add stage.d-b.ca application

apps/kustomize/web/base/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- web/deployment.yaml
+- web/ingress.yaml
+- web/service.yaml
+- web/web-backend-tls.yaml

apps/kustomize/web/base/web/deployment.yaml

@@ -0,0 +1,35 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web
+  labels:
+    app: web
+spec:
+  selector:
+    matchLabels:
+      app: web
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: web
+    spec:
+      containers:
+      - name: web
+        resources:
+          requests:
+            cpu: 100m
+            memory: 128Mi
+          limits:
+            memory: 512Mi
+        ports:
+        - containerPort: 443
+          protocol: TCP
+          name: https
+        volumeMounts:
+        - mountPath: /tls
+          name: web-backend-tls
+      volumes:
+      - name: web-backend-tls
+        secret:
+          secretName: web-backend-tls

apps/kustomize/web/base/web/ingress.yaml

@@ -0,0 +1,11 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    acme.cert-manager.io/http01-ingress-class: nginx
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+  name: web
+  labels:
+    app: web
+spec:
+  ingressClassName: nginx

apps/kustomize/web/base/web/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: web
+spec:
+  ports:
+  - name: https
+    port: 443
+    protocol: TCP
+    targetPort: 443
+  selector:
+    app: web
+  type: ClusterIP

apps/kustomize/web/base/web/web-backend-tls.yaml

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: web-backend-tls
+spec:
+  secretName: web-backend-tls
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  dnsNames:
+  - web
+  issuerRef:
+    name: kubernetes-issuer
+    kind: ClusterIssuer