k8s

Wardrobe Kubernetes Deployment

This directory contains Kubernetes manifests for deploying Wardrobe to a Kubernetes cluster.

Prerequisites

1. Kubernetes Cluster - k3s, k8s, or similar
2. Ingress Controller - Traefik (included in k3s) or nginx-ingress
3. cert-manager - For automatic TLS certificates
4. Container Registry - Or direct image import to nodes

Architecture

                    ┌─────────────────┐
                    │     Ingress     │
                    │  (TLS/HTTPS)    │
                    └────────┬────────┘
                             │
        ┌────────────────────┼────────────────────┐
        │                    │                    │
        ▼                    ▼                    │
   ┌─────────┐          ┌─────────┐               │
   │Frontend │          │ Backend │               │
   │  :3000  │          │  :8000  │               │
   └─────────┘          └────┬────┘               │
                             │                    │
                   ┌─────────┼─────────┐          │
                   │         │         │          │
                   ▼         ▼         ▼          │
              ┌────────┐ ┌────────┐ ┌────────┐   │
              │Postgres│ │ Redis  │ │ Worker │◄──┘
              │ :5432  │ │ :6379  │ │  (arq) │
              └────────┘ └────────┘ └────────┘

Quick Start

1. Create Namespace

kubectl apply -f namespace.yaml

2. Configure Secrets

Copy the template and fill in your values:

cp secrets.yaml.template secrets.yaml
# Edit secrets.yaml with your values

Generate secure secrets:

# PostgreSQL password
openssl rand -hex 16

# NextAuth/Backend secrets
openssl rand -hex 32

Apply secrets:

kubectl apply -f secrets.yaml

3. Configure Settings

Edit configmap.yaml with your domain and AI settings:

data:
  APP_URL: "https://wardrobe.example.com"
  NEXTAUTH_URL: "https://wardrobe.example.com"
  AI_BASE_URL: "https://api.openai.com/v1"  # Or your Ollama/LocalAI URL

Apply config:

kubectl apply -f configmap.yaml

4. Deploy Infrastructure

kubectl apply -f postgres.yaml
kubectl apply -f redis.yaml

# Wait for pods to be ready
kubectl -n wardrobe get pods -w

5. Deploy Application

kubectl apply -f backend.yaml
kubectl apply -f worker.yaml
kubectl apply -f frontend.yaml

6. Configure Ingress

Edit ingress.yaml with your domain:

spec:
  tls:
    - hosts:
        - wardrobe.example.com
  rules:
    - host: wardrobe.example.com

Apply:

kubectl apply -f ingress.yaml

7. Run Migrations

kubectl -n wardrobe exec deployment/backend -- alembic upgrade head

8. Apply Network Policies (Optional)

kubectl apply -f network-policy.yaml

Files

File	Description
namespace.yaml	Namespace definition
configmap.yaml	Non-sensitive configuration
secrets.yaml.template	Template for secrets
secrets.yaml	Your secrets (DO NOT commit!)
postgres.yaml	PostgreSQL database + PVC
redis.yaml	Redis for job queue + PVC
backend.yaml	FastAPI backend + PVC
worker.yaml	arq background worker
frontend.yaml	Next.js frontend
ingress.yaml	Ingress configuration
network-policy.yaml	Network isolation rules
kustomization.yaml	Kustomize configuration

Configuration

AI Service

Configure your AI endpoint in configmap.yaml:

# OpenAI
AI_BASE_URL: "https://api.openai.com/v1"
# Add AI_API_KEY in secrets.yaml

# Ollama (local)
AI_BASE_URL: "http://ollama:11434/v1"

# LocalAI
AI_BASE_URL: "http://localai:8080/v1"

Authentication

Wardrobe supports multiple auth providers via NextAuth:

1. Development Mode (default): Simple email/name login
2. OIDC Provider: Authentik, Keycloak, Auth0, etc.

Configure OIDC in configmap.yaml and secrets.yaml:

# configmap.yaml
OIDC_ISSUER_URL: "https://auth.example.com"

# secrets.yaml
oidc-client-id: "your-client-id"
oidc-client-secret: "your-client-secret"

Storage

The uploads PVC defaults to 10Gi. Adjust in backend.yaml:

spec:
  resources:
    requests:
      storage: 50Gi  # Increase as needed

Troubleshooting

Check pod status

kubectl -n wardrobe get pods
kubectl -n wardrobe describe pod <pod-name>

View logs

kubectl -n wardrobe logs deployment/backend
kubectl -n wardrobe logs deployment/frontend
kubectl -n wardrobe logs deployment/worker

Database connection issues

# Check if DATABASE_URL is correct
kubectl -n wardrobe exec deployment/backend -- env | grep DATABASE

# Test postgres connection
kubectl -n wardrobe exec deployment/postgres -- psql -U wardrobe -c '\l'

Certificate not issuing

kubectl -n wardrobe get certificates
kubectl -n wardrobe describe certificate <cert-name>
kubectl get challenges -A

Useful Commands

# Restart deployments
kubectl -n wardrobe rollout restart deployment/backend
kubectl -n wardrobe rollout restart deployment/frontend

# Scale deployments
kubectl -n wardrobe scale deployment/backend --replicas=2

# Exec into pod
kubectl -n wardrobe exec -it deployment/backend -- bash

# Port forward for local access
kubectl -n wardrobe port-forward svc/backend 8000:8000
kubectl -n wardrobe port-forward svc/frontend 3000:3000