos-svc
  namespace: diogramos
spec:
  ports:
    - port: 80
      targetPort: 4000
      protocol: TCP
  selector:
    name: diogramos
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: diogramos-ingress
  namespace: diogramos
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    kubernetes.io/ingress.class: "traefik"
spec:
  tls:
    - hosts:
        - diogramos.neiam.co
      secretName: diogramos-tls
  rules:
    - host: diogramos.neiam.co
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: diogramos-svc
                port:
                  number: 80