# FIT Tenant — flowerinsider.xyz
# Placeholder landing page served by nginx
# ArgoCD managed - BlueJay Lab
---
apiVersion: v1
kind: Namespace
metadata:
name: tenant-fit
labels:
app.kubernetes.io/part-of: bluejay-infra
flowercore.io/tenant: fit
---
# NOTE: The TLS secret cf-origin-flowerinsider-xyz must be created in this namespace
# separately from a Cloudflare Origin Certificate covering *.flowerinsider.xyz.
# Create with: kubectl create secret tls cf-origin-flowerinsider-xyz \
# --cert=flowerinsider-xyz-origin.pem --key=flowerinsider-xyz-origin-key.pem \
# -n tenant-fit
---
# Landing page HTML
apiVersion: v1
kind: ConfigMap
metadata:
name: fit-web-html
namespace: tenant-fit
data:
index.html: |
Flower Insider — flowerinsider.xyz
Flower Insider Team
🌸
Flower Insider
flowerinsider.xyz
---
# nginx configuration
apiVersion: v1
kind: ConfigMap
metadata:
name: fit-web-nginx-conf
namespace: tenant-fit
data:
default.conf: |
server {
listen 80;
server_name _;
root /usr/share/nginx/html;
index index.html;
location / {
try_files $uri $uri/ =404;
}
location /healthz {
access_log off;
return 200 "ok";
add_header Content-Type text/plain;
}
}
---
# Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: fit-web
namespace: tenant-fit
labels:
app: fit-web
spec:
replicas: 1
selector:
matchLabels:
app: fit-web
template:
metadata:
labels:
app: fit-web
spec:
containers:
- name: nginx
image: nginx:alpine
ports:
- containerPort: 80
name: http
volumeMounts:
- name: nginx-conf
mountPath: /etc/nginx/conf.d/default.conf
subPath: default.conf
- name: html
mountPath: /usr/share/nginx/html
resources:
requests:
memory: 32Mi
cpu: 10m
limits:
memory: 64Mi
cpu: 50m
livenessProbe:
httpGet:
path: /healthz
port: 80
initialDelaySeconds: 5
periodSeconds: 10
readinessProbe:
httpGet:
path: /healthz
port: 80
initialDelaySeconds: 3
periodSeconds: 5
volumes:
- name: nginx-conf
configMap:
name: fit-web-nginx-conf
- name: html
configMap:
name: fit-web-html
---
# Service
apiVersion: v1
kind: Service
metadata:
name: fit-web
namespace: tenant-fit
spec:
selector:
app: fit-web
ports:
- port: 80
targetPort: 80
name: http
---
# Traefik IngressRoute — public via Cloudflare
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: fit-web
namespace: tenant-fit
spec:
entryPoints:
- websecure
routes:
- match: Host(`flowerinsider.xyz`) || Host(`www.flowerinsider.xyz`)
kind: Rule
services:
- name: fit-web
port: 80
tls:
secretName: cf-origin-flowerinsider-xyz