local env done

ctrl/Tiltfile

@@ -43,6 +43,7 @@ docker_build(
 k8s_resource('minio')
 k8s_resource('lambda', resource_deps=['minio'])
 k8s_resource('docs')
+k8s_resource('gateway', resource_deps=['docs', 'minio'])
 
 k8s_resource(
     objects=['eth:namespace', 'eth-config:configmap'],

ctrl/k8s/base/Caddyfile

@@ -0,0 +1,12 @@
+{
+    auto_https off
+    admin off
+}
+
+eth.local.ar:80 {
+    reverse_proxy docs:80
+}
+
+minio.eth.local.ar:80 {
+    reverse_proxy minio:9001
+}

ctrl/k8s/base/gateway.yaml

@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gateway
+  namespace: eth
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gateway
+  template:
+    metadata:
+      labels:
+        app: gateway
+    spec:
+      containers:
+        - name: caddy
+          image: caddy:2-alpine
+          ports:
+            - containerPort: 80
+              name: http
+          volumeMounts:
+            - name: config
+              mountPath: /etc/caddy
+              readOnly: true
+          readinessProbe:
+            tcpSocket:
+              port: 80
+            initialDelaySeconds: 2
+            periodSeconds: 10
+          resources:
+            requests:
+              memory: 32Mi
+              cpu: 50m
+            limits:
+              memory: 128Mi
+      volumes:
+        - name: config
+          configMap:
+            name: gateway-config
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gateway
+  namespace: eth
+spec:
+  selector:
+    app: gateway
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80

ctrl/k8s/base/kustomization.yaml

@@ -9,3 +9,13 @@ resources:
   - minio.yaml
   - lambda.yaml
   - docs.yaml
+  - gateway.yaml
+
+# Generate the gateway Caddyfile ConfigMap from the standalone file.
+# Hash suffix is on by default — when Caddyfile changes, the ConfigMap gets
+# a new hashed name, kustomize rewrites the Deployment volume reference,
+# and the gateway pod restarts automatically with the new config.
+configMapGenerator:
+  - name: gateway-config
+    files:
+      - Caddyfile

ctrl/k8s/base/lambda.yaml

@@ -21,9 +21,18 @@ spec:
           envFrom:
             - configMapRef:
                 name: eth-config
+          volumeMounts:
+            - name: documents
+              mountPath: /mnt/documents
+              readOnly: true
           resources:
             requests:
               memory: 128Mi
               cpu: 100m
             limits:
               memory: 512Mi
+      volumes:
+        - name: documents
+          hostPath:
+            path: /mnt/documents
+            type: Directory

ctrl/k8s/kind-config.yaml

@@ -8,3 +8,7 @@ nodes:
         hostPort: 8050
         listenAddress: "0.0.0.0"
         protocol: TCP
+    extraMounts:
+      - hostPath: /home/mariano/Documents
+        containerPath: /mnt/documents
+        readOnly: true

ctrl/k8s/overlays/dev/kustomization.yaml

@@ -5,9 +5,11 @@ resources:
   - ../../base
 
 patches:
+  # In-cluster Caddy gateway owns the single NodePort. It routes by Host header
+  # to docs / minio / future services via service DNS inside the cluster.
   - target:
       kind: Service
-      name: docs
+      name: gateway
     patch: |
       - op: replace
         path: /spec/type

ctrl/seed.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+set -euo pipefail
+kubectl --context kind-eth -n eth exec -i deploy/lambda -- python seed.py /mnt/documents