From e88fc715f9c1fa221df4cf82b1e22e5dbedd8a0e Mon Sep 17 00:00:00 2001
From: lionel <mail@onlionel.com>
Date: Fri, 17 Apr 2026 08:05:20 +0000
Subject: [PATCH] Update arcade.yaml

---
 arcade.yaml | 44 +++++++++++++++++++++++++++-----------------
 1 file changed, 27 insertions(+), 17 deletions(-)

diff --git a/arcade.yaml b/arcade.yaml
index d919cd6..9a0f0f8 100644
--- a/arcade.yaml
+++ b/arcade.yaml
@@ -5,42 +5,50 @@ metadata:
   namespace: devsecops
   labels:
     app: arcade
+  annotations:
+    app.onlionel.com/git-sha: "__GIT_SHA__"
 spec:
-  replicas: 2
-  revisionHistoryLimit: 5
-  selector:
-    matchLabels:
-      app: arcade
+  replicas: 1
+  revisionHistoryLimit: 10
   strategy:
     type: RollingUpdate
     rollingUpdate:
       maxUnavailable: 0
       maxSurge: 1
+  selector:
+    matchLabels:
+      app: arcade
   template:
     metadata:
       labels:
         app: arcade
+      annotations:
+        app.onlionel.com/git-sha: "__GIT_SHA__"
     spec:
+      imagePullSecrets:
+        - name: gitea-registry
       containers:
         - name: arcade
-          image: git.onlionel.com/lionel/arcade:latest
-          imagePullPolicy: IfNotPresent
+          image: git.onlionel.com/lionel/arcade:__IMAGE_TAG__
+          imagePullPolicy: Always
           ports:
             - containerPort: 5000
           readinessProbe:
             httpGet:
-              path: /
+              path: /health
               port: 5000
             initialDelaySeconds: 5
-            periodSeconds: 10
+            periodSeconds: 5
+            timeoutSeconds: 2
+            failureThreshold: 6
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: 5000
             initialDelaySeconds: 15
-            periodSeconds: 20
-      imagePullSecrets:
-        - name: gitea-registry
+            periodSeconds: 10
+            timeoutSeconds: 2
+            failureThreshold: 3
 ---
 apiVersion: v1
 kind: Service
@@ -51,8 +59,7 @@ spec:
   selector:
     app: arcade
   ports:
-    - name: http
-      port: 80
+    - port: 80
       targetPort: 5000
 ---
 apiVersion: networking.k8s.io/v1
@@ -62,10 +69,13 @@ metadata:
   namespace: devsecops
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
     traefik.ingress.kubernetes.io/router.tls.certresolver: le
 spec:
   ingressClassName: traefik
+  tls:
+    - hosts:
+        - arcade.onlionel.com
+      secretName: arcade-tls
   rules:
     - host: arcade.onlionel.com
       http:
@@ -76,4 +86,4 @@ spec:
               service:
                 name: arcade
                 port:
-                  number: 80
+                  number: 80
\ No newline at end of file