feat: harden bootstrap and add tests

k8s/app.yaml

@@ -29,6 +29,42 @@ spec:
                 secretKeyRef:
                   name: la-huasca-db-secrets
                   key: DATABASE_URL
+            - name: BOOTSTRAP_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: la-huasca-bootstrap-secrets
+                  key: BOOTSTRAP_ADMIN_PASSWORD
+            - name: BOOTSTRAP_USER_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: la-huasca-bootstrap-secrets
+                  key: BOOTSTRAP_USER_PASSWORD
+            - name: BOOTSTRAP_WIFI_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: la-huasca-bootstrap-secrets
+                  key: BOOTSTRAP_WIFI_PASSWORD
+            - name: BOOTSTRAP_TAGLINE
+              valueFrom:
+                configMapKeyRef:
+                  name: la-huasca-bootstrap-config
+                  key: BOOTSTRAP_TAGLINE
+          readinessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 2
+            failureThreshold: 3
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 20
+            timeoutSeconds: 2
+            failureThreshold: 3
           resources:
             requests:
               cpu: 200m
@@ -56,8 +92,6 @@ kind: Ingress
 metadata:
   name: la-huasca-ts
   namespace: lahuasca
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
 spec:
   ingressClassName: traefik
   tls: