Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deploy releases/k8s-manifests c12c9cb #66

Merged
merged 3 commits into from May 14, 2024
Merged

Deploy releases/k8s-manifests c12c9cb #66

merged 3 commits into from May 14, 2024

Conversation

github-actions[bot]
Copy link

@github-actions github-actions bot commented May 9, 2024

kubectl diff reports that applying c12c9cb will change:

diff -uN /tmp/LIVE-3006534080/apps.v1.Deployment.balancer.backend /tmp/MERGED-2634587156/apps.v1.Deployment.balancer.backend
--- /tmp/LIVE-3006534080/apps.v1.Deployment.balancer.backend	2024-05-09 17:49:50.964039589 +0000
+++ /tmp/MERGED-2634587156/apps.v1.Deployment.balancer.backend	2024-05-09 17:49:50.968039581 +0000
@@ -1 +1,66 @@
-{}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/component: backend
+  name: backend
+  namespace: balancer
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: backend
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app.kubernetes.io/component: backend
+    spec:
+      containers:
+      - args:
+        - gunicorn
+        - balancer_backend.wsgi:application
+        - --bind
+        - 0.0.0.0:8000
+        env:
+        - name: SQL_HOST
+          value: db-service
+        - name: SQL_USER
+          valueFrom:
+            secretKeyRef:
+              key: POSTGRES_USER
+              name: postgresql
+        - name: SQL_DATABASE
+          valueFrom:
+            secretKeyRef:
+              key: POSTGRES_DB
+              name: postgresql
+        - name: SQL_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: POSTGRES_PASSWORD
+              name: postgresql
+        envFrom:
+        - configMapRef:
+            name: backend-env
+        - secretRef:
+            name: backend
+        image: ghcr.io/codeforphilly/balancer-main/backend:latest
+        imagePullPolicy: Always
+        name: backend
+        ports:
+        - containerPort: 8000
+          protocol: TCP
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      terminationGracePeriodSeconds: 30
diff -uN /tmp/LIVE-3006534080/apps.v1.Deployment.balancer.frontend /tmp/MERGED-2634587156/apps.v1.Deployment.balancer.frontend
--- /tmp/LIVE-3006534080/apps.v1.Deployment.balancer.frontend	2024-05-09 17:49:50.964039589 +0000
+++ /tmp/MERGED-2634587156/apps.v1.Deployment.balancer.frontend	2024-05-09 17:49:50.972039573 +0000
@@ -1 +1,55 @@
-{}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/component: frontend
+  name: frontend
+  namespace: balancer
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: frontend
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      annotations:
+        kompose.cmd: kompose convert -c -f docker-compose.prod.yml -o helm-chart
+        kompose.version: 1.31.2 (a92241f79)
+      creationTimestamp: null
+      labels:
+        app.kubernetes.io/component: frontend
+        io.kompose.network/balancer-main-default: "true"
+    spec:
+      containers:
+      - image: ghcr.io/codeforphilly/balancer-main/frontend:latest
+        imagePullPolicy: Always
+        name: frontend
+        ports:
+        - containerPort: 80
+          protocol: TCP
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /etc/nginx/nginx.conf
+          name: nginx-conf
+          readOnly: true
+          subPath: nginx.conf
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - configMap:
+          defaultMode: 420
+          items:
+          - key: nginx.conf
+            path: nginx.conf
+          name: nginx-conf
+        name: nginx-conf
diff -uN /tmp/LIVE-3006534080/apps.v1.StatefulSet.balancer.db /tmp/MERGED-2634587156/apps.v1.StatefulSet.balancer.db
--- /tmp/LIVE-3006534080/apps.v1.StatefulSet.balancer.db	2024-05-09 17:49:50.964039589 +0000
+++ /tmp/MERGED-2634587156/apps.v1.StatefulSet.balancer.db	2024-05-09 17:49:50.972039573 +0000
@@ -1 +1,49 @@
-{}
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  labels:
+    app.kubernetes.io/component: db
+  name: db
+  namespace: balancer
+spec:
+  persistentVolumeClaimRetentionPolicy:
+    whenDeleted: Retain
+    whenScaled: Retain
+  podManagementPolicy: OrderedReady
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: db
+  serviceName: db
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app.kubernetes.io/component: db
+        io.kompose.network/balancer-main-default: "true"
+    spec:
+      containers:
+      - envFrom:
+        - secretRef:
+            name: postgresql
+        image: postgres:15
+        imagePullPolicy: IfNotPresent
+        name: db
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data
+          name: postgres-data
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: postgres-data
+        persistentVolumeClaim:
+          claimName: postgres-data-claim
+  updateStrategy:
+    rollingUpdate:
+      partition: 0
+    type: RollingUpdate
diff -uN /tmp/LIVE-3006534080/bitnami.com.v1alpha1.SealedSecret.balancer.backend /tmp/MERGED-2634587156/bitnami.com.v1alpha1.SealedSecret.balancer.backend
--- /tmp/LIVE-3006534080/bitnami.com.v1alpha1.SealedSecret.balancer.backend	2024-05-09 17:49:50.964039589 +0000
+++ /tmp/MERGED-2634587156/bitnami.com.v1alpha1.SealedSecret.balancer.backend	2024-05-09 17:49:50.972039573 +0000
@@ -5,9 +5,10 @@
   namespace: balancer
 spec:
   encryptedData:
-    EMAIL_HOST_PASSWORD: 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
-    OPENAI_API_KEY: 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
-    SECRET_KEY: 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
+    EMAIL_HOST_PASSWORD: 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
+    OPENAI_API_KEY: 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
+    SECRET_KEY: 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
+    SUPER_USER_PASSWORD: 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
   template:
     metadata:
       creationTimestamp: null
diff -uN /tmp/LIVE-3006534080/networking.k8s.io.v1.Ingress.balancer.balancer-ingress /tmp/MERGED-2634587156/networking.k8s.io.v1.Ingress.balancer.balancer-ingress
--- /tmp/LIVE-3006534080/networking.k8s.io.v1.Ingress.balancer.balancer-ingress	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/networking.k8s.io.v1.Ingress.balancer.balancer-ingress	2024-05-09 17:49:50.972039573 +0000
@@ -1 +1,29 @@
-{}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+  name: balancer-ingress
+  namespace: balancer
+spec:
+  rules:
+  - host: balancer.sandbox.k8s.phl.io
+    http:
+      paths:
+      - backend:
+          service:
+            name: frontend
+            port:
+              name: http
+        path: /
+        pathType: Prefix
+  - host: balancertestsite.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: frontend
+            port:
+              name: http
+        path: /
+        pathType: Prefix
diff -uN /tmp/LIVE-3006534080/v1.ConfigMap.balancer.backend-env /tmp/MERGED-2634587156/v1.ConfigMap.balancer.backend-env
--- /tmp/LIVE-3006534080/v1.ConfigMap.balancer.backend-env	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.ConfigMap.balancer.backend-env	2024-05-09 17:49:50.972039573 +0000
@@ -1 +1,17 @@
-{}
+apiVersion: v1
+data:
+  DATABASE: postgres
+  DEBUG: "FALSE"
+  DJANGO_ALLOWED_HOSTS: frontend localhost 127.0.0.1 [::1]
+  EMAIL_HOST: smtp.gmail.com
+  EMAIL_HOST_USER: balancer-noreply@gmail.com
+  EMAIL_PORT: "587"
+  LOGIN_REDIRECT_URL: https://balancertestsite.com/login
+  SQL_ENGINE: django.db.backends.postgresql
+  SQL_PORT: "5432"
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/component: backend
+  name: backend-env
+  namespace: balancer
diff -uN /tmp/LIVE-3006534080/v1.ConfigMap.balancer.nginx-conf /tmp/MERGED-2634587156/v1.ConfigMap.balancer.nginx-conf
--- /tmp/LIVE-3006534080/v1.ConfigMap.balancer.nginx-conf	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.ConfigMap.balancer.nginx-conf	2024-05-09 17:49:50.972039573 +0000
@@ -1,16 +1,82 @@
 apiVersion: v1
 data:
-  nginx.conf: "user nginx;\nworker_processes  1;\nevents {\n  worker_connections  1024;\n}\nhttp
-    {\n  include /etc/nginx/mime.types;\n  error_log  /var/log/nginx/error_log;\n
-    \ access_log /var/log/nginx/access_log;\n  server {\n    listen       80;\n    listen
-    \ [::]:80;\n    server_name  localhost;\n\n    location /access_log {\n        alias
-    /var/log/nginx/access_log;\n    }\n    location /error_log {\n        alias /var/log/nginx/error_log;\n
-    \   }\n    \n    location / {\n        root   /usr/share/nginx/html;\n        index
-    \ index.html index.htm;\n    }\n\n    #error_page  404              /404.html;\n\n
-    \   # redirect server error pages to the static page /50x.html\n    #\n    #error_page
-    \  500 502 503 504  /50x.html;\n    #location = /50x.html {\n    #    root   /usr/share/nginx/html;\n
-    \   \n    #}\n  }\n}\n"
+  nginx.conf: |
+    worker_processes 1;
+
+    user nobody nogroup;
+    # 'user nobody nobody;' for systems with 'nobody' as a group instead
+    error_log  /var/log/nginx/error.log warn;
+    pid /var/run/nginx.pid;
+
+    events {
+      worker_connections 1024; # increase if you have lots of clients
+      accept_mutex off; # set to 'on' if nginx worker_processes > 1
+      # 'use epoll;' to enable for Linux 2.6+
+      # 'use kqueue;' to enable for FreeBSD, OSX
+    }
+
+    http {
+      include mime.types;
+      # fallback in case we can't determine a type
+      default_type application/octet-stream;
+      access_log /var/log/nginx/access.log combined;
+      sendfile on;
+
+      upstream gunicorn_server {
+        # fail_timeout=0 means we always retry an upstream even if it failed
+        # to return a good HTTP response
+
+        # for UNIX domain socket setups
+        # server unix:/tmp/gunicorn.sock fail_timeout=0;
+
+        # for a TCP configuration
+        # "backend" here is the name of the kubernetes service
+        server backend:8000 fail_timeout=0;
+      }
+
+      server {
+        # if no Host match, close the connection to prevent host spoofing
+        listen 80 default_server;
+        return 444;
+      }
+
+      server {
+        # use 'listen 80 deferred;' for Linux
+        # use 'listen 80 accept_filter=httpready;' for FreeBSD
+        listen 80 deferred;
+        client_max_body_size 4G;
+
+        # set the correct host(s) for your site
+        server_name localhost;
+
+        keepalive_timeout 5;
+
+        # path for static files
+        root /usr/share/nginx/html;
+        location ~ (^\/api\/|^\/auth\/|^\/admin) {
+          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $scheme;
+          proxy_set_header Host $http_host;
+          # we don't want nginx trying to do something clever with
+          # redirects, we set the Host: header above already.
+          proxy_redirect off;
+          proxy_pass http://gunicorn_server;
+        }
+
+        location / {
+          index index.html;
+          try_files $uri $uri/ /index.html;
+        }
+
+        error_page 500 502 503 504 /50x.html;
+        location = /50x.html {
+          root /usr/share/nginx/html;
+        }
+      }
+    }
 kind: ConfigMap
 metadata:
+  labels:
+    app.kubernetes.io/component: frontend
   name: nginx-conf
   namespace: balancer
diff -uN /tmp/LIVE-3006534080/v1.PersistentVolumeClaim.balancer.postgres-data-claim /tmp/MERGED-2634587156/v1.PersistentVolumeClaim.balancer.postgres-data-claim
--- /tmp/LIVE-3006534080/v1.PersistentVolumeClaim.balancer.postgres-data-claim	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.PersistentVolumeClaim.balancer.postgres-data-claim	2024-05-09 17:49:50.976039566 +0000
@@ -1 +1,14 @@
-{}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/component: db
+  name: postgres-data-claim
+  namespace: balancer
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: linode-block-storage-retain
diff -uN /tmp/LIVE-3006534080/v1.Service.balancer.backend /tmp/MERGED-2634587156/v1.Service.balancer.backend
--- /tmp/LIVE-3006534080/v1.Service.balancer.backend	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.Service.balancer.backend	2024-05-09 17:49:50.976039566 +0000
@@ -1 +1,20 @@
-{}
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/component: backend
+  name: backend
+  namespace: balancer
+spec:
+  clusterIP: 10.128.0.0
+  clusterIPs:
+  - 10.128.0.0
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - name: gunicorn
+    port: 8000
+  selector:
+    app.kubernetes.io/component: backend
diff -uN /tmp/LIVE-3006534080/v1.Service.balancer.db-service /tmp/MERGED-2634587156/v1.Service.balancer.db-service
--- /tmp/LIVE-3006534080/v1.Service.balancer.db-service	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.Service.balancer.db-service	2024-05-09 17:49:50.976039566 +0000
@@ -1 +1,19 @@
-{}
+apiVersion: v1
+kind: Service
+metadata:
+  name: db-service
+  namespace: balancer
+spec:
+  clusterIP: 10.128.0.0
+  clusterIPs:
+  - 10.128.0.0
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - nodePort: 32769
+    port: 5432
+  selector:
+    app.kubernetes.io/component: db
+  type: NodePort
diff -uN /tmp/LIVE-3006534080/v1.Service.balancer.frontend /tmp/MERGED-2634587156/v1.Service.balancer.frontend
--- /tmp/LIVE-3006534080/v1.Service.balancer.frontend	2024-05-09 17:49:50.968039581 +0000
+++ /tmp/MERGED-2634587156/v1.Service.balancer.frontend	2024-05-09 17:49:50.976039566 +0000
@@ -1 +1,23 @@
-{}
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    kompose.cmd: kompose convert -c -f docker-compose.prod.yml -o helm-chart
+    kompose.version: 1.31.2 (a92241f79)
+  labels:
+    app.kubernetes.io/component: frontend
+  name: frontend
+  namespace: balancer
+spec:
+  clusterIP: 10.128.0.0
+  clusterIPs:
+  - 10.128.0.0
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - name: http
+    port: 80
+  selector:
+    app.kubernetes.io/component: frontend

joshuagerstein and others added 3 commits April 30, 2024 21:12
@joshuagerstein
[balancer] remove tls, change watched branch, update sealed secrets
6cf833f
@themightychris
Merge pull request #65 from joshuagerstein/main
2d0c3ad 
[balancer] Remove tls, change watched branch, update sealed secrets
@themightychris
☀ projected k8s-manifests-github from 2d0c3ad
c12c9cb 
Source-holobranch: k8s-manifests-github
Source-commit: 2d0c3ad
Source: 2d0c3ad
@themightychris themightychris mentioned this pull request May 9, 2024
Closed
@themightychris themightychris merged commit 13b30ef into deploys/k8s-manifests May 14, 2024
1 check passed
@github-actions GitHub Actions
Copy link
Author

kubectl apply output (excluding unchanged) for 13b30ef was:

customresourcedefinition.apiextensions.k8s.io/sealedsecrets.bitnami.com configured
clusterrole.rbac.authorization.k8s.io/grafana-clusterrole configured
clusterrole.rbac.authorization.k8s.io/prometheus-alertmanager configured
clusterrole.rbac.authorization.k8s.io/prometheus-pushgateway configured
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews configured
clusterrolebinding.rbac.authorization.k8s.io/sealed-secrets configured
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/ingress-nginx-admission configured
configmap/backend-env created
configmap/nginx-conf configured
deployment.apps/backend created
deployment.apps/frontend created
ingress.networking.k8s.io/balancer-ingress created
persistentvolumeclaim/postgres-data-claim created
sealedsecret.bitnami.com/backend configured
service/backend created
service/db-service created
service/frontend created
statefulset.apps/db created
configmap/cert-manager-webhook configured
configmap/cert-manager configured
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving configured
statefulset.apps/data-warehouse-postgresql configured
configmap/grafana-dashboards-default configured
deployment.apps/grafana configured
deployment.apps/ingress-nginx-controller configured
deployment.apps/metrics-server configured
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection configured
secret/promtail configured
statefulset.apps/loki configured
statefulset.apps/database configured
deployment.apps/prometheus-alertmanager configured
deployment.apps/prometheus-kube-state-metrics configured
deployment.apps/prometheus-pushgateway configured
deployment.apps/prometheus-server configured
serviceaccount/prometheus-kube-state-metrics configured
deployment.apps/sealed-secrets configured
rolebinding.rbac.authorization.k8s.io/sealed-secrets-key-admin configured
service/sealed-secrets configured
deployment.apps "frontend-static" deleted
service "frontend-static" deleted

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@themightychris @joshuagerstein