feat(deploy): Add deployment with Podman

Author: dialvarezs

.pre-commit-config.yaml

@@ -4,6 +4,7 @@ repos:
     rev: v6.0.0
     hooks:
       - id: check-yaml
+        args: [ --allow-multiple-documents ]
       - id: check-toml
       - id: end-of-file-fixer
       - id: trailing-whitespace

deploy/.gitignore

@@ -0,0 +1,2 @@
+db_init/
+app-secrets.yaml

deploy/app-pod.kube

@@ -0,0 +1,10 @@
+[Unit]
+Description=App pod
+
+[Install]
+WantedBy=multi-user.target default.target
+
+[Kube]
+Yaml=/home/user/app/deploy/app-pod.yaml
+Network=app.network
+SetWorkingDirectory=yaml

deploy/app-pod.yaml

@@ -0,0 +1,73 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: app
+data:
+  TZ: UTC
+  ALLOWED_HOSTS: "*"
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  labels:
+    app: app
+  name: app-pod
+spec:
+  containers:
+    - name: db
+      image: postgres:18
+      envFrom:
+        - configMapRef:
+            name: app
+        - secretRef:
+            name: app
+      securityContext:
+        runAsUser: 920
+        runAsGroup: 920
+      ports:
+        - containerPort: 5432
+      volumeMounts:
+        - mountPath: /docker-entrypoint-initdb.d/:z
+          name: app-db-init
+          readOnly: true
+        - mountPath: /var/lib/postgresql/data:Z,U
+          name: app-db-pvc
+        - mountPath: /var/run/postgresql:Z
+          name: app-db-tmp
+
+    - name: api
+      image: app_api:latest
+      envFrom:
+        - configMapRef:
+            name: app
+        - secretRef:
+            name: app
+      securityContext:
+        runAsUser: 921
+        runAsGroup: 921
+      ports:
+        - containerPort: 8000
+          hostPort: 10101
+
+    - name: web
+      image: app_web:latest
+      envFrom:
+        - configMapRef:
+            name: app
+      securityContext:
+        runAsUser: 922
+        runAsGroup: 922
+      ports:
+        - containerPort: 3000
+          hostPort: 10102
+
+  volumes:
+    - name: app-db-init
+      hostPath:
+        path: ./db_init/
+        type: DirectoryOrCreate
+    - name: app-db-pvc
+      persistentVolumeClaim:
+        claimName: app-db-pvc
+    - name: app-db-tmp
+      emptyDir: { }

deploy/app-secrets.example.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: app
+stringData:
+  POSTGRES_USER: pguser
+  POSTGRES_PASSWORD: pgsecret
+  POSTGRES_DB: app
+  DATABASE_URL: postgresql+psycopg://pguser:pgsecret@postgres:5432/app
+  SECRET_KEY: secretkey

deploy/app.network

@@ -0,0 +1,2 @@
+[Network]
+NetworkName=app

deploy/build.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+tag_prefix="app"
+date=$(date '+%Y%m%d')
+
+build_image() {
+  local target=$1
+  local dir=$2
+  podman build --pull=newer -t "${tag_prefix}_${target}:${date}" -t "${tag_prefix}_${target}:latest" "${dir}/"
+}
+
+build_target=${1:-all}
+
+case $build_target in
+  api)
+    build_image "api" ../app_api/
+    ;;
+  web)
+    build_image "web" ../app_web/
+    ;;
+  all)
+    build_image "api" ../app_api/
+    build_image "web" ../app_web/
+    ;;
+  *)
+    echo "Uso: $0 [api|web|all]"
+    exit 1
+    ;;
+esac