kubernetes.yaml

# Create a secret named 'regcred' for your Docker registry credentials.
#
#   kubectl create secret docker-registry regcred \
#     --docker-server=<Registry server> \
#     --docker-username=<Username> \
#     --docker-password=<Password>
#
# Create a secret named 'app-secrets' for secret keys and passwords, such as for root access to your MySQL database.
# Those will be passed to your app containers as environment variables.
#
#   kubectl create secret generic app-secrets \
#     --from-literal=APP_KEY='<256 bit key>' \
#     --from-literal=DB_USERNAME='<MySQL username>' \
#     --from-literal=DB_PASSWORD='<MySQL password>' \
#     --from-literal=REDIS_PASSWORD='<Redis password>'

apiVersion: v1
kind: ConfigMap
metadata:
  name: app-config
data:
  APP_NAME: "laravel-dock on Kubernetes"
  APP_ENV: "production"
  APP_DEBUG: "false"
  APP_URL: "http://localhost"

  TZ: "UTC"

  LOG_CHANNEL: "stderr"

  DB_HOST: "your-db-server.net"
  DB_PORT: "3306"
  DB_DATABASE: "laraveldock"

  REDIS_HOST: "your-redis-server.net"
  REDIS_PORT: "6379"

  BROADCAST_DRIVER: "log"
  CACHE_DRIVER: "redis"
  QUEUE_CONNECTION: "redis"
  SESSION_DRIVER: "redis"

---

apiVersion: v1
kind: Service
metadata:
  name: web
spec:
  ports:
  - port: 80
    targetPort: 80
  selector:
    app: web

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: web
spec:
  selector:
    matchLabels:
      app: web
  template:
    metadata:
      labels:
        app: web
    spec:
      containers:
      - name: app
        image: ghcr.io/jarnovanleeuwen/laravel-dock:{{TAG}}
        envFrom:
        - configMapRef:
            name: app-config
        - secretRef:
            name: app-secrets
        env:
        - name: CONTAINER_ROLE
          value: "app"
        ports:
        - containerPort: 80
        # Accept connections until the pod has been removed from the services on all nodes.
        # See https://freecontent.manning.com/handling-client-requests-properly-with-kubernetes/
        lifecycle:
          preStop:
            exec:
              command: ["sleep", "5"]
        # Start sending traffic only after the application is ready (Apache is running).
        readinessProbe:
          exec:
            command:
              - curl
              - http://localhost
          # initialDelaySeconds: 0
          periodSeconds: 10 # default is 10
          timeoutSeconds: 10 # default is 1
          # successThreshold: 1
          # failureThreshold: 3
        resources:
          requests:
            cpu: 1000m
            memory: 2048Mi
      imagePullSecrets:
      - name: regcred

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: scheduler
spec:
  selector:
    matchLabels:
      app: scheduler
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: scheduler
    spec:
      containers:
      - name: app
        image: ghcr.io/jarnovanleeuwen/laravel-dock:{{TAG}}
        envFrom:
        - configMapRef:
            name: app-config
        - secretRef:
            name: app-secrets
        env:
        - name: CONTAINER_ROLE
          value: "scheduler"
        resources:
          requests:
            cpu: 250m
            memory: 1024Mi
      imagePullSecrets:
      - name: regcred

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: queue
spec:
  selector:
    matchLabels:
      app: queue
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: queue
    spec:
      containers:
      - name: app
        image: ghcr.io/jarnovanleeuwen/laravel-dock:{{TAG}}
        envFrom:
        - configMapRef:
            name: app-config
        - secretRef:
            name: app-secrets
        env:
        - name: CONTAINER_ROLE
          value: "queue"
        resources:
          requests:
            cpu: 250m
            memory: 1024Mi
      imagePullSecrets:
      - name: regcred