deployment,.yaml

# ==============================================================================
# Ruway Gateway - Kubernetes Deployment Manifests
# ==============================================================================
# This file contains all necessary K8s resources to deploy Ruway Gateway:
# 1. ConfigMap - Configuration file
# 2. Deployment - Gateway pods
# 3. Headless Service - For service discovery
# 4. LoadBalancer Service - External access
# 5. HorizontalPodAutoscaler - Auto-scaling (optional)
# ==============================================================================

---
# ==============================================================================
# 1. ConfigMap - Ruway Configuration
# ==============================================================================
apiVersion: v1
kind: ConfigMap
metadata:
  name: ruway-config
  namespace: default
  labels:
    app: ruway
    component: config
data:
  config.yaml: |
    # Ruway Gateway Configuration
    server:
      host: "0.0.0.0"
      port: 3000
      shutdown_timeout: 30

    http:
      version: "http2"
      
      pool:
        max_idle_per_host: 10
        idle_timeout: 90
        connection_timeout: 10
      
      request:
        timeout: 30
        max_retries: 3
        retry_delay: 1

    backends:
      # Use K8s headless service discovery
      discovery_type: "k8s-headless"
      
      k8s_headless:
        namespace: "default"
        service_name: "backend-headless"
        port: 8080
      
      health_check:
        enabled: true
        interval: 10
        timeout: 5
        unhealthy_threshold: 3
        healthy_threshold: 2
        path: "/health"

    load_balancer:
      algorithm: "round-robin"

    middleware:
      rate_limit:
        enabled: true
        max_requests: 10000
        window_secs: 60
        burst_size: 100
      
      auth:
        enabled: false
      
      cors:
        enabled: true
        allow_origins:
          - "*"
        allow_methods:
          - "GET"
          - "POST"
          - "PUT"
          - "DELETE"
          - "PATCH"
          - "OPTIONS"
        allow_headers:
          - "Content-Type"
          - "Authorization"
          - "X-Request-ID"

    logging:
      level: "info"
      format: "json"
      access_log: true
      error_log: true

---
# ==============================================================================
# 2. Deployment - Ruway Gateway Pods
# ==============================================================================
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ruway-gateway
  namespace: default
  labels:
    app: ruway
    component: gateway
    version: v1
spec:
  replicas: 3
  revisionHistoryLimit: 3
  selector:
    matchLabels:
      app: ruway
      component: gateway
  template:
    metadata:
      labels:
        app: ruway
        component: gateway
        version: v1
    spec:
      serviceAccountName: ruway-sa
      # securityContext:
      #   runAsNonRoot: true
      #   runAsUser: 1001
      #   fsGroup: 1001
      
      containers:
      - name: ruway
        image: ruway:latest
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
          containerPort: 3000
          protocol: TCP
        env:
        # Log configuration
        - name: RUST_LOG
          value: "info,ruway=debug"
        - name: LOG_FORMAT
          value: "json"
        
        # Optional: Override config via env vars
        # - name: GATEWAY_SERVER_PORT
        #   value: "3000"
        
        volumeMounts:
        - name: config
          mountPath: /app/config.yaml
          subPath: config.yaml
          readOnly: true
        
        # Liveness probe - checks if container is alive
        livenessProbe:
          httpGet:
            path: /health
            port: 3000
            scheme: HTTP
          initialDelaySeconds: 15
          periodSeconds: 30
          timeoutSeconds: 5
          successThreshold: 1
          failureThreshold: 3
        
        # Readiness probe - checks if container is ready to serve traffic
        readinessProbe:
          httpGet:
            path: /ready
            port: 3000
            scheme: HTTP
          initialDelaySeconds: 5
          periodSeconds: 10
          timeoutSeconds: 3
          successThreshold: 1
          failureThreshold: 3
        
        # Startup probe - gives app time to start (useful for slow starts)
        startupProbe:
          httpGet:
            path: /health
            port: 3000
            scheme: HTTP
          initialDelaySeconds: 0
          periodSeconds: 5
          timeoutSeconds: 3
          successThreshold: 1
          failureThreshold: 12  # 12 * 5s = 60s max startup time
        
        # Resource requests and limits
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
          limits:
            cpu: 1000m
            memory: 512Mi
        
        # Security context for container
        # securityContext:
        #   allowPrivilegeEscalation: false
        #   readOnlyRootFilesystem: true
        #   runAsNonRoot: true
        #   runAsUser: 1001
        #   capabilities:
        #     drop:
        #     - ALL
      
      volumes:
      - name: config
        configMap:
          name: ruway-config
          items:
          - key: config.yaml
            path: config.yaml
      
      # Affinity rules (optional - for better distribution)
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: app
                  operator: In
                  values:
                  - ruway
              topologyKey: kubernetes.io/hostname
      
      # Tolerations (optional)
      # tolerations:
      # - key: "node-role.kubernetes.io/gateway"
      #   operator: "Equal"
      #   value: "true"
      #   effect: "NoSchedule"

---
# ==============================================================================
# 3. Service Account - For K8s API Access
# ==============================================================================
apiVersion: v1
kind: ServiceAccount
metadata:
  name: ruway-sa
  namespace: default
  labels:
    app: ruway

---
# ==============================================================================
# 4. Headless Service - For Service Discovery
# ==============================================================================
apiVersion: v1
kind: Service
metadata:
  name: ruway-headless
  namespace: default
  labels:
    app: ruway
    component: gateway
    service-type: headless
spec:
  type: ClusterIP
  clusterIP: None  # This makes it headless!
  selector:
    app: ruway
    component: gateway
  ports:
  - name: http
    port: 3000
    targetPort: 3000
    protocol: TCP
  sessionAffinity: None
  publishNotReadyAddresses: false  # Only return ready pods

---
# ==============================================================================
# 5. LoadBalancer Service - External Access
# ==============================================================================
apiVersion: v1
kind: Service
metadata:
  name: ruway-gateway
  namespace: default
  labels:
    app: ruway
    component: gateway
    service-type: loadbalancer
  annotations:
    # AWS ELB annotations (if using AWS)
    service.beta.kubernetes.io/aws-load-balancer-type: "nlb"
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "tcp"
    # service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:region:account:certificate/xxx"
    # service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
    
    # GCP annotations (if using GCP)
    # cloud.google.com/load-balancer-type: "Internal"
    
    # Azure annotations (if using Azure)
    # service.beta.kubernetes.io/azure-load-balancer-internal: "false"
spec:
  type: LoadBalancer
  selector:
    app: ruway
    component: gateway
  ports:
  - name: http
    port: 80
    targetPort: 3000
    protocol: TCP
  # - name: https
  #   port: 443
  #   targetPort: 3000
  #   protocol: TCP
  sessionAffinity: ClientIP
  sessionAffinityConfig:
    clientIP:
      timeoutSeconds: 10800  # 3 hours
  externalTrafficPolicy: Local  # Preserve source IP

---
# ==============================================================================
# 6. HorizontalPodAutoscaler - Auto-scaling (Optional)
# ==============================================================================
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: ruway-hpa
  namespace: default
  labels:
    app: ruway
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: ruway-gateway
  minReplicas: 3
  maxReplicas: 20
  metrics:
  # CPU-based scaling
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 70
  # Memory-based scaling
  - type: Resource
    resource:
      name: memory
      target:
        type: Utilization
        averageUtilization: 80
  behavior:
    scaleDown:
      stabilizationWindowSeconds: 300  # Wait 5 min before scaling down
      policies:
      - type: Percent
        value: 50  # Scale down max 50% at a time
        periodSeconds: 60
      - type: Pods
        value: 2   # Scale down max 2 pods at a time
        periodSeconds: 60
      selectPolicy: Min
    scaleUp:
      stabilizationWindowSeconds: 0  # Scale up immediately
      policies:
      - type: Percent
        value: 100  # Scale up max 100% at a time
        periodSeconds: 30
      - type: Pods
        value: 4    # Scale up max 4 pods at a time
        periodSeconds: 30
      selectPolicy: Max

---
# ==============================================================================
# 7. PodDisruptionBudget - High Availability (Optional)
# ==============================================================================
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
  name: ruway-pdb
  namespace: default
  labels:
    app: ruway
spec:
  minAvailable: 2  # Always keep at least 2 pods running
  selector:
    matchLabels:
      app: ruway
      component: gateway

---