fix: harden GitOps deploy and rollback

k8s/argocd/application-prod.yaml

@@ -11,9 +11,17 @@ spec:
     path: k8s/overlays/prod
   destination:
     server: https://kubernetes.default.svc
-    namespace: vendaweb-api
+    namespace: vendaweb-prod
   syncPolicy:
     automated:
       selfHeal: true
+      prune: true
+    retry:
+      limit: 2
+      backoff:
+        duration: 5s
+        factor: 2
+        maxDuration: 3m
     syncOptions:
       - CreateNamespace=true
+      - PruneLast=true

k8s/base/deployment.yaml

@@ -5,7 +5,15 @@ metadata:
   labels:
     app: vendaweb-api
 spec:
-  replicas: 15
+  replicas: 3
+  revisionHistoryLimit: 5
+  minReadySeconds: 10
+  progressDeadlineSeconds: 600
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
   selector:
     matchLabels:
       app: vendaweb-api
@@ -16,6 +24,7 @@ spec:
     spec:
       imagePullSecrets:
         - name: gitea-auth
+      terminationGracePeriodSeconds: 30
       containers:
         - name: api
           image: git.simplifiquehc.com.br/simplifique/vendaweb-api:589fa29

k8s/overlays/prod/deployment-prod-patch.yaml

@@ -0,0 +1,6 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vendaweb-api
+spec:
+  replicas: 15

k8s/overlays/prod/kustomization.yaml

@@ -8,3 +8,5 @@ resources:
 
 patches:
   - path: service-patch.yaml
+  - path: deployment-prod-patch.yaml
+  - path: deployment-image-digest-patch.yaml