first commit

k8s/deployment.yaml

@@ -0,0 +1,56 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: groupfactory-client-bot
+  namespace: groupfactory
+  labels:
+    app.kubernetes.io/name: groupfactory-client-bot
+    app.kubernetes.io/component: telegram-bot
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: groupfactory-client-bot
+      app.kubernetes.io/component: telegram-bot
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: groupfactory-client-bot
+        app.kubernetes.io/component: telegram-bot
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+      - name: groupfactory-client-bot
+        image: registry.example.com/groupfactory-client-bot:latest
+        imagePullPolicy: IfNotPresent
+        workingDir: /app
+        command:
+        - python
+        args:
+        - -m
+        - src.main
+        envFrom:
+        - configMapRef:
+            name: groupfactory-client-bot-config
+        - secretRef:
+            name: groupfactory-client-bot-secret
+        resources:
+          requests:
+            cpu: 50m
+            memory: 96Mi
+          limits:
+            cpu: 250m
+            memory: 256Mi
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 1000
+          runAsGroup: 1000
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL

k8s/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: groupfactory