camtiler: Formatting, networkpolicy and labeling fixes

camtiler/application.yml

@@ -1,3 +1,4 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -154,16 +155,19 @@ apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: camtiler
 rules:
-- apiGroups: [""]
+  - apiGroups:
-  resources: ["services"]
+      - ""
-  verbs: ["list"]
+    resources:
+      - services
+    verbs:
+      - list
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: camtiler
 subjects:
-- kind: ServiceAccount
+  - kind: ServiceAccount
     name: camtiler
     apiGroup: ""
 roleRef:
@@ -264,7 +268,7 @@ spec:
     - to:
         - podSelector:
             matchLabels:
-            app.kubernetes.io/name: mongodb-svc
+              app: mongodb-svc
       ports:
         - port: 27017
     - to:
@@ -323,11 +327,15 @@ spec:
     - to:
         - podSelector:
             matchLabels:
-            app.kubernetes.io/name: mongodb-svc
+              app: mongodb-svc
     - to:
-      - ipBlock:
+        # Minio access via Traefik's public endpoint
-          # Minio is accessed thru public endpoint via Traefik
+        - namespaceSelector:
-          cidr: 193.40.103.0/24
+            matchLabels:
+              kubernetes.io/metadata.name: traefik
+          podSelector:
+            matchLabels:
+              app.kubernetes.io/name: traefik
   ingress:
     - from:
         - namespaceSelector:
@@ -529,7 +537,7 @@ spec:
                     memory: "64Mi"
                     cpu: "200m"
                   limits:
-                    memory: "128Mi"
+                    memory: "256Mi"
                     cpu: "1"
                 securityContext:
                   readOnlyRootFilesystem: true
@@ -596,6 +604,8 @@ spec:
   selector: {}
   podMetricsEndpoints:
     - port: http
+  podTargetLabels:
+    - app.kubernetes.io/name
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
@@ -625,14 +635,16 @@ spec:
           labels:
             severity: warning
           annotations:
-          summary: Motion detect snapshots are piling up and not getting uploaded to S3
+            summary: Motion detect snapshots are piling up and
+              not getting uploaded to S3
         - alert: CameraSlowProcessing
           expr: rate(camdetect_download_dropped_frames_total[2m]) > 1
           for: 5m
           labels:
             severity: warning
           annotations:
-          summary: Motion detection processing pipeline is not keeping up with incoming frames
+            summary: Motion detection processing pipeline is not keeping up
+              with incoming frames
 ---
 apiVersion: k-space.ee/v1alpha1
 kind: Camera