FEAT(repo): add jaejadle and joossam applications

- jaejadle: Next.js app at jaejadle.kro.kr (prod)
- jaejadle-dev: dev environment at dev.jaejadle.kro.kr
- joossam: FastAPI app at joossameng.kro.kr (prod)
- joossam-dev: dev environment at dev.joossameng.kro.kr
- All apps use Authelia SSO
- jaejadle uses ExternalSecrets for DB and AWS credentials

joossam/argocd.yaml

@@ -0,0 +1,35 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: joossam
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  sources:
+  - repoURL: https://github.com/K3S-HOME/web-apps.git
+    targetRevision: main
+    path: joossam
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: joossam
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+      allowEmpty: false
+    syncOptions:
+    - CreateNamespace=true
+    - PrunePropagationPolicy=foreground
+    - PruneLast=true
+    retry:
+      limit: 5
+      backoff:
+        duration: 5s
+        factor: 2
+        maxDuration: 3m
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
+  revisionHistoryLimit: 10

joossam/deployment.yaml

@@ -0,0 +1,50 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: joossam
+  labels:
+    app: joossam
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: joossam
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 0
+      maxSurge: 1
+  revisionHistoryLimit: 3
+  template:
+    metadata:
+      labels:
+        app: joossam
+    spec:
+      imagePullSecrets:
+      - name: ghcr-secret
+      containers:
+      - name: joossam
+        image: ghcr.io/mayne0213/joossam:latest
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8000
+          protocol: TCP
+        resources:
+          requests:
+            memory: 256Mi
+            cpu: 20m
+          limits:
+            memory: 512Mi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 8000
+          initialDelaySeconds: 10
+          periodSeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /
+            port: 8000
+          initialDelaySeconds: 5
+          periodSeconds: 5
+      restartPolicy: Always

joossam/ingress.yaml

@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: joossam-ingress
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia@kubernetescrd
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - joossameng.kro.kr
+    secretName: joossam-tls
+  rules:
+  - host: joossameng.kro.kr
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: joossam
+            port:
+              number: 80

joossam/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: joossam
+resources:
+- deployment.yaml
+- service.yaml
+- ingress.yaml

joossam/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: joossam
+  labels:
+    app: joossam
+spec:
+  type: ClusterIP
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8000
+    protocol: TCP
+  selector:
+    app: joossam