apiVersion: v1
kind: List
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: nginx
    namespace: rene-jochum-dev
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    strategy:
      rollingUpdate:
        maxSurge: 1
        maxUnavailable: 0
      type: RollingUpdate
    selector:
      matchLabels:
        container: nginx
    template:
      metadata:
        labels:
          container: nginx
      spec:
        containers:
        - image: registry.jochum.dev/rene.jochum.dev/homepage:${CICD_GIT_TAG}
          imagePullPolicy: IfNotPresent
          name: nginx
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: {}
            privileged: false
            procMount: Default
            readOnlyRootFilesystem: false
            runAsNonRoot: false
          stdin: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          tty: true
        dnsPolicy: ClusterFirst
        imagePullSecrets:
        - name: jochum-dev
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30

- kind: Service
  apiVersion: v1
  metadata:
    name: nginx
  spec:
    type: ClusterIP
    selector:
      container: "nginx"
    ports:
    - protocol: TCP
      port: 80
      targetPort: 80

- kind: Ingress
  apiVersion: extensions/v1beta1
  metadata:
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
      kubernetes.io/tls-acme: "true"
      nginx.ingress.kubernetes.io/ssl-redirect: "true"
    generation: 2
    name: rene.jochum.dev
    namespace: rene-jochum-dev
  spec:
    rules:
    - host: rene.jochum.dev
      http:
        paths:
        - backend:
            serviceName: nginx
            servicePort: 80
          path: /
    tls:
    - hosts:
      - rene.jochums.at
      secretName: rene-jochum-dev-tls