radixconfig.yaml

# yaml-language-server: $schema=file:///home/nst/go/src/github.com/equinor/radix-operator/json-schema/radixapplication.json

x-redis: &redis bitnami/redis:latest
x-default-requests: &request
  memory: 200M
  cpu: 60m
x-default-limit: &limit
  cpu: 60m    
x-resources: &resources
  requests: *request
  limits: *limit
x-volumeMounts: &volumemounts
  - name: tmp
    path: /tmp
    emptyDir:
      sizeLimit: 200M

apiVersion: radix.equinor.com/v1
kind: RadixApplication
metadata:
  name: oauth-demo
spec:
  dnsExternalAlias:
    - alias: simple.nils.com
      component: simple
      environment: dev
      useCertificateAutomation: false
    - alias: web.nils.com
      component: web
      environment: prod
      useCertificateAutomation: false
    - alias: webqa.nils.com
      component: web
      environment: qa
      useCertificateAutomation: false
  dnsAppAlias:
    component: web
    environment: dev
  dnsAlias:
    - alias: nilssimple
      environment: dev
      component: simple
  build:
    secrets:
      - SECRET1
      - SECRET2a
    useBuildKit: true
    # useBuildCache: false
  privateImageHubs:
    docker.io:
      username: nilsgustavstrabo
  environments:
    - name: dev
      build:
        from: main
    - name: qa
      build:
        from: v\d+\.\d+\..*
    - name: prod
  components:
    - name: web
      dockerfilename: Dockerfile
      # image: docker.io/nilsgustavstrabo/oauth-demo-dev-web:cksjc
      identity:
        azure:
          clientId: b96d264b-7053-4465-a4a7-32be5b0fec49
      variables:
        ASPNETCORE_URLS: http://*:5005
        KEY_VAULT_URL: https://radix-sci-az-kv-test.vault.azure.net/
        SQL_SERVER_NAME: "radix-test-server-delete-me.database.windows.net"
        SQL_DATABASE_NAME: "radix-test-database-delete-me"
        MEGA_FILE_SIZE: "1000"
        ENABLE_PROXY_BUFFERING: "true"
        DOTNET_EnableDiagnostics: "0"
        AZURE_CLIENT_ID_FOR_KEYVAULT: afc6fbb0-6c82-45a1-abc8-280c9dce7b7d
        AZURE_CLIENT_ID_FOR_DB: 1500cbee-3f21-4301-b6e8-09888829c5ae
      ports:
        - name: http
          port: 5005
      publicPort: http
      # network:
      #   ingress:
      #     public:
      #       proxyBodySize: "5m"
      #       proxyReadTimeout: 15
      #       proxySendTimeout: 15
      #       allow:
      #         - 104.45.84.0/30
      #         - 143.97.110.1
      runtime:
        architecture: amd64
      horizontalScaling:
        maxReplicas: 2
        minReplicas: 0
        triggers:
          - name: cpu
            cpu:
              value: 60
          - name: memory
            memory:
              value: 80
          - name: cron
            cron:
              desiredReplicas: 1
              start: 0 8 * * *
              end: 0 18 * * *
              timezone: Europe/Oslo
      secretRefs:
        azureKeyVaults:
          - items:
              - name: secret1
                envVar: SECRET1
            name: radix-sci-az-kv-test
            useAzureIdentity: true
      environmentConfig:
        - environment: dev
          identity: {}
          readOnlyFileSystem: false
          # network:
          #   ingress:
          #     public: 
          #       allow: []
          volumeMounts:
            - name: videos
              path: /mnt/videos
              blobFuse2:
                protocol: fuse2
                streaming:
                  enabled: false
                container: videos
                uid: "1001"
                accessMode: ReadWriteMany
                useAdls: true
                useAzureIdentity: true
                storageAccount: radixblobtest6
                resourceGroup: test-resources
                subscriptionId: 16ede44b-1f74-40a5-b428-46cca9a5741b
          variables:
            VIDEO_PATH: "/mnt/videos"
        - environment: prod
      resources: *resources
      authentication:
        oauth2:
          clientId: 5e48ca1f-a2bf-4dec-b96d-bbf8ce69f9f6
          setXAuthRequestHeaders: true
          setAuthorizationHeader: true
          sessionStoreType: redis
          scope: openid email offline_access # https://graph.microsoft.com/User.Read
          redisStore:
            connectionUrl: redis://redis:6379
    - name: redis
      image: *redis
      secrets:
        - REDIS_PASSWORD
      ports:
        - name: redis
          port: 6379
      resources:
        requests:
          memory: 51M
          cpu: 51m
      runtime:
        architecture: arm64
      horizontalScaling:
        maxReplicas: 1
        minReplicas: 0
        triggers:
          - name: cpux
            cpu:
              value: 60
          - name: memoryx
            memory:
              value: 80
          - name: cron
            cron:
              desiredReplicas: 1
              start: 0 8 * * *
              end: 0 18 * * *
              timezone: Europe/Oslo
      environmentConfig:
        - environment: prod
    - name: proxy
      src: proxy
      ports:
        - name: http
          port: 8080
      publicPort: http
      readOnlyFileSystem: true
      runtime:
        architecture: arm64
      volumeMounts: *volumemounts
      resources:
        requests:
          cpu: 50m
          memory: 100Mi
        limits:
          cpu: 50m
      authentication:
        oauth2:
          clientId: 5e48ca1f-a2bf-4dec-b96d-bbf8ce69f9f6
          setXAuthRequestHeaders: true
          setAuthorizationHeader: true
          sessionStoreType: redis
          scope: openid email profile offline_access # https://graph.microsoft.com/User.Read
          redisStore:
            connectionUrl: redis://redis:6379   
      horizontalScaling:
        maxReplicas: 1
        minReplicas: 0
        triggers:
          - name: cpux
            cpu:
              value: 60
          - name: memoryx
            memory:
              value: 80
          - name: cron
            cron:
              desiredReplicas: 1
              start: 0 8 * * *
              end: 0 18 * * *
              timezone: Europe/Oslo
      environmentConfig:
        - environment: dev
        - environment: prod
    - name: simple
      # image: docker.io/nilsgustavstrabo/nilssimple:latest
      src: /simpleweb
      ports:
        - name: http
          port: 9001
      publicPort: http
      readOnlyFileSystem: true
      identity:
        azure:
          clientId: b96d264b-7053-4465-a4a7-32be5b0fec49
      variables:
        TIMEOUT: 10h
        TMPDIR: "/tmp"
        APPENDTICK: 10s
      volumeMounts:
        - name: tmp
          path: /tmp
          emptyDir:
            sizeLimit: 5M
        - name: videos
          path: /mnt/videos
          blobFuse2:
            protocol: fuse2
            streaming:
              enabled: false
            container: videos
            uid: "1000"
            accessMode: ReadOnlyMany
            useAdls: true
      resources:
        requests:
          cpu: 10m
          memory: 10Mi
        limits:
          memory: 20Mi
      network:
        ingress:
          public:
            proxyBodySize: 100m
            proxyReadTimeout: 2
            proxySendTimeout: 5
            allow:
              - 143.97.110.1
              - 104.45.84.0/30
      # ingressConfiguration:
      #   - websocketfriendly
      environmentConfig:
        - environment: dev
          horizontalScaling:
            maxReplicas: 1
            minReplicas: 0
            triggers:
              - name: cron
                cron:
                  desiredReplicas: 1
                  start: 0 8 * * *
                  end: 0 17 * * *
                  timezone: Europe/Oslo
          runtime:
            architecture: arm64
        - environment: prod
          replicas: 2
          horizontalScaling:
            maxReplicas: 4
            minReplicas: 2
            cooldownPeriod: 600 # 10 minutes
            triggers:
              - name: cpu
                cpu:
                  value: 50
          runtime:
            architecture: arm64