A minimal application demonstrating pull-based continuous deployment to the
single-node server created by getcolors/k3s.
A push to main builds and smoke-tests the image, publishes it to GHCR under the
commit SHA, and updates k8s/deployment.yaml. Flux deploys that commit without
GitHub receiving a kubeconfig or SSH key.
Endpoints:
/— hello page/healthz— readiness and liveness probe
Flux also reconciles pinned cert-manager and ExternalDNS Helm releases.
ExternalDNS owns the proxied *.bigconfig.website Cloudflare record, while
cert-manager issues its wildcard certificate with an ACME DNS-01 challenge.
The Cloudflare token is injected into Kubernetes Secrets by the K3s package and
never committed here.
The Traefik Ingress serves the app at https://www.bigconfig.website/.