k8s_deployments/01_onsite/02_qa/semcust/deployment.yaml

# Deployment description
apiVersion: apps/v1
kind: Deployment
metadata:
  name: semcust-deployment
  namespace: qa-environment
  labels:
    app: semcust-qa
spec:
  strategy:
    type: Recreate
  replicas: 1
  selector:
    matchLabels:
      app: semcust-qa
  template:
    metadata:
      labels:
        app: semcust-qa
    spec:
      # securityContext:
      #   runAsUser: 1000
      #   runAsGroup: 1000
      #   fsGroup: 1000
      containers:
        - name: semcust-frontend
          image: packages.semapp.lan:5000/semcust_frontend:$IMAGE_TAG
          resources:
            requests:
              memory: "256Mi"
              cpu: "100m"
            limits:
              memory: "512Mi"
              cpu: "4"
          ports:
            - containerPort: 8200
              name: semcust-http
              protocol: TCP
          volumeMounts:
          - mountPath: /etc/nginx/conf.d
            readOnly: true
            name: nginx-conf
          imagePullPolicy: Always
        - name: semcust-backend
          image: packages.semapp.lan:5000/semcust_backend:$IMAGE_TAG
          resources:
            requests:
              memory: "256Mi"
              cpu: "100m"
            limits:
              memory: "512Mi"
              cpu: "4"
          ports:
            - containerPort: 5200
              name: semcust-backend
              protocol: TCP
          imagePullPolicy: Always
          envFrom:
          - configMapRef:
              name: semcust-qa-config
      volumes:
      - name: nginx-conf
        configMap:
          name: nginx-conf

---
apiVersion: v1
kind: ConfigMap
metadata:
  namespace: qa-environment
  name: semcust-qa-config
  labels:
    app: semcust-qa
data:
  DJANGO_DB_ENGINE: "django.db.backends.postgresql_psycopg2"
  DJANGO_DB_NAME: "semcust_qa_new"
  DJANGO_DB_USER: "semcust_qa"
  DJANGO_DB_PASSWORD: "WxEY6hVNRrIYJeRAtjR2AlZzJp"
  DJANGO_DB_HOST: "dbpg11.semapp.lan"
  DJANGO_DB_PORT: "5432"
  ALLOWED_HOSTS: '["*"]'
  FRONTEND_URL: "http://semcust-qa.k3s.semapp.lan"
  API_URL: "http://semcust-qa.k3s.semapp.lan/"
  PORT_FRONTEND: "8200"
  PORT_BACKEND: "5200"
  DEFAULT_FILE_STORAGE: "minio_storage.storage.MinioMediaStorage"
  MINIO_STORAGE_ENDPOINT: "minio-api-dev.k3s.semapp.lan"
  MINIO_STORAGE_ACCESS_KEY: "semcust"
  MINIO_STORAGE_SECRET_KEY: "Semapp123456!"
  MINIO_STORAGE_USE_HTTPS: "False"
  MINIO_STORAGE_MEDIA_BUCKET_NAME: "semcust"
  MINIO_STORAGE_AUTO_CREATE_MEDIA_BUCKET: "True"
  EMAIL_USE_TLS: "True"
  EMAIL_HOST: "smtp.strato.de"
  EMAIL_PORT: "587"
  EMAIL_HOST_USER: "support@semantic-applications.de"
  EMAIL_HOST_PASSWORD: "uN1zPIqN9@br"

  # LICENCE BASELINE 
  BASELINE_KEY: "AESNEwfqJVwaI4aLwyVl7kzTqdmWeQQq9hCpLRGahYI="
  BASE_KEYCLOAK_URL: "http://keycloak.semapp.lan"
  BASELINE_KEYCLOAK_CLIENT_ID: "baseline_qa"
  BASELINE_KEYCLOAK_REALM: "baseline_test"

  KEYCLOAK_ADMIN_USERNAME: "admin"
  KEYCLOAK_ADMIN_PASSWORD: "admin"
  KEYCLOAK_ADMIN_CLIENT_ID: "admin-cli"

---
apiVersion: v1
kind: ConfigMap
metadata:
  namespace: qa-environment
  name: nginx-conf
data:
  default.conf: | 
    upstream backend {
      server  semcust-backend-qa:5200;
    }

    server {
      listen 8200;

      #server_name semcust-dev.semapp.lan;

      access_log /var/log/nginx/access.log;
      charset utf-8;
      client_max_body_size 1G;

      location / {
        root /srv/semcust;
        #add_header X-Frame-Options "SAMEORIGIN";
        index index.html index.htm;
        try_files $uri $uri /index.html =404;
      }

      location /administration {
        root /srv/semcust;
        #add_header X-Frame-Options "SAMEORIGIN";
        index index.html index.htm;
        try_files $uri $uri /index.html =404;
      }

      location /confluence {
        root /srv/semcust;
        #add_header X-Frame-Options "SAMEORIGIN";
        index index.html index.htm;
        try_files $uri $uri /index.html =404;
      }

      location /help-desk-customer {
        root /srv/semcust;
        #add_header X-Frame-Options "SAMEORIGIN";
        index index.html index.htm;
        try_files $uri $uri /index.html =404;
      }

      location ~ ^/api {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      location /admin {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      location /forum {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      location /confluence/page-overview/ {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      location /confluence/storage/ {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      location /help-desk {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

        location /static-backend {
        proxy_pass        http://backend;
        proxy_redirect    off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        send_timeout 300s;
      }

      error_page 404 =200 /index.html;

      add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';

      expires off;
      open_file_cache off;
      sendfile off;
    }

---
# semcust Service
apiVersion: v1
kind: Service
metadata:
  name: semcust-frontend-qa
  namespace: qa-environment
spec:
  selector:
    app: semcust-qa
  ports:
    - name: semcust-http
      port: 8200
      targetPort: semcust-http
  type: NodePort

---
# semcust backend
apiVersion: v1
kind: Service
metadata:
  name: semcust-backend-qa
  namespace: qa-environment
spec:
  selector:
    app: semcust-qa
  ports:
    - name: semcust-backend
      port: 5200
      targetPort: semcust-backend
  type: NodePort
---

# Ingress description
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: semcust-qa-ingress
  namespace: qa-environment
  annotations:
    kubernetes.io/ingress.class: "traefik"
spec:
  rules:
  - host: semcust-qa.k3s.semapp.lan
    http:
      paths:
      - backend:
          service:
            name: semcust-frontend-qa
            port:
              number: 8200
        path: /
        pathType: ImplementationSpecific