chore(backend): Add deployment files

andreroggeri · Apr 14, 2024 · 9cf25f3 · 9cf25f3
1 parent 1bebc8a
commit 9cf25f3
Show file tree

Hide file tree

Showing 15 changed files with 305 additions and 47 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -72,7 +72,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Strip module name from version
+      - name: Save version
         id: version
         run: |
           # If the new release is published, strip the module name from the version (steps.semver.outputs.new_release_published)
@@ -82,7 +82,8 @@ jobs:
           else
             release_version=ghcr.io/andreroggeri/schedule:$(echo "${{ steps.semver.outputs.last_release_version }}" | sed 's/schedule-//')
           fi
-          echo "::set-output name=version::$release_version"
+          echo "Version is $release_version"
+          echo "version=$release_version >> $GITHUB_OUTPUT"
 
       - name: Set up QEMU
         if: steps.semver.outputs.new_release_published == 'true'
@@ -150,6 +151,11 @@ jobs:
           yq e -i '.spec.template.spec.containers[0].image = "${{ needs.build-and-tag-backend.outputs.image }}"' backend/deployment/app/deployment.yml
           yq e -i '.spec.template.spec.containers[0].image = "${{ needs.build-and-tag-backend.outputs.image }}"' backend/deployment/worker/deployment.yml
 
+      - name: Update ingress
+        run: |
+          yq e -i '.spec.rules[0].host = "schedule.staging.agendaodonto.com"' backend/deployment/app/ingress.yml
+          yq e -i '.spec.tls[0].hosts[0] = "schedule.staging.agendaodonto.com"' backend/deployment/app/ingress.yml
+
       - name: Create resources
         run: kubectl apply -f backend/deployment --recursive
 
@@ -303,8 +309,7 @@ jobs:
   e2e-tests-staging:
     runs-on: ubuntu-latest
     if: false
-    needs:
-      [release-backend, release-chatbot-staging, release-webapp-staging]
+    needs: [release-backend, release-chatbot-staging, release-webapp-staging]
     defaults:
       run:
         working-directory: webapp

diff --git a/backend/Dokku.md b/backend/Dokku.md
diff --git a/backend/deployment/app/deployment.yml b/backend/deployment/app/deployment.yml
@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: schedule-app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: schedule-app
+  template:
+    metadata:
+      labels:
+        app: schedule-app
+        app_context: schedule
+        env: staging
+    spec:
+      containers:
+        - name: schedule-app
+          image: ghcr.io/andreroggeri/schedule:latest # Replaced in CI/CD pipeline
+          ports:
+            - containerPort: 8000
+          env:
+            - name: API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-api-key
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-db-url
+            - name: DJANGO_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-django-secret-key
+            - name: RABBITMQ_URL
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-rabbitmq-url
+            - name: DJANGO_SETTINGS_MODULE
+              value: app.settings.staging # TODO: Use a single config file
+
diff --git a/backend/deployment/app/ingress.yml b/backend/deployment/app/ingress.yml
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: schedule-tls-ingress
+  annotations:
+    spec.ingressClassName: traefik
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
+spec:
+  rules:
+    - host: schedule.staging.agendaodonto.com # Updated in CI/CD pipeline
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: schedule-app
+                port:
+                  number: 8000
+  tls:
+    - secretName: schedule-tls
+      hosts:
+        - schedule.staging.agendaodonto.com # Updated in CI/CD pipeline
diff --git a/backend/deployment/app/service.yml b/backend/deployment/app/service.yml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: schedule-app
+spec:
+  selector:
+    app: schedule-app
+  ports:
+    - port: 8000
diff --git a/backend/deployment/postgres/deployment.yml b/backend/deployment/postgres/deployment.yml
@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: schedule-postgres
+spec:
+  selector:
+    matchLabels:
+      app: schedule-postgres
+  template:
+    metadata:
+      labels:
+        app: schedule-postgres
+        app_context: schedule
+        env: staging
+    spec:
+      containers:
+        - name: schedule-postgres
+          image: "postgres:16"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 5432
+          env:
+            - name: POSTGRES_DB
+              value: schedule
+            - name: POSTGRES_USER
+              value: postgres
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-db-password
+          volumeMounts:
+            - mountPath: /var/lib/postgresql/data
+              name: schedule-postgresdata
+      volumes:
+        - name: schedule-postgresdata
+          persistentVolumeClaim:
+            claimName: schedule-postgres-volume-claim
diff --git a/backend/deployment/postgres/pv-claim.yml b/backend/deployment/postgres/pv-claim.yml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: schedule-postgres-volume-claim
+  labels:
+    app: schedule-postgres
+    app_context: schedule
+    env: staging
+spec:
+  storageClassName: manual
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/backend/deployment/postgres/pv.yml b/backend/deployment/postgres/pv.yml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: schedule-postgres-volume
+  labels:
+    type: local
+    app: schedule-postgres
+    app_context: schedule
+    env: staging
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  hostPath:
+    path: /data/schedule-postgresql
diff --git a/backend/deployment/postgres/service.yml b/backend/deployment/postgres/service.yml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: schedule-postgres
+  labels:
+    app: schedule-postgres
+    app_context: schedule
+    env: staging
+spec:
+  ports:
+    - port: 5432
+  selector:
+    app: schedule-postgres
diff --git a/backend/deployment/rabbitmq/deployment.yml b/backend/deployment/rabbitmq/deployment.yml
@@ -0,0 +1,37 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: schedule-rabbitmq
+spec:
+  selector:
+    matchLabels:
+      app: schedule-rabbitmq
+  template:
+    metadata:
+      labels:
+        app: schedule-rabbitmq
+        app_context: schedule
+        env: staging
+    spec:
+      containers:
+        - name: schedule-rabbitmq
+          image: "rabbitmq:3.13-management-alpine"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 5672
+            - containerPort: 15672
+          env:
+            - name: RABBITMQ_DEFAULT_USER
+              value: schedule
+            - name: RABBITMQ_DEFAULT_PASS
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-rabbitmq-password
+          volumeMounts:
+            - mountPath: /var/lib/rabbitmq
+              name: schedule-rabbitmqdata
+      volumes:
+        - name: schedule-rabbitmqdata
+          persistentVolumeClaim:
+            claimName: schedule-rabbitmq-volume-claim
diff --git a/backend/deployment/rabbitmq/pv-claim.yml b/backend/deployment/rabbitmq/pv-claim.yml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: schedule-rabbitmq-volume-claim
+  labels:
+    app: schedule-rabbitmq
+    app_context: schedule
+    env: staging
+spec:
+  storageClassName: manual
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/backend/deployment/rabbitmq/pv.yml b/backend/deployment/rabbitmq/pv.yml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: schedule-rabbitmq-volume
+  labels:
+    type: local
+    app: schedule-rabbitmq
+    app_context: schedule
+    env: staging
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  hostPath:
+    path: /data/schedule-rabbitmq
diff --git a/backend/deployment/rabbitmq/service.yml b/backend/deployment/rabbitmq/service.yml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: schedule-rabbitmq
+  labels:
+    app: schedule-rabbitmq
+    app_context: schedule
+    env: staging
+spec:
+  ports:
+    - port: 5672
+  selector:
+    app: schedule-rabbitmq
diff --git a/backend/deployment/worker/deployment.yml b/backend/deployment/worker/deployment.yml
@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: schedule-worker
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: schedule-worker
+  template:
+    metadata:
+      labels:
+        app: schedule-worker
+        app_context: schedule
+        env: staging
+    spec:
+      containers:
+        - name: schedule-worker
+          image: ghcr.io/andreroggeri/schedule:latest # Replaced in CI/CD pipeline
+          command: ["celery", "-A", "app.schedule", "worker", "--loglevel=info"]
+          env:
+            - name: API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-api-key
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-db-url
+            - name: MESSAGING_URL
+              value: "http://messaging.default.svc.cluster.local:3000"
+            - name: MESSAGING_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: messaging-api-key
+            - name: RABBITMQ_URL
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-rabbitmq-url
+            - name: MESSAGE_CLASS
+              value: "app.schedule.service.notification.whatsapp.Whatsapp"
+            - name: DJANGO_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: schedule-secrets
+                  key: schedule-django-secret-key
+            - name: DJANGO_SETTINGS_MODULE
+              value: app.settings.staging # TODO: Use a single config file
+
diff --git a/backend/docker-entrypoint.sh b/backend/docker-entrypoint.sh
@@ -1,15 +1,5 @@
 #!/bin/bash
 
-if [ "$COLLECT_STATIC" = "1" ]; then
-  echo "Collect static files"
-  python manage.py collectstatic --noinput
-fi
-
-if [ "$DB_MIGRATE" = "1" ]; then
-  echo "Migrating database"
-  python manage.py migrate --no-input
-fi
-
 if [ $# -eq 0 ]; then
   PORT=${PORT:-8000}
   echo "Starting gunicorn on port ${PORT}"