Deploy releases/k8s-manifests 4691ec4

[github-actions]

kubectl diff reports that applying 4691ec4 will change:

diff -uN /tmp/LIVE-2351852345/apps.v1.Deployment.code-for-philly.code-for-philly /tmp/MERGED-1612099209/apps.v1.Deployment.code-for-philly.code-for-philly
--- /tmp/LIVE-2351852345/apps.v1.Deployment.code-for-philly.code-for-philly	2024-07-20 20:20:10.853183345 +0000
+++ /tmp/MERGED-1612099209/apps.v1.Deployment.code-for-philly.code-for-philly	2024-07-20 20:20:10.865183425 +0000
@@ -44,10 +44,19 @@
             default_timezone = "America/New_York"
 
             [sites.default]
+            handle = "code-for-philly"
               primary_hostname = "codeforphilly.org"
               title = "Code for Philly"
 
             [core]
+
+            [limit]
+              memory = "200M"
+              post = "200M"
+              execution_time = "30"
+
+            [cache]
+              size = "512M"
         - name: HAB_MYSQL
           value: |
             app_username = "admin"
@@ -68,13 +77,19 @@
             name: saml2
         - secretRef:
             name: slack
-        image: ghcr.io/codeforphilly/codeforphilly.org/site-composite:1.3.5
+        image: ghcr.io/codeforphilly/codeforphilly.org/site-composite:1.3.8
         imagePullPolicy: Always
         name: code-for-philly-site
         ports:
         - containerPort: 80
           name: http
           protocol: TCP
+        - containerPort: 3306
+          name: mysql
+          protocol: TCP
+        resources:
+          requests:
+            memory: 300Mi
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         volumeMounts:
diff -uN /tmp/LIVE-2351852345/v1.Service.code-for-philly.code-for-philly-site /tmp/MERGED-1612099209/v1.Service.code-for-philly.code-for-philly-site
--- /tmp/LIVE-2351852345/v1.Service.code-for-philly.code-for-philly-site	2024-07-20 20:20:10.865183425 +0000
+++ /tmp/MERGED-1612099209/v1.Service.code-for-philly.code-for-philly-site	2024-07-20 20:20:10.877183505 +0000
@@ -20,6 +20,8 @@
   ports:
   - name: http
     port: 80
+  - name: mysql
+    port: 3306
   selector:
     app.kubernetes.io/instance: code-for-philly
     app.kubernetes.io/name: code-for-philly

[github-actions]

kubectl apply output (excluding unchanged) for 4706f02 was:

customresourcedefinition.apiextensions.k8s.io/sealedsecrets.bitnami.com configured
clusterrole.rbac.authorization.k8s.io/grafana-clusterrole configured
clusterrole.rbac.authorization.k8s.io/prometheus-alertmanager configured
clusterrole.rbac.authorization.k8s.io/prometheus-pushgateway configured
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews configured
clusterrolebinding.rbac.authorization.k8s.io/sealed-secrets configured
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/ingress-nginx-admission configured
configmap/cert-manager-webhook configured
configmap/cert-manager configured
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving configured
cronjob.batch/code-for-philly-backups configured
deployment.apps/code-for-philly configured
service/code-for-philly-site configured
configmap/grafana-dashboards-default configured
deployment.apps/grafana configured
deployment.apps/ingress-nginx-controller configured
deployment.apps/metrics-server configured
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection configured
secret/promtail configured
statefulset.apps/loki configured
deployment.apps/prometheus-alertmanager configured
deployment.apps/prometheus-kube-state-metrics configured
deployment.apps/prometheus-pushgateway configured
deployment.apps/prometheus-server configured
serviceaccount/prometheus-kube-state-metrics configured
deployment.apps/sealed-secrets configured
rolebinding.rbac.authorization.k8s.io/sealed-secrets-key-admin configured
service/sealed-secrets configured
statefulset.apps/third-places-postgresql configured
statefulset.apps/vaultwarden-postgresql configured