Merge pull request #5 from 7SOATSquad30/build/public-lb-and-prod-secrets

build: deploy with public lb and prod secrets
7SOATSquad30 · Dec 3, 2024 · 08bec88 · 08bec88
2 parents 2a3b7a8 + 9fc03a7
commit 08bec88
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 0 deletions.
diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
@@ -77,6 +77,9 @@ jobs:
         DB_DATABASE: ${{ secrets.DB_DATABASE }}
         DB_USERNAME: ${{ secrets.DB_USERNAME }}
         DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
         VERSION: ${{ env.VERSION }}
         ENVIRONMENT: prod
       run: |

diff --git a/k8s/deployment.template.yaml b/k8s/deployment.template.yaml
@@ -22,6 +22,12 @@ spec:
               value: "$DB_USERNAME"
             - name: DB_PASSWORD
               value: "$DB_PASSWORD"
+            - name: AWS_ACCESS_KEY_ID
+              value: "$AWS_ACCESS_KEY_ID"
+            - name: AWS_SECRET_ACCESS_KEY
+              value: "$AWS_SECRET_ACCESS_KEY"
+            - name: AWS_SESSION_TOKEN
+              value: "$AWS_SESSION_TOKEN"
             - name: SPRING_PROFILES_ACTIVE
               value: "$ENVIRONMENT"
           image: fiap7soat30/customer-api:$VERSION

diff --git a/k8s/service.template.yaml b/k8s/service.template.yaml
@@ -12,3 +12,20 @@ spec:
       port: 80
       targetPort: 8080
   type: LoadBalancer
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: customer-api-svc-public
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
+    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "HTTP"
+    service.beta.kubernetes.io/aws-load-balancer-type: "alb"
+spec:
+  selector:
+    app: customer-api
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 8080
+  type: LoadBalancer