env-deploy.yaml

apiVersion: apps/v1beta2
kind: Deployment
metadata:
  name: {{.NAME}}
  namespace: {{.NS}}
  labels:
    app: {{.NAME}}-app
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app: {{.NAME}}-app
  template:
    metadata:
      labels:
        app: {{.NAME}}-app
    spec:
      containers:
      - name: nginx
        imagePullPolicy: Always
        image: {{.TAG}}
        ports:
        - containerPort: {{.PORT}}
      imagePullSecrets:
      - name: regcred
---
apiVersion: v1
kind: Service
metadata:
  name: {{.NAME}}-service
  namespace: {{.NS}}
spec:
  selector:
    app: {{.NAME}}-app
  ports:
    - name: http
      protocol: 'TCP'
      port: 80
      targetPort: {{.PORT}}
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: {{.NAME}}-ingress
  namespace: {{.NS}}
  annotations:
    #nginx.ingress.kubernetes.io/rewrite-target: /$2
    #nginx.ingress.kubernetes.io/configuration-snippet: |
    #  more_set_headers "server: hide";
    #  more_set_headers "X-Content-Type-Options: nosniff";
    #  more_set_headers "X-Frame-Options: DENY";
    #  more_set_headers "X-Xss-Protection: 1";
    kubernetes.io/tls-acme: "true"
spec:
  tls:
  - hosts:
    - {{.HOST}}
    - www.{{.HOST}}
    secretName: {{.HOST}}
  rules:
  - host: {{.HOST}}
    http:
      paths:
      - path: "/"
        backend:
          serviceName: {{.NAME}}-service
          servicePort: http
  - host: www.{{.HOST}}
    http:
      paths:
      - path: "/"
        backend:
          serviceName: {{.NAME}}-service
          servicePort: http