refactor

deploy/dev/values-dev-cluster.yaml

@@ -21,12 +21,8 @@
 # reproducible rather than "whatever worked when it was deployed".
 
 image:
-  # The development cluster pulls from a private registry whose certificate is valid
-  # for a different name, so the host and the port have to stay in one piece: putting
-  # the port in `repository` renders an image reference without it, and the kubelet
-  # then resolves the registry over https on port 443.
-  registry: batty1039.startdedicated.net:5000
-  repository: go-bananas
+  registry: nexus.urpi.be
+  repository: docker-hosted/go-bananas
   # The development registry is tagged `latest` rather than pinned to a version, to
   # match every other release in this namespace. Consequently the pull policy must be
   # Always: with IfNotPresent a node keeps serving the image it already has, and a
@@ -39,7 +35,7 @@ config:
   # refuses both of these outside a development environment, so this pair cannot be
   # promoted to production by accident.
   environment: development
-  publicBaseUrl: https://bananas-dev.urpi.be
+  publicBaseUrl: https://bananas.dev-urpi.be
 
 identity:
   # dev, not oidc.
@@ -59,11 +55,11 @@ identity:
   #   helm upgrade ... --set identity.mode=oidc \
   #     --set identity.oidc.generateSecret=false \
   #     --set identity.oidc.existingSecret=go-bananas-auth \
-  #     --set identity.oidc.issuer=https://auth-dev.urpi.be \
+  #     --set identity.oidc.issuer=https://auth.dev-urpi.be \
   #     --set identity.oidc.clientId=go-bananas
   mode: dev
   oidc:
-    issuer: https://auth-dev.urpi.be
+    issuer: https://auth.dev-urpi.be
     clientId: go-bananas
     existingSecret: go-bananas-auth
     generateSecret: false
@@ -74,17 +70,17 @@ ingress:
     cert-manager.io/cluster-issuer: letsencrypt-staging
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
   hosts:
-    - host: bananas-dev.urpi.be
+    - host: bananas.dev-urpi.be
       paths:
         - path: /
           pathType: Prefix
   tls:
     - secretName: go-bananas-tls
       hosts:
-        - bananas-dev.urpi.be
+        - bananas.dev-urpi.be
 
 deployment:
   # One replica. The volume is ReadWriteOnce, so a second replica cannot mount it and
   # would sit in ImagePullBackOff-equivalent limbo forever. Scaling needs either this
   # changed to 1 or a ReadWriteMany filesystem.
-  replicaCount: 1
+  replicaCount: 1