main-container.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: multibot
  labels:
    name: multibot
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: main-container-account
  namespace: multibot
---
apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: multibot
  name: main-container
  labels:
    app: main-container
    logging: my_group
spec:
  replicas: 2
  selector:
    matchLabels:
      app: main-container
  template:
    metadata:
      labels:
        app: main-container
        logging: my_group
    spec:
      serviceAccountName: main-container-account
      containers:
      - name: main-container
        image: {{IMAGE}}
        imagePullPolicy: {{IMAGE_PULL_POLICY}}
        resources:
          requests:
            cpu: 100m
            memory: 64Mi
          limits:
            cpu: 400m
            memory: 256Mi
        env:
        - name: BASE_URL
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: BASE_URL
        - name: TWITCH_SUPER_ADMIN_USERNAME
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: TWITCH_SUPER_ADMIN_USERNAME
        - name: TWITCH_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: TWITCH_CLIENT_ID
        - name: TWITCH_SECRET
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: TWITCH_SECRET
        - name: SESSION_SECRET
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: SESSION_SECRET
        - name: DOCKER_USERNAME
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: DOCKER_USERNAME
        - name: IMAGE_PULL_POLICY
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: IMAGE_PULL_POLICY
        - name: STATE_DB_URL
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: STATE_DB_URL
        - name: STATE_DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: STATE_DB_PASSWORD
        ports:
        - containerPort: 80
      restartPolicy: Always
---
apiVersion: v1
kind: Service
metadata:
  namespace: multibot
  name: main-container-svc
spec:
  selector:
    app: main-container
  ports:
  - protocol: TCP
    port: 8000
    targetPort: 80
  type: {{SERVICE_TYPE}}
---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  namespace: multibot
  name: main-container-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: main-container
  minReplicas: 2
  maxReplicas: 20
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 80
---
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
  namespace: multibot
  name: main-container-pdb
spec:
  minAvailable: 1
  selector:
    matchLabels:
      app: main-container
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: multibot
  name: tenant-manager
rules:
- apiGroups: [""]
  resources: ["pods", "services"]
  verbs: ["get", "list", "watch", "create", "update", "delete"]
- apiGroups: ["apps"]
  resources: ["deployments"]
  verbs: ["get", "list", "watch", "patch", "update", "create", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: tenant-manager-binding
  namespace: multibot
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: tenant-manager
subjects:
- kind: ServiceAccount
  name: main-container-account
  namespace: multibot