production.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: positron-web
  namespace: default
  labels:
    app: positron
    component: web
    layer: application
spec:
  selector:
    matchLabels:
      app: positron
      component: web
      layer: application
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: positron
        component: web
        layer: application
      name: positron-web
    spec:
      containers:
        - name: positron-web
          args: ["yarn", "production"]
          envFrom:
            - configMapRef:
                name: positron-environment
          env:
            - name: PORT
              value: "8080"
            - name: "DATADOG_AGENT_HOSTNAME"
              valueFrom:
                fieldRef:
                  fieldPath: spec.nodeName
            - name: NODE_OPTIONS
              value: "--max_old_space_size=256"
          image: 585031190124.dkr.ecr.us-east-1.amazonaws.com/positron:production
          imagePullPolicy: Always
          ports:
            - name: positron-http
              containerPort: 8080
          resources:
            requests:
              cpu: 200m
              memory: 256Mi
            limits:
              memory: 512Mi
          readinessProbe:
            httpGet:
              port: positron-http
              path: /api/health
              httpHeaders:
                - name: X-FORWARDED-PROTO
                  value: https
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 5
          lifecycle:
            preStop:
              exec:
                command: ["sh", "-c", "sleep 5"]
      dnsPolicy: ClusterFirst
      dnsConfig:
        options:
          - name: ndots
            value: "1"
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: tier
                    operator: In
                    values:
                      - foreground

---
apiVersion: autoscaling/v1
kind: HorizontalPodAutoscaler
metadata:
  name: positron-web
  namespace: default
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: positron-web
  minReplicas: 2
  maxReplicas: 6
  targetCPUUtilizationPercentage: 70

---
apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: positron-scheduled-posts-cron
spec:
  schedule: "*/10 * * * *"
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      backoffLimit: 0
      template:
        metadata:
          annotations:
            "cluster-autoscaler.kubernetes.io/safe-to-evict": "false"
        spec:
          containers:
            - name: positron-scheduled-posts-cron
              image: 585031190124.dkr.ecr.us-east-1.amazonaws.com/positron:production
              command: ["yarn", "task", "scripts/scheduled_posts.js"]
              imagePullPolicy: Always
              envFrom:
                - configMapRef:
                    name: positron-environment
          restartPolicy: Never
          affinity:
            nodeAffinity:
              requiredDuringSchedulingIgnoredDuringExecution:
                nodeSelectorTerms:
                  - matchExpressions:
                      - key: tier
                        operator: In
                        values:
                          - background

---
apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: positron-unqueue-cron
spec:
  schedule: "0 15 * * *"
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      backoffLimit: 3
      template:
        metadata:
          annotations:
            "cluster-autoscaler.kubernetes.io/safe-to-evict": "false"
        spec:
          containers:
            - name: positron-unqueue-cron
              image: 585031190124.dkr.ecr.us-east-1.amazonaws.com/positron:production
              command: ["yarn", "task", "scripts/unqueue.js"]
              imagePullPolicy: Always
              envFrom:
                - configMapRef:
                    name: positron-environment
          restartPolicy: Never
          affinity:
            nodeAffinity:
              requiredDuringSchedulingIgnoredDuringExecution:
                nodeSelectorTerms:
                  - matchExpressions:
                      - key: tier
                        operator: In
                        values:
                          - background

---
apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: positron-data-export
spec:
  schedule: "0 3 * * *"
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      backoffLimit: 3
      template:
        metadata:
          annotations:
            "cluster-autoscaler.kubernetes.io/safe-to-evict": "false"
        spec:
          containers:
            - name: positron-data-export-cron
              image: artsy/mongo-data-sync
              imagePullPolicy: Always
              env:
                - name: APP_NAME
                  value: "positron"
              envFrom:
                - configMapRef:
                    name: positron-environment
              args: ["sh", "./export-db.sh", "production"]
          restartPolicy: Never
          affinity:
            nodeAffinity:
              requiredDuringSchedulingIgnoredDuringExecution:
                nodeSelectorTerms:
                  - matchExpressions:
                      - key: tier
                        operator: In
                        values:
                          - background

---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: positron
    component: web
    layer: application
  name: positron-web-internal
  namespace: default
spec:
  ports:
    - port: 8080
      protocol: TCP
      name: http
      targetPort: positron-http
  selector:
    app: positron
    layer: application
    component: web
  type: ClusterIP

---
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: positron
  annotations:
    nginx.ingress.kubernetes.io/whitelist-source-range: "{{ cloudflareIpSourceRanges|join(',') }}"
spec:
  ingressClassName: nginx
  rules:
    - host: writer.artsy.net
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              serviceName: positron-web-internal
              servicePort: http