Move all bots to designated namespaces

4 files changed, 62 insertions, 0 deletions

diff --git a/kubernetes/namespaces/bots/sir-robin/README.md b/kubernetes/namespaces/bots/sir-robin/README.md
new file mode 100644
index 0000000..0521359
--- /dev/null
+++ b/kubernetes/namespaces/bots/sir-robin/README.md
@@ -0,0 +1,14 @@
+## Sir-Robin
+Deployment file for @Sir-Robin, the not-quite-so-bot as Sir Lancebot, is our humble events bot.
+He is tasked with dealing with all the things that the event team can throw at it!
+
+## Secrets
+This deployment expects a number of secrets/environment variables to exist in a secret called `sir-robin-env`. The bot also relies on redis credentials being available in a secret named `redis-credentials`
+
+| Environment               | Description                                    |
+|---------------------------|------------------------------------------------|
+| AOC_RAW_LEADERBOARDS      | A list of all AOC leaderboards to use          |
+| AOC_STAFF_LEADERBOARD_ID  | The staff AOC leaderboard.                     |
+| BOT_SENTRY_DSN            | The sentry DSN to send warning & error logs to |
+| BOT_TOKEN                 | The bot token to run the bot on.               |
+| CODE_JAM_API_KEY          | The API key to the code jam management system  |
diff --git a/kubernetes/namespaces/bots/sir-robin/configmap.yaml b/kubernetes/namespaces/bots/sir-robin/configmap.yaml
new file mode 100644
index 0000000..33b58a3
--- /dev/null
+++ b/kubernetes/namespaces/bots/sir-robin/configmap.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sir-robin-config-env
+  namespace: bots
+data:
+  AOC_YEAR: '2023'
+  BOT_DEBUG: 'False'
+  CATEGORY_SUMMER_CODE_JAM: '1141401271635554334'
diff --git a/kubernetes/namespaces/bots/sir-robin/deployment.yaml b/kubernetes/namespaces/bots/sir-robin/deployment.yaml
new file mode 100644
index 0000000..1ffda36
--- /dev/null
+++ b/kubernetes/namespaces/bots/sir-robin/deployment.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sir-robin
+  namespace: bots
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: sir-robin
+  template:
+    metadata:
+      labels:
+        app: sir-robin
+    spec:
+      securityContext:
+        fsGroup: 2000
+        runAsUser: 1000
+        runAsNonRoot: true
+      containers:
+      - name: sir-robin
+        image: ghcr.io/python-discord/sir-robin:latest
+        imagePullPolicy: Always
+        resources:
+          requests:
+            cpu: 500m
+            memory: 300Mi
+          limits:
+            cpu: 750m
+            memory: 600Mi
+        envFrom:
+        - secretRef:
+            name: sir-robin-env
+        - secretRef:
+            name: redis-credentials
+        - configMapRef:
+            name: sir-robin-config-env
+        securityContext:
+          readOnlyRootFilesystem: true
diff --git a/kubernetes/namespaces/bots/sir-robin/secrets.yaml b/kubernetes/namespaces/bots/sir-robin/secrets.yaml
new file mode 100644
index 0000000..ade44c0
--- /dev/null
+++ b/kubernetes/namespaces/bots/sir-robin/secrets.yaml