add webrtc be

bitbucket-pipelines.yml

@@ -87,11 +87,11 @@ pipelines:
 
 
       # - step: Deploy GCR credentials
-      # kubectl create secret docker-registry gcr-json-key \
+# kubectl create secret docker-registry gcr-json-key \
-      #   --docker-server=gcr.io \
+#   --docker-server=gcr.io \
-      #   --docker-username=_json_key \
+#   --docker-username=_json_key \
-      #   --docker-password="$(cat k8s/gcp.json)" \
+#   --docker-password="$(cat k8s/gcp.json)" \
-      #   --docker-email=any@valid.email
+#   --docker-email=any@valid.email
       # kubectl patch serviceaccount default \
       #  -p '{"imagePullSecrets": [{"name": "gcr-json-key"}]}'
 

k8s/applications/webrtc-be.yaml

@@ -0,0 +1,26 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: webrtc-be
+spec:
+  destination:
+    name: ''
+    namespace: webrtc-be
+    server: 'https://kubernetes.default.svc'
+  source:
+    path: k8s/webrtc-be
+    repoURL: 'git@bitbucket.org:jamkazam/video-iac.git'
+    targetRevision: HEAD
+  project: default
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true 
+    automated: 
+      prune: true 
+      allowEmpty: false
+    retry:
+      limit: 5 
+      backoff:
+        duration: 5s 
+        factor: 2 
+        maxDuration: 3m 

k8s/webrtc-be/deployment.yml

@@ -0,0 +1,25 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: webrtc-be-deployment
+  labels:
+    app: webrtc-be
+spec:
+  selector:
+    matchLabels:
+      app: webrtc-be
+  replicas: 1
+  template:
+    metadata:
+     labels:
+      app: webrtc-be
+    spec:
+      hostNetwork: true
+      imagePullSecrets:
+        - name: gcr-json-key
+      containers:
+        - name: webrtc-be
+          image: gcr.io/tough-craft-276813/webrtc_be:prod-0.1.83
+          ports:
+          - containerPort: 80
+            name: http

k8s/webrtc-be/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: haproxy
+    haproxy.org/ssl-redirect: "false"
+    cert-manager.io/cluster-issuer: letsencrypt-haproxy-production
+    ingress.kubernetes.io/config-backend: |
+      balance url_param session_id
+      timeout connect 1s
+      timeout queue 5s
+      timeout server 3600s
+  name: webrtc-be
+spec:
+  rules:
+  - host: &host webrtc-be.staging.video.jamkazam.com
+    http:
+      paths:
+      - backend:
+          serviceName: webrtc-be-service
+          servicePort: 80
+        path: /
+  tls:
+  - secretName: webrtc-be
+    hosts:
+    - *host