# Erik Tenant — erckak.dev
# Placeholder landing page served by nginx
# ArgoCD managed - BlueJay Lab
---
apiVersion: v1
kind: Namespace
metadata:
name: tenant-erik
labels:
app.kubernetes.io/part-of: bluejay-infra
flowercore.io/tenant: erik
---
# NOTE: The TLS secret cf-origin-erckak-dev must be created in this namespace
# separately from a Cloudflare Origin Certificate covering *.erckak.dev.
# Create with: kubectl create secret tls cf-origin-erckak-dev \
# --cert=erckak-dev-origin.pem --key=erckak-dev-origin-key.pem \
# -n tenant-erik
---
# Landing page HTML
apiVersion: v1
kind: ConfigMap
metadata:
name: erik-web-html
namespace: tenant-erik
data:
index.html: |
Erckak — erckak.dev
Erik's Space
🚀
Erckak
erckak.dev
---
# nginx configuration
apiVersion: v1
kind: ConfigMap
metadata:
name: erik-web-nginx-conf
namespace: tenant-erik
data:
default.conf: |
server {
listen 80;
server_name _;
root /usr/share/nginx/html;
index index.html;
location / {
try_files $uri $uri/ =404;
}
location /healthz {
access_log off;
return 200 "ok";
add_header Content-Type text/plain;
}
}
---
# Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: erik-web
namespace: tenant-erik
labels:
app: erik-web
spec:
replicas: 1
selector:
matchLabels:
app: erik-web
template:
metadata:
labels:
app: erik-web
spec:
containers:
- name: nginx
image: nginx:alpine
ports:
- containerPort: 80
name: http
volumeMounts:
- name: nginx-conf
mountPath: /etc/nginx/conf.d/default.conf
subPath: default.conf
- name: html
mountPath: /usr/share/nginx/html
resources:
requests:
memory: 32Mi
cpu: 10m
limits:
memory: 64Mi
cpu: 50m
livenessProbe:
httpGet:
path: /healthz
port: 80
initialDelaySeconds: 5
periodSeconds: 10
readinessProbe:
httpGet:
path: /healthz
port: 80
initialDelaySeconds: 3
periodSeconds: 5
volumes:
- name: nginx-conf
configMap:
name: erik-web-nginx-conf
- name: html
configMap:
name: erik-web-html
---
# Service
apiVersion: v1
kind: Service
metadata:
name: erik-web
namespace: tenant-erik
spec:
selector:
app: erik-web
ports:
- port: 80
targetPort: 80
name: http
---
# Traefik IngressRoute — public via Cloudflare
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: erik-web
namespace: tenant-erik
spec:
entryPoints:
- websecure
routes:
- match: Host(`erckak.dev`) || Host(`www.erckak.dev`)
kind: Rule
services:
- name: erik-web
port: 80
tls:
secretName: cf-origin-erckak-dev