feat: add roster builder infra (roster.battledroids.ru)

K8s Deployment + Service + Ingress, DNS A record, Terraform variable
and output for the Roster Builder frontend.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: graylikeme

infra/dns.tf

@@ -10,3 +10,10 @@ resource "twc_dns_rr" "api" {
   type    = "A"
   value   = var.ingress_ip
 }
+
+resource "twc_dns_rr" "roster" {
+  zone_id = data.twc_dns_zone.main.id
+  name    = "roster"
+  type    = "A"
+  value   = var.ingress_ip
+}

infra/k8s/roster.yaml

@@ -0,0 +1,80 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: battletech-roster
+  namespace: battletech
+  labels:
+    app: battletech-roster
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: battletech-roster
+  template:
+    metadata:
+      labels:
+        app: battletech-roster
+    spec:
+      containers:
+        - name: roster
+          image: ghcr.io/graylikeme/battletech-roster:latest
+          ports:
+            - containerPort: 80
+          livenessProbe:
+            httpGet:
+              path: /
+              port: 80
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /
+              port: 80
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          resources:
+            requests:
+              cpu: 50m
+              memory: 32Mi
+            limits:
+              cpu: 200m
+              memory: 64Mi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: battletech-roster
+  namespace: battletech
+spec:
+  selector:
+    app: battletech-roster
+  ports:
+    - port: 80
+      targetPort: 80
+      protocol: TCP
+  type: ClusterIP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: battletech-roster
+  namespace: battletech
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - roster.battledroids.ru
+      secretName: roster-battledroids-ru-tls
+  rules:
+    - host: roster.battledroids.ru
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: battletech-roster
+                port:
+                  number: 80

infra/outputs.tf

@@ -40,6 +40,11 @@ output "api_dns_record" {
   value       = "${twc_dns_rr.api.name}.${var.domain} → ${twc_dns_rr.api.value}"
 }
 
+output "roster_dns_record" {
+  description = "DNS A record for roster subdomain"
+  value       = "${twc_dns_rr.roster.name}.${var.domain} → ${twc_dns_rr.roster.value}"
+}
+
 # --- Network ---
 
 output "vpc_id" {

infra/terraform.tfvars.example

@@ -24,3 +24,4 @@ ingress_ip = "91.186.196.173"  # K8s worker node external IP
 
 # Application
 api_image = "ghcr.io/graylikeme/battletech-api:latest"
+roster_image = "ghcr.io/graylikeme/battletech-roster:latest"

infra/variables.tf

@@ -92,3 +92,9 @@ variable "api_image" {
   type        = string
   default     = "ghcr.io/graylikeme/battletech-api:latest"
 }
+
+variable "roster_image" {
+  description = "Docker image for the Battledroids Roster Builder"
+  type        = string
+  default     = "ghcr.io/graylikeme/battletech-roster:latest"
+}