Add simple portal

.github/workflows/build.yaml

@@ -0,0 +1,60 @@
+on:
+  push:
+    branches:
+      - main
+
+name: build
+
+env:
+  IMAGE_NAME: 'mijnbureau-portal'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+      actions: read
+      attestations: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images:  ghcr.io/minbzk/${{ env.IMAGE_NAME }}
+        env:
+          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
+
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@v6
+        with:
+          context: portal/
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          annotations: ${{ steps.meta.outputs.annotations }}
+          platforms: linux/amd64
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ghcr.io/minbzk/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

.gitignore

@@ -0,0 +1,2 @@
+node_modules/
+portal/src/vendor/

base/portal/deployment.yaml

@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: portal
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: portal
+      name: deployment
+    spec:
+      containers:
+        - image: ghcr.io/minbzk/mijnbureau-portal:main
+          imagePullPolicy: Always
+          name: portal
+          ports:
+            - containerPort: 80
+              protocol: TCP

base/portal/ingress.yaml

@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  name: ingress
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: portal.la-suite.apps.digilab.network
+      http:
+        paths:
+          - backend:
+              service:
+                name: service
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - portal.la-suite.apps.digilab.network
+      secretName: tls

base/portal/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - deployment.yaml
+  - ingress.yaml
+  - service.yaml
+
+namePrefix: portal-
+
+labels:
+  - pairs:
+      app.kubernetes.io/name: portal
+
+buildMetadata: [originAnnotations]
+#todo: use configmap generator for configmap.yaml

base/portal/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: service
+spec:
+  ports:
+    - name: portal
+      port: 80
+      protocol: TCP
+      targetPort: 80
+  selector:
+    app.kubernetes.io/component: portal
+  type: ClusterIP

overlays/digilab/kustomization.yaml

@@ -57,6 +57,7 @@ resources:
   - ../../base/vault/
   - ../../base/grafana/
   - ../../base/oauth2-proxy/
+  - ../../base/portal/
 
 secretGenerator:
   - name: sec-keycloak

portal/Dockerfile

@@ -0,0 +1,17 @@
+FROM node:20 as build
+
+WORKDIR /app
+
+COPY package.json package-lock.json webpack.config.js ./
+COPY src/ ./src/
+
+RUN npm install
+RUN npm run build
+
+FROM nginx:1.27.3
+
+COPY --from=build /app/src /usr/share/nginx/html
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

portal/compose.yaml

@@ -0,0 +1,7 @@
+services:
+  portal:
+    build:
+      context: .
+    image: "docker.io/portal:latest"
+    ports:
+      - "8080:80"