Changeset 0.5.0 (#35)

k8s/deployment.yaml

@@ -1,135 +0,0 @@
-# k8s/deployment.yaml
-# ============================================
-# Chat Switchboard - Kubernetes Deployment Template
-# ============================================
-# Variables substituted by CI/CD via envsubst:
-#   DEPLOY_NAME, ENVIRONMENT, IMAGE_TAG, BASE_PATH,
-#   DB_NAME, REPLICAS, NAMESPACE, REGISTRY, IMAGE_NAME,
-#   DOMAIN, CERT_ISSUER, POSTGRES_HOST, POSTGRES_PORT,
-#   MEMORY_REQUEST, MEMORY_LIMIT, CPU_REQUEST, CPU_LIMIT
-# ============================================
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: ${DEPLOY_NAME}
-  namespace: ${NAMESPACE}
-  labels:
-    app: chat-switchboard
-    env: ${ENVIRONMENT}
-    service: chat-switchboard
-spec:
-  replicas: ${REPLICAS}
-  selector:
-    matchLabels:
-      app: chat-switchboard
-      env: ${ENVIRONMENT}
-  template:
-    metadata:
-      labels:
-        app: chat-switchboard
-        env: ${ENVIRONMENT}
-        service: chat-switchboard
-    spec:
-      containers:
-      - name: switchboard
-        image: ${REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 80
-          name: http
-        env:
-        - name: ENVIRONMENT
-          value: "${ENVIRONMENT}"
-        - name: BASE_PATH
-          value: "${BASE_PATH}"
-        - name: PORT
-          value: "8080"
-        # ── Database connection ──
-        - name: POSTGRES_HOST
-          value: "${POSTGRES_HOST}"
-        - name: POSTGRES_PORT
-          value: "${POSTGRES_PORT}"
-        - name: POSTGRES_DB
-          value: "${DB_NAME}"
-        - name: POSTGRES_USER
-          valueFrom:
-            secretKeyRef:
-              name: switchboard-db-credentials
-              key: POSTGRES_USER
-        - name: POSTGRES_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: switchboard-db-credentials
-              key: POSTGRES_PASSWORD
-        - name: DATABASE_URL
-          value: "postgres://$(POSTGRES_USER):$(POSTGRES_PASSWORD)@${POSTGRES_HOST}:${POSTGRES_PORT}/${DB_NAME}?sslmode=disable"
-        resources:
-          requests:
-            memory: "${MEMORY_REQUEST}"
-            cpu: "${CPU_REQUEST}"
-          limits:
-            memory: "${MEMORY_LIMIT}"
-            cpu: "${CPU_LIMIT}"
-        livenessProbe:
-          httpGet:
-            path: /
-            port: 80
-          initialDelaySeconds: 10
-          periodSeconds: 30
-          timeoutSeconds: 5
-          failureThreshold: 3
-        readinessProbe:
-          httpGet:
-            path: /health
-            port: 8080
-          initialDelaySeconds: 5
-          periodSeconds: 10
-          timeoutSeconds: 3
-          failureThreshold: 3
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: ${DEPLOY_NAME}
-  namespace: ${NAMESPACE}
-  labels:
-    app: chat-switchboard
-    env: ${ENVIRONMENT}
-spec:
-  selector:
-    app: chat-switchboard
-    env: ${ENVIRONMENT}
-  ports:
-  - protocol: TCP
-    port: 80
-    targetPort: 80
-    name: http
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ${DEPLOY_NAME}
-  namespace: ${NAMESPACE}
-  annotations:
-    cert-manager.io/cluster-issuer: "${CERT_ISSUER}"
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-  labels:
-    app: chat-switchboard
-    env: ${ENVIRONMENT}
-spec:
-  ingressClassName: "traefik"
-  tls:
-  - hosts:
-    - ${DOMAIN}
-    secretName: chat-switchboard-tls
-  rules:
-  - host: "${DOMAIN}"
-    http:
-      paths:
-      - path: ${BASE_PATH}
-        pathType: Prefix
-        backend:
-          service:
-            name: ${DEPLOY_NAME}
-            port:
-              number: 80

k8s/ingress.yaml

@@ -3,8 +3,10 @@
 # Chat Switchboard - Ingress
 # ============================================
 # Routes for a single subdomain:
-#   /api/*  → backend service (Go API on :8080)
-#   /*      → frontend service (nginx SPA on :80)
+#   /api/*   → backend service (Go API on :8080)
+#   /health  → backend service (health check)
+#   /ws      → backend service (WebSocket, upgraded)
+#   /*       → frontend service (nginx SPA on :80)
 # ============================================
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -35,6 +37,22 @@ spec:
             name: switchboard-be${DEPLOY_SUFFIX}
             port:
               number: 8080
+      # Health check → backend
+      - path: /health
+        pathType: Exact
+        backend:
+          service:
+            name: switchboard-be${DEPLOY_SUFFIX}
+            port:
+              number: 8080
+      # WebSocket → backend (traefik handles upgrade automatically)
+      - path: /ws
+        pathType: Exact
+        backend:
+          service:
+            name: switchboard-be${DEPLOY_SUFFIX}
+            port:
+              number: 8080
       # Everything else → frontend
       - path: /
         pathType: Prefix

k8s/lite.yaml

@@ -1,104 +0,0 @@
-# k8s/lite.yaml
-# ============================================
-# Chat Switchboard - Lite (FE-Only)
-# ============================================
-# Static SPA with no backend. All data in localStorage.
-# Deployed to lite.DOMAIN on push to main.
-# ============================================
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: switchboard-lite
-  namespace: ${NAMESPACE}
-  labels:
-    app: switchboard
-    component: frontend
-    env: lite
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: switchboard
-      component: frontend
-      env: lite
-  template:
-    metadata:
-      labels:
-        app: switchboard
-        component: frontend
-        env: lite
-    spec:
-      containers:
-      - name: frontend
-        image: ${FE_IMAGE}:${IMAGE_TAG}
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 80
-          name: http
-        resources:
-          requests:
-            memory: "32Mi"
-            cpu: "10m"
-          limits:
-            memory: "64Mi"
-            cpu: "50m"
-        readinessProbe:
-          httpGet:
-            path: /
-            port: 80
-          initialDelaySeconds: 3
-          periodSeconds: 10
-        livenessProbe:
-          httpGet:
-            path: /
-            port: 80
-          initialDelaySeconds: 5
-          periodSeconds: 30
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: switchboard-lite
-  namespace: ${NAMESPACE}
-  labels:
-    app: switchboard
-    env: lite
-spec:
-  selector:
-    app: switchboard
-    component: frontend
-    env: lite
-  ports:
-  - protocol: TCP
-    port: 80
-    targetPort: 80
-    name: http
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: switchboard-lite
-  namespace: ${NAMESPACE}
-  annotations:
-    cert-manager.io/cluster-issuer: "${CERT_ISSUER}"
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-  labels:
-    app: switchboard
-    env: lite
-spec:
-  ingressClassName: "traefik"
-  tls:
-  - hosts:
-    - ${DEPLOY_HOST}
-    secretName: switchboard-lite-tls
-  rules:
-  - host: "${DEPLOY_HOST}"
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: switchboard-lite
-            port:
-              number: 80