Prod hardening and K8s drafts: auth fail-close, DB pool, init/schema split, prod init guard

2026-06-27 20:41:41 -05:00
parent 744830c3cd
commit 49bf370d41
9 changed files with 346 additions and 257 deletions
@@ -0,0 +1,83 @@
+{
+  "apiVersion": "apps/v1",
+  "kind": "Deployment",
+  "metadata": {
+    "name": "la-huasca-ts",
+    "namespace": "la-huasca-ts"
+  },
+  "spec": {
+    "replicas": 1,
+    "selector": {
+      "matchLabels": {
+        "app": "la-huasca-ts"
+      }
+    },
+    "template": {
+      "metadata": {
+        "labels": {
+          "app": "la-huasca-ts"
+        }
+      },
+      "spec": {
+        "imagePullSecrets": [
+          {
+            "name": "la-huasca-registry"
+          }
+        ],
+        "containers": [
+          {
+            "name": "la-huasca-ts",
+            "image": "gitea.ajavasoft.com/muken/la-huasca-ts:latest",
+            "ports": [
+              {
+                "containerPort": 3000,
+                "name": "http"
+              }
+            ],
+            "env": [
+              {
+                "name": "NODE_ENV",
+                "value": "production"
+              },
+              {
+                "name": "DATABASE_URL",
+                "valueFrom": {
+                  "secretKeyRef": {
+                    "name": "calendar-db-secrets",
+                    "key": "url"
+                  }
+                }
+              }
+            ],
+            "readinessProbe": {
+              "httpGet": {
+                "path": "/api/health",
+                "port": "http"
+              },
+              "initialDelaySeconds": 20,
+              "periodSeconds": 15
+            },
+            "livenessProbe": {
+              "httpGet": {
+                "path": "/api/health",
+                "port": "http"
+              },
+              "initialDelaySeconds": 60,
+              "periodSeconds": 30
+            },
+            "resources": {
+              "requests": {
+                "cpu": "200m",
+                "memory": "256Mi"
+              },
+              "limits": {
+                "cpu": "500m",
+                "memory": "512Mi"
+              }
+            }
+          }
+        ]
+      }
+    }
+  }
+}