Skip to content

Commit

Permalink
Merge pull request #692 from bcgov/srs-338
Browse files Browse the repository at this point in the history 
Srs 338
  • Loading branch information
@nikhila-aot
nikhila-aot authored May 8, 2024
2 parents 1eda955 + f4eae94 commit a473f48
Show file tree
Hide file tree
Showing 13 changed files with 828 additions and 39 deletions.
320 changes: 320 additions & 0 deletions .github/openshift/deploy.backend-sites.yml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,320 @@
apiVersion: template.openshift.io/v1
kind: Template
metadata:
name: ${NAME}
annotations:
description: "EPD backend-sites"
tags: "epd-backend"
iconClass: icon-js
labels:
app: ${NAME}-${COMPONENT}
app.kubernetes.io/part-of: ${NAME}-${COMPONENT}
parameters:
- name: NAME
description: Module name
value: epd
- name: COMPONENT
description: Component name
value: backend-sites
- name: IMAGE_TAG
description: Image tag to use
value: latest
- name: DOMAIN
value: apps.silver.devops.gov.bc.ca
- name: CPU_REQUEST
value: "125m"
- name: MEMORY_REQUEST
value: "150Mi"
- name: CPU_LIMIT
value: "275m"
- name: MEMORY_LIMIT
value: "450Mi"
- name: MIN_REPLICAS
description: The minimum amount of replicas
value: "1"
- name: MAX_REPLICAS
description: The maximum amount of replicas
value: "3"
- name: CONTAINER_PORT
description: The port on which the application will be accessible
required: true
- name: REGISTRY
description: Container registry to import from (internal is image-registry.openshift-image-registry.svc:5000)
value: ghcr.io
- name: PROMOTE
description: Image (namespace/name:tag) to promote/import
value: bcgov/nr-epd-digital-services/backend/sites
- name: INIT_IMAGE
description: Image (namespace/name:tag) to promote/import
value: bcgov/nr-epd-digital-services/backend/sites-migration
- name: ENV
description: The Environment on which it is deployed
required: true
objects:
- apiVersion: v1
kind: ImageStream
metadata:
labels:
app: ${NAME}-${COMPONENT}
name: ${NAME}-${COMPONENT}
spec:
lookupPolicy:
local: false
tags:
- name: ${IMAGE_TAG}
from:
kind: DockerImage
name: ${REGISTRY}/${PROMOTE}:${IMAGE_TAG}
referencePolicy:
type: Local
- apiVersion: v1
kind: ImageStream
metadata:
labels:
app: ${NAME}-${COMPONENT}-migration
name: ${NAME}-${COMPONENT}-migration
spec:
lookupPolicy:
local: false
tags:
- name: ${IMAGE_TAG}
from:
kind: DockerImage
name: ${REGISTRY}/${INIT_IMAGE}:${IMAGE_TAG}
referencePolicy:
type: Local
- apiVersion: v1
kind: DeploymentConfig
metadata:
labels:
app: ${NAME}-${COMPONENT}
name: ${NAME}-${COMPONENT}
spec:
replicas: 1
triggers:
- type: ConfigChange
- type: ImageChange
imageChangeParams:
automatic: true
containerNames:
- ${NAME}-${COMPONENT}
from:
kind: ImageStreamTag
name: ${NAME}-${COMPONENT}:${IMAGE_TAG}
selector:
deploymentconfig: ${NAME}-${COMPONENT}
strategy:
type: Rolling
template:
metadata:
labels:
app: ${NAME}-${COMPONENT}
deploymentconfig: ${NAME}-${COMPONENT}
spec:
containers:
- image: " "
imagePullPolicy: Always
name: ${NAME}-${COMPONENT}
env:
- name: POSTGRESQL_HOST
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRESQL_HOST
- name: POSTGRESQL_PORT
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRESQL_PORT
- name: POSTGRES_ADMIN_USERNAME
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_ADMIN_USERNAME
- name: POSTGRES_ADMIN_PASSWORD
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_ADMIN_PASSWORD
- name: POSTGRES_DB_USERNAME
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_USERNAME
- name: POSTGRES_DB_PASSWORD
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_PASSWORD
- name: POSTGRES_DATABASE
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DATABASE
- name: POSTGRES_DB_SCHEMA
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_SCHEMA

- name: KEYCLOCK_AUTH_URL
valueFrom:
configMapKeyRef:
name: sites-database
key: KEYCLOCK_AUTH_URL
- name: KEYCLOCK_CLIENT_ID
valueFrom:
configMapKeyRef:
name: sites-database
key: KEYCLOCK_CLIENT_ID
- name: KEYCLOCK_REALM
valueFrom:
configMapKeyRef:
name: sites-database
key: KEYCLOCK_REALM
- name: KEYCLOCK_SECRET
valueFrom:
configMapKeyRef:
name: sites-database
key: KEYCLOCK_SECRET




ports:
- containerPort: ${{CONTAINER_PORT}}
protocol: TCP
resources:
requests:
cpu: ${CPU_REQUEST}
memory: ${MEMORY_REQUEST}
limits:
cpu: ${CPU_LIMIT}
memory: ${MEMORY_LIMIT}
readinessProbe:
httpGet:
path: /
port: ${{CONTAINER_PORT}}
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 30
timeoutSeconds: 5
failureThreshold: 30
successThreshold: 1
livenessProbe:
successThreshold: 1
failureThreshold: 3
httpGet:
path: /
port: ${{CONTAINER_PORT}}
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 30
timeoutSeconds: 5
initContainers:
# - name: init-${NAME}-backend-users-typeorm-migrations
# image: image-registry.openshift-image-registry.svc:5000/${NAME}-${COMPONENT}:${IMAGE_TAG}
# command: ['sh', '-c', 'initContainer.sh']
# ${NAME}-${COMPONENT}:${IMAGE_TAG}
- name: epd-db-migration-sites
image: "image-registry.openshift-image-registry.svc:5000/c6a6e5-${ENV}/${NAME}-${COMPONENT}-migration:${IMAGE_TAG}"
env:
- name: Typeorm-migration-sites
value: "jdbc:postgresql://${COMPONENT}-postgres:5432/${COMPONENT}"
- name: POSTGRESQL_HOST
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRESQL_HOST
- name: POSTGRESQL_PORT
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRESQL_PORT
- name: POSTGRES_ADMIN_USERNAME
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_ADMIN_USERNAME
- name: POSTGRES_ADMIN_PASSWORD
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_ADMIN_PASSWORD
- name: POSTGRES_DB_USERNAME
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_USERNAME
- name: POSTGRES_DB_PASSWORD
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_PASSWORD
- name: POSTGRES_DATABASE
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DATABASE
- name: POSTGRES_DB_SCHEMA
valueFrom:
configMapKeyRef:
name: sites-database
key: POSTGRES_DB_SCHEMA

resources:
limits:
cpu: 100m
memory: 150Mi
requests:
cpu: 50m
memory: 50Mi
- apiVersion: v1
kind: Service
metadata:
labels:
app: ${NAME}-${COMPONENT}
name: ${NAME}-${COMPONENT}
spec:
ports:
- name: ${CONTAINER_PORT}-tcp
protocol: TCP
port: 80
targetPort: ${{CONTAINER_PORT}}
selector:
deploymentconfig: ${NAME}-${COMPONENT}
- apiVersion: route.openshift.io/v1
kind: Route
metadata:
labels:
app: ${NAME}-${COMPONENT}
name: ${NAME}-${COMPONENT}
spec:
host: ${NAME}-${COMPONENT}-${ENV}.${DOMAIN}
port:
targetPort: ${CONTAINER_PORT}-tcp
to:
kind: Service
name: ${NAME}-${COMPONENT}
weight: 100
tls:
termination: edge
insecureEdgeTerminationPolicy: Redirect
- apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: "${NAME}-${COMPONENT}"
spec:
scaleTargetRef:
apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
name: "${NAME}-${COMPONENT}"
minReplicas: ${{MIN_REPLICAS}}
maxReplicas: ${{MAX_REPLICAS}}
metrics:
- type: Resource
resource:
name: cpu
target:
type: Utilization
averageUtilization: 100
11 changes: 11 additions & 0 deletions .github/workflows/_build.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -160,4 +160,15 @@ jobs:
cache-from: type=gha
cache-to: type=gha,mode=max
file: ./backend/applications/Dockerfile-migrations-openshift

- name: Build and push Migration image for Sites
if: steps.check.outputs.build == 'true' && inputs.component == 'backend/sites'
uses: docker/[email protected]
with:
context: ./${{ inputs.component }}/
push: true
tags: ghcr.io/${{ github.repository }}/backend/sites-migration:${{ inputs.img_build }}
cache-from: type=gha
cache-to: type=gha,mode=max
file: ./backend/sites/Dockerfile-migrations-openshift

Loading

0 comments on commit a473f48

Please sign in to comment.