Feat: Add k8s manifests

Author: amirsadraabdollahi

.dockerignore

@@ -0,0 +1,8 @@
+node_modules/
+.git/
+gh-pages/
+.github/
+dev/server/Cress-gh/
+.idea/
+*.md
+yarn-error.log

.github/workflows/build-deploy.yml

@@ -0,0 +1,63 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ghcr.io/ddmal/cress
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=latest
+            type=sha,format=short
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Set up kubectl
+        uses: azure/setup-kubectl@v3
+
+      - name: Configure kubeconfig
+        run: |
+          mkdir -p ~/.kube
+          echo "${{ secrets.KUBE_CONFIG }}" > ~/.kube/config
+          chmod 600 ~/.kube/config
+
+      - name: Apply Kubernetes manifests
+        run: kubectl apply -f k8s/
+
+      - name: Roll out updated image
+        run: |
+          SHA_TAG="${{ env.IMAGE_NAME }}:sha-$(echo ${{ github.sha }} | cut -c1-7)"
+          kubectl set image deployment/cress cress="${SHA_TAG}" -n cress
+          kubectl rollout status deployment/cress -n cress

.gitignore

@@ -2,9 +2,10 @@
 .DS_Store
 .awcache
 .vscode
+.idea
 
 /dev/server/Cress-gh
 /dev/public
 /dist
 
-/gh-pages/
+/gh-pages/

Dockerfile

@@ -0,0 +1,13 @@
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+COPY package.json yarn.lock ./
+RUN yarn install --frozen-lockfile
+
+COPY . .
+RUN yarn build:k8s
+
+FROM nginx:alpine
+COPY --from=builder /app/dev/server /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+EXPOSE 80

k8s/deployment.yaml

@@ -0,0 +1,27 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cress
+  namespace: cress
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: cress
+  template:
+    metadata:
+      labels:
+        app: cress
+    spec:
+      containers:
+        - name: cress
+          image: ghcr.io/ddmal/cress:latest
+          ports:
+            - containerPort: 80
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi
+            limits:
+              cpu: 200m
+              memory: 128Mi

k8s/ingress.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cress
+  namespace: cress
+spec:
+  rules:
+    - host: cress.simssa.ca
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: cress
+                port:
+                  number: 80

k8s/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: cress
+  namespace: cress
+spec:
+  selector:
+    app: cress
+  ports:
+    - port: 80
+      targetPort: 80

nginx.conf

@@ -0,0 +1,27 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    gzip on;
+    gzip_types text/plain text/css application/javascript application/json image/svg+xml;
+    gzip_min_length 1024;
+
+    # Long-lived cache for immutable webpack bundles and assets
+    location /Cress-gh/ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        try_files $uri =404;
+    }
+
+    # HTML pages — no cache so updates are picked up immediately
+    location ~* \.html$ {
+        expires -1;
+        add_header Cache-Control "no-store";
+        try_files $uri =404;
+    }
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+}

package.json

@@ -6,7 +6,8 @@
   "scripts": {
     "start": "http-server dev/server/ -p 9000",
     "build": "rm -rf dev/server/Cress-gh && webpack --config webpack.config.js && cp -R assets src/workers dev/server/Cress-gh",
-    "bundle:pages": "rm -rf gh-pages/Cress/Cress-gh && webpack --config webpack.pages-config.js && cp -R assets src/workers gh-pages/Cress/Cress-gh"
+    "bundle:pages": "rm -rf gh-pages/Cress/Cress-gh && webpack --config webpack.pages-config.js && cp -R assets src/workers gh-pages/Cress/Cress-gh",
+    "build:k8s": "rm -rf dev/server/Cress-gh && webpack --config webpack.k8s-config.js && cp -R assets src/workers dev/server/Cress-gh"
   },
   "repository": "https://github.com/DDMAL/Cress.git",
   "author": {

webpack.k8s-config.js

@@ -0,0 +1,45 @@
+const path = require('path');
+const webpack = require('webpack');
+const NodePolyfillPlugin = require('node-polyfill-webpack-plugin');
+
+module.exports = {
+  mode: 'production',
+  entry: {
+    landing: './dev/scripts/landing.ts',
+    dashboard: './dev/scripts/dashboard.ts',
+    editor: './dev/scripts/editor.ts',
+  },
+  output: {
+    path: path.resolve(__dirname, 'dev', 'server', 'Cress-gh'),
+    publicPath: '/',
+    filename: '[name].js',
+  },
+  module: {
+    rules: [
+      {
+        test: /\.tsx?$/,
+        use: ['ts-loader'],
+        exclude: /node_modules/,
+      },
+      {
+        test: /Worker\.js$/,
+        use: [
+          {
+            loader: 'worker-loader',
+            options: { publicPath: '/Cress-gh/' },
+          },
+        ],
+      },
+    ],
+  },
+  resolve: {
+    extensions: ['.ts', '.js'],
+  },
+  plugins: [
+    new NodePolyfillPlugin(),
+    new webpack.DefinePlugin({
+      __LINK_LOCATION__: JSON.stringify('/'),
+      __ASSET_PREFIX__: JSON.stringify('/Cress-gh/'),
+    }),
+  ],
+};