apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: asktug-api-proxy-secrets
  namespace: frontend
spec:
  encryptedData:
    ASKTUG_TOKEN: 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
  template:
    data: null
    metadata:
      creationTimestamp: null
      name: asktug-api-proxy-secrets
      namespace: frontend
    type: Opaque

# ---

# apiVersion: apps/v1
# kind: Deployment
# metadata:
#   namespace: frontend
#   name: asktug-api-proxy
# spec:
#   replicas: 2
#   strategy:
#     type: RollingUpdate
#     rollingUpdate:
#       maxSurge: 1
#       maxUnavailable: 1
#   selector:
#     matchLabels:
#       app: asktug-api-proxy
#   template:
#     metadata:
#       labels:
#         app: asktug-api-proxy
#     spec:
#       containers:
#       - name: nodejs
#         image: registry.cn-hangzhou.aliyuncs.com/pingcap-ee/asktug-api-proxy:v1.2.0
#         command: ["npm", "start"]
#         env:
#         - name: ENABLE_CORS
#           value: "true"
#         - name: ACCOUNTS_URL
#           value: http://accounts.pingcap.cn
#         - name: ASKTUG_URL
#           value: http://10.9.138.134:30080
#         envFrom:
#         - secretRef:
#             name: asktug-api-proxy-secrets
#         livenessProbe:
#           httpGet:
#             path: /healthy/live
#             port: 3000
#           periodSeconds: 10
#           initialDelaySeconds: 3
#           successThreshold: 1
#           timeoutSeconds: 4
#         ports:
#         - containerPort: 3000
#         resources:
#           limits:
#             cpu: "4"
#             memory: 4Gi
#           requests:
#             cpu: "0.25"
#             memory: 256Mi
#       imagePullSecrets:
#       - name: aliyun-hangzhou-registry

# ---

# apiVersion: v1
# kind: Service
# metadata:
#   namespace: frontend
#   name: asktug-api-proxy
#   labels:
#     app: asktug-api-proxy
# spec:
#   ports:
#     - port: 80
#       targetPort: 3000
#       protocol: TCP
#       name: http
#   selector:
#     app: asktug-api-proxy

# ---

# # 供其他不在 K8s 部署的内网服务调用, 比如 AskTUG
# apiVersion: v1
# kind: Service
# metadata:
#   namespace: frontend
#   name: asktug-api-proxy-internal
#   labels:
#     app: asktug-api-proxy
#   annotations:
#     # ip: 10.9.77.191
#     service.beta.kubernetes.io/ucloud-load-balancer-id: "ulb-bj5e6zzy2g7"
#     # 用于声明ULB协议类型, 并非应用协议, tcp和udp均代表ULB4, https和http均代表ULB7
#     service.beta.kubernetes.io/ucloud-load-balancer-vserver-protocol: "tcp"
# spec:
#   type: LoadBalancer
#   externalTrafficPolicy: Local
#   ports:
#     - protocol: TCP
#       port: 80
#       targetPort: 3000
#   selector:
#     app: asktug-api-proxy