Deploy versioned binaries to shared release runtime

config/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: project-demo
-  labels:
-    app.kubernetes.io/part-of: demo

config/prod/deployment.yaml

@@ -1,66 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: demo
-  namespace: project-demo
-spec:
-  replicas: 1
-  revisionHistoryLimit: 5
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: demo
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: demo
-    spec:
-      automountServiceAccountToken: false
-      nodeSelector:
-        kubernetes.io/hostname: shemic
-      imagePullSecrets:
-        - name: demo-registry-pull
-      terminationGracePeriodSeconds: 15
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 65532
-        runAsGroup: 65532
-        seccompProfile:
-          type: RuntimeDefault
-      containers:
-        - name: demo
-          image: git.dever.cc/demo-ci/demo@sha256:25c2c028d9e241424ff91391597a8d349036764d38a66192266ad7d5cdd26e38
-          imagePullPolicy: Always
-          env:
-            - name: PORT
-              value: '8080'
-          ports:
-            - name: http
-              containerPort: 8080
-          securityContext:
-            allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: true
-            capabilities:
-              drop: [ALL]
-          resources:
-            requests:
-              cpu: 10m
-              memory: 16Mi
-            limits:
-              cpu: 250m
-              memory: 64Mi
-          readinessProbe:
-            httpGet:
-              path: /
-              port: http
-            periodSeconds: 3
-          livenessProbe:
-            httpGet:
-              path: /
-              port: http
-            initialDelaySeconds: 5
-            periodSeconds: 10

config/prod/ingress.yaml

@@ -2,9 +2,10 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: demo
-  namespace: project-demo
+  namespace: platform-release
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: web
+    traefik.ingress.kubernetes.io/router.priority: '100'
 spec:
   ingressClassName: traefik
   rules:

config/prod/kustomization.yaml

@@ -1,8 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - deployment.yaml
   - service.yaml
   - ingress.yaml
-  - networkpolicy.yaml
-  - rbac.yaml

config/prod/networkpolicy.yaml

@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: demo
-  namespace: project-demo
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: demo
-  policyTypes: [Ingress, Egress]
-  egress: []
-  ingress:
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: kube-system
-          podSelector:
-            matchLabels:
-              app.kubernetes.io/name: traefik
-      ports:
-        - protocol: TCP
-          port: 8080

config/prod/rbac.yaml

@@ -1,24 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: demo-release
-  namespace: project-demo
-rules:
-  - apiGroups: [apps]
-    resources: [deployments]
-    resourceNames: [demo]
-    verbs: [get, watch, patch]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: demo-release
-  namespace: project-demo
-subjects:
-  - kind: ServiceAccount
-    name: demo-deployer
-    namespace: platform-ci
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: demo-release

config/prod/release.json

@@ -0,0 +1,7 @@
+{
+  "project": "demo",
+  "development_port": 18080,
+  "production_port": 28080,
+  "host": "demo.5dev.cn",
+  "expected_body": "hello world\n"
+}

config/prod/service.yaml

@@ -2,11 +2,11 @@ apiVersion: v1
 kind: Service
 metadata:
   name: demo
-  namespace: project-demo
+  namespace: platform-release
 spec:
   selector:
-    app.kubernetes.io/name: demo
+    app.kubernetes.io/name: release
   ports:
     - name: http
       port: 80
-      targetPort: http
+      targetPort: 28080