From 0b7d87fad2c5e45152ea2d85ee60d87b7c5a7e2b Mon Sep 17 00:00:00 2001 From: Will Clarke Date: Tue, 3 Sep 2024 12:50:13 +0100 Subject: [PATCH] remove k8s deploy and update circle confg deploy dashboards to stg and prod update readme and docs --- .circleci/config.yml | 57 ++++--------- .circleci/deploy_to_kubernetes | 33 -------- README.md | 20 +++++ .../production/pods-dashboard.yml | 0 .../staging/ingress-dashboard.yml | 0 .../staging/pods-dashboard.yml | 0 docs/kubernetes.md | 60 -------------- kubernetes_deploy/development/dashboard.yml | 1 - kubernetes_deploy/development/deployment.yml | 40 ---------- kubernetes_deploy/development/ingress.yml | 1 - kubernetes_deploy/development/service.yml | 13 --- kubernetes_deploy/production/deployment.yml | 65 --------------- kubernetes_deploy/production/ingress.yml | 27 ------- .../production/migrate-db-job.yml | 48 ----------- kubernetes_deploy/production/service.yml | 12 --- kubernetes_deploy/staging/deployment.yml | 80 ------------------- kubernetes_deploy/staging/ingress.yml | 37 --------- kubernetes_deploy/staging/migrate-db-job.yml | 48 ----------- kubernetes_deploy/staging/service.yml | 12 --- 19 files changed, 34 insertions(+), 520 deletions(-) delete mode 100755 .circleci/deploy_to_kubernetes rename kubernetes_deploy/production/dashboard.yml => dashboards/production/pods-dashboard.yml (100%) rename {kubernetes_deploy => dashboards}/staging/ingress-dashboard.yml (100%) rename {kubernetes_deploy => dashboards}/staging/pods-dashboard.yml (100%) delete mode 100644 docs/kubernetes.md delete mode 100644 kubernetes_deploy/development/dashboard.yml delete mode 100644 kubernetes_deploy/development/deployment.yml delete mode 100644 kubernetes_deploy/development/ingress.yml delete mode 100644 kubernetes_deploy/development/service.yml delete mode 100644 kubernetes_deploy/production/deployment.yml delete mode 100644 kubernetes_deploy/production/ingress.yml delete mode 100644 kubernetes_deploy/production/migrate-db-job.yml delete mode 100644 kubernetes_deploy/production/service.yml delete mode 100644 kubernetes_deploy/staging/deployment.yml delete mode 100644 kubernetes_deploy/staging/ingress.yml delete mode 100644 kubernetes_deploy/staging/migrate-db-job.yml delete mode 100644 kubernetes_deploy/staging/service.yml diff --git a/.circleci/config.yml b/.circleci/config.yml index 4a9b12e7..1f8b866c 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -164,39 +164,12 @@ jobs: - run: name: Deploy Grafana Dashboards command: | - kubectl apply -f ./kubernetes_deploy/staging/ingress-dashboard.yml - kubectl apply -f ./kubernetes_deploy/staging/pods-dashboard.yml + if [ -f ./dashboards/${K8S_NAMESPACE}/ingress-dashboard.yml ]; then + kubectl apply -f ./dashboards/${K8S_NAMESPACE}/ingress-dashboard.yml + fi + kubectl apply -f ./dashboards/${K8S_NAMESPACE}/pods-dashboard.yml deploy: - parameters: - environment: - type: string - docker: - - image: ministryofjustice/cloud-platform-tools - steps: - - checkout - - aws-login-to-ecr-and-tagging - - run: - name: Authenticate with cluster - command: | - echo -n ${K8S_CLUSTER_CERT} | base64 -d > ./ca.crt - kubectl config set-cluster ${K8S_CLUSTER_NAME} --certificate-authority=./ca.crt --server=https://${K8S_CLUSTER_NAME} - kubectl config set-credentials circleci --token=${K8S_TOKEN} - kubectl config set-context ${K8S_CLUSTER_NAME} --cluster=${K8S_CLUSTER_NAME} --user=circleci --namespace=${K8S_NAMESPACE} - kubectl config use-context ${K8S_CLUSTER_NAME} - echo ${K8S_CLUSTER_NAME} - - run: - name: ECR config - command: | - echo "export ECR_ENDPOINT=$AWS_ECR_REGISTRY_ID.dkr.ecr.$ECR_REGION.amazonaws.com/$ECR_REPOSITORY" >> $BASH_ENV - - run: - name: Deploy to << parameters.environment >> - command: | - .circleci/deploy_to_kubernetes << parameters.environment >> - - slack/status - - - deploy_with_helm: parameters: environment: type: string @@ -239,7 +212,7 @@ workflows: - test context: laa-fala - - deploy_with_helm: + - deploy: name: Deploy UAT branch environment: staging requires: @@ -261,8 +234,8 @@ workflows: only: - main - - deploy_with_helm: - name: Helm Staging Deploy + - deploy: + name: Deploy to Staging environment: staging requires: - staging_deploy_approval @@ -275,7 +248,7 @@ workflows: - laa-fala-live-staging - deploy_grafana: - name: deploy_grafana + name: Deploy Grafana Staging Dashboards requires: - staging_deploy_approval filters: @@ -289,15 +262,14 @@ workflows: - production_deploy_approval: type: approval requires: - - Helm Staging Deploy + - Deploy to Staging filters: branches: only: - main - - - deploy: - name: production_deploy - environment: production + + - deploy_grafana: + name: Deploy Grafana Production Dashboards requires: - production_deploy_approval filters: @@ -308,12 +280,11 @@ workflows: - laa-fala - laa-fala-live-production - - deploy_with_helm: - name: helm_production_deploy + - deploy: + name: Deploy to Production environment: production requires: - production_deploy_approval - - production_deploy filters: branches: only: diff --git a/.circleci/deploy_to_kubernetes b/.circleci/deploy_to_kubernetes deleted file mode 100755 index 3b454972..00000000 --- a/.circleci/deploy_to_kubernetes +++ /dev/null @@ -1,33 +0,0 @@ -#!/bin/bash -e -set -o pipefail - -ROOT=$(dirname "$0") -NAMESPACE="$1" -NAMESPACE_DIR="$ROOT/../kubernetes_deploy/$NAMESPACE" - -if ! [ $NAMESPACE ] ; then - - echo "usage: deploy_to_kubernetes namespace\n" - echo "namespace is a directory in ../kubernetes_deploy/ directory" - exit 1; -fi - -if ! [ -d $NAMESPACE_DIR ] ; then - echo "$NAMESPACE_DIR not found" - exit 1; -fi - -if [ -z "$ECR_DEPLOY_IMAGE" ] ; then - source "$ROOT"/define_build_environment_variables -fi - -echo "Deploying $ECR_DEPLOY_IMAGE to $NAMESPACE..." - -echo "Deploying app" -kubectl set image --filename="$NAMESPACE_DIR/deployment.yml" --local --output=yaml \ - app="$ECR_DEPLOY_IMAGE" | \ - kubectl apply \ - --filename=/dev/stdin \ - --filename="$NAMESPACE_DIR/service.yml" \ - --filename="$NAMESPACE_DIR/ingress.yml" - diff --git a/README.md b/README.md index 5f5fdc42..8c9629ef 100644 --- a/README.md +++ b/README.md @@ -84,6 +84,26 @@ When breakpoint() is reached, you will be able to debug from the command line. https://docs.python.org/3/library/pdb.html +## Deploying to Staging and Production + +The service uses `helm` to deploy to Cloud Platform Environments via CircleCI. This can be installed using: + +`brew install helm` + +To view helm deployments in a namespace the command is: + +`helm -n ls --all` + +e.g. `helm -n laa-fala-staging ls --all` + +Deployments can be deleted by running: + +`helm delete ` + +e.g. `helm -n laa-fala-staging delete el-123-fee-change` + +It is also possible to manually deploy to an environment from the command line, the structure of the command can be found in `bin/deploy.sh` + ## Documentation * [Installation via virtualenv](docs/virtual-env.md) diff --git a/kubernetes_deploy/production/dashboard.yml b/dashboards/production/pods-dashboard.yml similarity index 100% rename from kubernetes_deploy/production/dashboard.yml rename to dashboards/production/pods-dashboard.yml diff --git a/kubernetes_deploy/staging/ingress-dashboard.yml b/dashboards/staging/ingress-dashboard.yml similarity index 100% rename from kubernetes_deploy/staging/ingress-dashboard.yml rename to dashboards/staging/ingress-dashboard.yml diff --git a/kubernetes_deploy/staging/pods-dashboard.yml b/dashboards/staging/pods-dashboard.yml similarity index 100% rename from kubernetes_deploy/staging/pods-dashboard.yml rename to dashboards/staging/pods-dashboard.yml diff --git a/docs/kubernetes.md b/docs/kubernetes.md deleted file mode 100644 index 6dc07563..00000000 --- a/docs/kubernetes.md +++ /dev/null @@ -1,60 +0,0 @@ -# Using Kubernetes - -Read the following if you want to use Kubernetes from your local development environment. - -## Setup kubectl - -You'll need to install and configure `kubectl` CLI tool to interact with Kubernetes. There are [instructions on kubectl configuration](https://ministryofjustice.github.io/cloud-platform-user-docs/01-getting-started/001-kubectl-config/) in the Cloud Platform User Guide. - -## Kubernetes namespaces - - -`fala` has two namespaces (environments): - -- [laa-fala-staging](https://github.com/ministryofjustice/cloud-platform-environments/tree/master/namespaces/cloud-platform-live-0.k8s.integration.dsd.io/laa-fala-staging) -- [laa-fala-production](https://github.com/ministryofjustice/cloud-platform-environments/tree/master/namespaces/cloud-platform-live-0.k8s.integration.dsd.io/laa-fala-production) - -## Admin role - -When you become a member of the GitHub team `laa-get-access`, you'll automatically get the `ClusterRole - admin` role. - ->**What is the ClusterRole -admin** ->Allows admin access, intended to be granted within a namespace using a RoleBinding. If used in a RoleBinding, allows read/write access to most resources in a namespace, including the ability to create roles and rolebindings within the namespace. It does not allow write access to resource quota or to the namespace itself. https://kubernetes.io/docs/reference/access-authn-authz/rbac/#default-roles-and-role-bindings - -You can [find out more about roles](https://ministryofjustice.github.io/cloud-platform-user-docs/01-getting-started/002-env-create/#01-rbacyaml) in the Cloud Platform User Guide. - - -## Authenticating with the Docker registry -Docker images are stored in AWS ECR. To authenticate with the `cla_public` repository, fetch the credentials by typing the following: - -``` -kubectl --namespace laa-fala-staging get secrets -o yaml -``` - -This command will return the **encoded** `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`. You can find out more by reading [Authenticating with the repository](https://ministryofjustice.github.io/cloud-platform-user-docs/02-deploying-an-app/001-app-deploy/#authenticating-with-the-repository). - -## Deploying to Kubernetes - -The standard way of deploying is via CircleCI deploy jobs. See [Deploy to Kubernetes using CircleCI](#deploy-to-kubernetes-using-circleci). - -If you need to deploy manually because, for example, CircleCI is offline, follow these steps: - -1. Build the Docker image locally. For example: - ``` - docker build -t fala:latest . - ``` -1. Tag the build. For example: - ``` - docker tag fala:latest 926803513772.dkr.ecr.eu-west-1.amazonaws.com/laa-get-access/laa-fala:awesometag - ``` -1. Push the docker image. For example: - ``` - docker push 926803513772.dkr.ecr.eu-west-1.amazonaws.com/laa-get-access/laa-fala:awesometag - ``` -1. Deploy changes to Kubernetes by applying changes to the `deployment.yml`. This example takes the `deployment.yml` as input, changes the value of `image` for the container named `app` to `926803513772.dkr.ecr.eu-west-1.amazonaws.com/laa-get-access/laa-fala:awesometag`, then pipes the updated yaml to the next command. The `kubectl apply` applies the yaml from stdin: - ``` - kubectl set image --filename="kubernetes_deploy/staging/deployment.yml" --local --output=yaml app="926803513772.dkr.ecr.eu-west-1.amazonaws.com/laa-get-access/laa-fala:awesometag" | kubectl apply --filename=/dev/stdin - ``` - A similiar technique is used in [deploy_to_kubernetes](https://github.com/ministryofjustice/fala/blob/master/.circleci/deploy_to_kubernetes) script. Of course, you could simply update the `deployment.yml` file directly and apply the changes. - - The `.circleci/deploy_to_kubernetes` relies on Circle CI environment variables being present, `CIRCLE_BRANCH` and `CIRCLE_SHA1`, so using the script from your local environment isn't possible yet. The plan is to remove these dependencies from the deploy script. diff --git a/kubernetes_deploy/development/dashboard.yml b/kubernetes_deploy/development/dashboard.yml deleted file mode 100644 index 69bc6fda..00000000 --- a/kubernetes_deploy/development/dashboard.yml +++ /dev/null @@ -1 +0,0 @@ -# Blank file, needs to exist because `deploy_to_kubernetes` expects it diff --git a/kubernetes_deploy/development/deployment.yml b/kubernetes_deploy/development/deployment.yml deleted file mode 100644 index 3f39dcb5..00000000 --- a/kubernetes_deploy/development/deployment.yml +++ /dev/null @@ -1,40 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: laa-fala -spec: - replicas: 1 - selector: - matchLabels: - app: laa-fala-app - template: - metadata: - labels: - app: laa-fala-app - spec: - containers: - - image: "" - imagePullPolicy: Never - name: app - readinessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - livenessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - ports: - - containerPort: 8000 - name: http - env: - - name: ALLOWED_HOSTS - value: localhost - - name: LAALAA_API_HOST - value: https://laa-legal-adviser-api-staging.apps.live-1.cloud-platform.service.justice.gov.uk - - name: FEATURE_FLAG_SURVEY_MONKEY - value: "enabled" diff --git a/kubernetes_deploy/development/ingress.yml b/kubernetes_deploy/development/ingress.yml deleted file mode 100644 index 69bc6fda..00000000 --- a/kubernetes_deploy/development/ingress.yml +++ /dev/null @@ -1 +0,0 @@ -# Blank file, needs to exist because `deploy_to_kubernetes` expects it diff --git a/kubernetes_deploy/development/service.yml b/kubernetes_deploy/development/service.yml deleted file mode 100644 index 57cb8ca7..00000000 --- a/kubernetes_deploy/development/service.yml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: laa-fala -spec: - type: NodePort - ports: - - port: 8000 - name: http - targetPort: 8000 - nodePort: 32000 - selector: - app: laa-fala-app diff --git a/kubernetes_deploy/production/deployment.yml b/kubernetes_deploy/production/deployment.yml deleted file mode 100644 index e85c675c..00000000 --- a/kubernetes_deploy/production/deployment.yml +++ /dev/null @@ -1,65 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: laa-fala -spec: - replicas: 3 - selector: - matchLabels: - app: laa-fala-app - template: - metadata: - labels: - app: laa-fala-app - spec: - terminationGracePeriodSeconds: 30 - containers: - - image: 754256621582.dkr.ecr.eu-west-2.amazonaws.com/laa-get-access/fala:main - name: app - readinessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - livenessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - lifecycle: - preStop: - exec: - command: ["/bin/sleep","10"] - ports: - - containerPort: 8000 - name: http - resources: - limits: - cpu: 400m - memory: 500Mi - requests: - cpu: 200m - memory: 250Mi - env: - - name: ALLOWED_HOSTS - value: ".laa-fala-production.apps.live-1.cloud-platform.service.justice.gov.uk .find-legal-advice.justice.gov.uk" - - name: LAALAA_API_HOST - value: https://laa-legal-adviser-api-production.cloud-platform.service.justice.gov.uk - - name: ENVIRONMENT - value: production - - name: DJANGO_SETTINGS_MODULE - value: "fala.settings.production" - - name: SENTRY_DSN - valueFrom: - secretKeyRef: - name: sentry - key: dsn - - name: SECRET_KEY - valueFrom: - secretKeyRef: - name: secret-key - key: SECRET_KEY - - name: FEATURE_FLAG_SURVEY_MONKEY - value: "enabled" diff --git a/kubernetes_deploy/production/ingress.yml b/kubernetes_deploy/production/ingress.yml deleted file mode 100644 index 199c66e9..00000000 --- a/kubernetes_deploy/production/ingress.yml +++ /dev/null @@ -1,27 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: laa-fala-v122 - namespace: laa-fala-production - annotations: - external-dns.alpha.kubernetes.io/set-identifier: laa-fala-v122-laa-fala-production-green - external-dns.alpha.kubernetes.io/aws-weight: "100" - nginx.ingress.kubernetes.io/enable-modsecurity: "true" - nginx.ingress.kubernetes.io/modsecurity-snippet: | - SecRuleEngine On -spec: - ingressClassName: "modsec" - tls: - - hosts: - - laa-fala-production-old.apps.live-1.cloud-platform.service.justice.gov.uk - rules: - - host: laa-fala-production-old.apps.live-1.cloud-platform.service.justice.gov.uk - http: - paths: - - path: / - pathType: ImplementationSpecific - backend: - service: - name: laa-fala - port: - number: 80 diff --git a/kubernetes_deploy/production/migrate-db-job.yml b/kubernetes_deploy/production/migrate-db-job.yml deleted file mode 100644 index 50af29e9..00000000 --- a/kubernetes_deploy/production/migrate-db-job.yml +++ /dev/null @@ -1,48 +0,0 @@ -apiVersion: batch/v1 -kind: Job -metadata: - name: create-db-run-migrations - namespace: laa-fala-production -spec: - template: - spec: - containers: - - name: create-and-migrate - image: 754256621582.dkr.ecr.eu-west-2.amazonaws.com/laa-get-access/fala:main - command: ["/bin/bash", "-c", "/home/app/fala/migrate_db.sh"] - env: - - name: DB_NAME - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_name - - name: DB_USER - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_username - - name: DB_PASSWORD - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_password - - name: DB_HOST - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: rds_instance_address - - name: DB_PORT - value: "5432" - resources: - limits: - cpu: 500m - memory: 500Mi - requests: - cpu: 100m - memory: 125Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - restartPolicy: Never - automountServiceAccountToken: false diff --git a/kubernetes_deploy/production/service.yml b/kubernetes_deploy/production/service.yml deleted file mode 100644 index 87b22185..00000000 --- a/kubernetes_deploy/production/service.yml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: laa-fala - namespace: laa-fala-production -spec: - ports: - - port: 80 - name: http - targetPort: 8000 - selector: - app: laa-fala-app diff --git a/kubernetes_deploy/staging/deployment.yml b/kubernetes_deploy/staging/deployment.yml deleted file mode 100644 index e948dc57..00000000 --- a/kubernetes_deploy/staging/deployment.yml +++ /dev/null @@ -1,80 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: laa-fala -spec: - replicas: 2 - selector: - matchLabels: - app: laa-fala-app - template: - metadata: - labels: - app: laa-fala-app - spec: - containers: - - image: 754256621582.dkr.ecr.eu-west-2.amazonaws.com/laa-get-access/fala:main - name: app - readinessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - livenessProbe: - tcpSocket: - port: 8000 - initialDelaySeconds: 5 - timeoutSeconds: 1 - periodSeconds: 10 - ports: - - containerPort: 8000 - name: http - resources: - limits: - cpu: 200m - memory: 350Mi - requests: - cpu: 50m - memory: 200Mi - env: - - name: ALLOWED_HOSTS - value: ".laa-fala-staging.apps.live-1.cloud-platform.service.justice.gov.uk .staging.find-legal-advice.justice.gov.uk" - - name: LAALAA_API_HOST - value: https://laa-legal-adviser-api-staging.apps.live-1.cloud-platform.service.justice.gov.uk - - name: ENVIRONMENT - value: staging - - name: SENTRY_DSN - valueFrom: - secretKeyRef: - name: sentry - key: dsn - - name: SECRET_KEY - valueFrom: - secretKeyRef: - name: secret-key - key: SECRET_KEY - - name: FEATURE_FLAG_SURVEY_MONKEY - value: "enabled" - - name: DB_NAME - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_name - - name: DB_USER - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_username - - name: DB_PASSWORD - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_password - - name: DB_HOST - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: rds_instance_address - - name: DB_PORT - value: "5432" diff --git a/kubernetes_deploy/staging/ingress.yml b/kubernetes_deploy/staging/ingress.yml deleted file mode 100644 index 797909d6..00000000 --- a/kubernetes_deploy/staging/ingress.yml +++ /dev/null @@ -1,37 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: laa-fala-v122 - namespace: laa-fala-staging - annotations: - external-dns.alpha.kubernetes.io/set-identifier: laa-fala-v122-laa-fala-staging-green - external-dns.alpha.kubernetes.io/aws-weight: "100" - nginx.ingress.kubernetes.io/enable-modsecurity: "true" - nginx.ingress.kubernetes.io/modsecurity-snippet: | - SecRuleEngine On -spec: - ingressClassName: "modsec" - tls: - - hosts: - - laa-fala-staging-old-k-deploy.apps.live-1.cloud-platform.service.justice.gov.uk - rules: - - host: laa-fala-staging.apps.live-1.cloud-platform.service.justice.gov.uk - http: - paths: - - path: / - pathType: ImplementationSpecific - backend: - service: - name: laa-fala - port: - number: 80 - - host: staging.find-legal-advice.justice.gov.uk - http: - paths: - - path: / - pathType: ImplementationSpecific - backend: - service: - name: laa-fala - port: - number: 80 diff --git a/kubernetes_deploy/staging/migrate-db-job.yml b/kubernetes_deploy/staging/migrate-db-job.yml deleted file mode 100644 index b32f4cd7..00000000 --- a/kubernetes_deploy/staging/migrate-db-job.yml +++ /dev/null @@ -1,48 +0,0 @@ -apiVersion: batch/v1 -kind: Job -metadata: - name: create-db-run-migrations - namespace: laa-fala-staging -spec: - template: - spec: - containers: - - name: create-and-migrate - image: 754256621582.dkr.ecr.eu-west-2.amazonaws.com/laa-get-access/fala:main - command: ["/bin/bash", "-c", "/home/app/fala/migrate_db.sh"] - env: - - name: DB_NAME - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_name - - name: DB_USER - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_username - - name: DB_PASSWORD - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: database_password - - name: DB_HOST - valueFrom: - secretKeyRef: - name: rds-postgresql-instance-output - key: rds_instance_address - - name: DB_PORT - value: "5432" - resources: - limits: - cpu: 500m - memory: 500Mi - requests: - cpu: 100m - memory: 125Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - restartPolicy: Never - automountServiceAccountToken: false diff --git a/kubernetes_deploy/staging/service.yml b/kubernetes_deploy/staging/service.yml deleted file mode 100644 index 98d76ca6..00000000 --- a/kubernetes_deploy/staging/service.yml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: laa-fala - namespace: laa-fala-staging -spec: - ports: - - port: 80 - name: http - targetPort: 8000 - selector: - app: laa-fala-app