Deploy Next.js di Kubernetes dengan Ingress + SSL Let’s Encrypt

# ---------- Stage 1: Build Next.js ----------
FROM node:20-alpine AS builder

WORKDIR /app

# Install dependencies
COPY package.json pnpm-lock.yaml ./
RUN npm install -g pnpm && pnpm install

# Copy source code
COPY . .

# Build Next.js
RUN pnpm build

# ---------- Stage 2: Runtime ----------
FROM node:20-alpine

WORKDIR /app

# Copy only necessary runtime files
COPY --from=builder /app ./

EXPOSE 3000

CMD ["pnpm", "start"]

docker build -f Dockerfile.kube -t masdika/infradevcomunity:latest .
docker push masdika/infradevcomunity:latest

# ---------- Namespace (tempat khusus untuk resource app ini) ----------
apiVersion: v1
kind: Namespace
metadata:
  name: infradev

---
# ---------- Deployment (definisi pod Next.js, berisi container app) ----------
apiVersion: apps/v1
kind: Deployment
metadata:
  name: infradev-deployment
  namespace: infradev
spec:
  replicas: 2                       # jumlah pod (auto scaling manual)
  selector:
    matchLabels:
      app: infradev-app             # selector cocokkan ke label pod
  template:
    metadata:
      labels:
        app: infradev-app           # label pod
    spec:
      containers:
      - name: infradev-container
        image: masdika/infradevcomunity:latest  # image dari Docker Hub
        ports:
        - containerPort: 3000       # port yang dipakai app Next.js

---
# ---------- Service (akses internal cluster ke pod) ----------
apiVersion: v1
kind: Service
metadata:
  name: infradev-service
  namespace: infradev
spec:
  selector:
    app: infradev-app               # target pod berdasarkan label
  ports:
  - port: 80                        # port service (akses internal)
    targetPort: 3000                # port dalam container
  type: ClusterIP                   # hanya bisa diakses internal (untuk Ingress)

---
# ---------- Ingress (akses publik via domain + HTTPS) ----------
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: infradev-ingress
  namespace: infradev
  annotations:
    kubernetes.io/ingress.class: "nginx"          # gunakan Ingress NGINX
    cert-manager.io/cluster-issuer: "letsencrypt-prod" # issuer TLS cert-manager
spec:
  tls:
  - hosts:
    - infradev.masdika.biz.id        # domain publik
    secretName: infradev-tls         # nama secret TLS otomatis dibuat cert-manager
  rules:
  - host: infradev.masdika.biz.id    # host/domain yang diarahkan
    http:
      paths:
      - path: /                      # route path
        pathType: Prefix
        backend:
          service:
            name: infradev-service   # service tujuan
            port:
              number: 80             # port service tujuan

kubectl apply -f infradev-final.yaml

infradev.masdika.biz.id → 206.237.97.18

kubectl -n infradev get certificate
kubectl -n infradev describe certificate infradev-tls