issue #1: GKE cluster using Terraform (first iteration)

.gitignore

@@ -33,5 +33,5 @@ override.tf.json
 .terraformrc
 terraform.rc
 
-# jq (used to gather information when terraform applying or plannig)
+# jq (used to gather information when terraform applying or planning)
 jq

kubernetes/apps/finesse/finesse-deployment.yml → kubernetes/apps/finesse/finesse-backend-deployment.yml

@@ -1,12 +1,4 @@
 apiVersion: v1
-kind: Namespace
-metadata:
-  name: finesse
-  labels:
-    name: finesse
-
----
-apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: secrets-reader
@@ -16,17 +8,17 @@ metadata:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: finesse
+  name: finesse-backend
   namespace: finesse
 spec:
   replicas: 2
   selector:
     matchLabels:
-      app: finesse
+      app: finesse-backend
   template:
     metadata:
       labels:
-        app: finesse
+        app: finesse-backend
       annotations:
         vault.hashicorp.com/agent-inject: 'true'
         vault.hashicorp.com/role: 'secrets-reader'
@@ -53,7 +45,7 @@ spec:
       serviceAccountName: secrets-reader
       containers:
       - name: finesse-backend
-        image: gcr.io/spartan-rhino-408115/finesse-backend:latest
+        image: ghcr.io/ai-cfia/finesse-backend:98f702dddef8f5d46668794b65920c9ce38b8034
         imagePullPolicy: Always
         command: ["/bin/sh", "-c"]
         args:
@@ -73,41 +65,12 @@ spec:
 apiVersion: v1
 kind: Service 
 metadata:
-  name: finesse
+  name: finesse-backend-svc
   namespace: finesse
 spec:
   clusterIP: None
   selector:
-    app: finesse
+    app: finesse-backend
   ports:
     - protocol: TCP
       port: 8080
-
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: finesse
-  namespace: finesse
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-http
-    ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "1800"
-    kubernetes.io/tls-acme: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - finesse.ninebasetwo.xyz
-    secretName: aciacfia-tls
-  rules:
-  - host: finesse.ninebasetwo.xyz
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: finesse
-            port:
-              number: 8080

kubernetes/apps/finesse/finesse-frontend-deployment.yml

@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: finesse-frontend
+  namespace: finesse
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: finesse-frontend
+  template:
+    metadata:
+      labels:
+        app: finesse-frontend
+    spec:
+      serviceAccountName: secrets-reader
+      containers:
+      - name: finesse-frontend
+        image: ghcr.io/ai-cfia/finesse-frontend:0e64faf24b3254d3582745796a56858f0d5c5cec
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 3000
+        livenessProbe:
+          httpGet:
+            path: /health
+            port: 3000
+          initialDelaySeconds: 60
+          periodSeconds: 10
+
+---
+apiVersion: v1
+kind: Service 
+metadata:
+  name: finesse-frontend-svc
+  namespace: finesse
+spec:
+  clusterIP: None
+  selector:
+    app: finesse-frontend
+  ports:
+    - protocol: TCP
+      port: 3000

kubernetes/apps/finesse/finesse-ingress.yml

@@ -0,0 +1,59 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: finesse-backend-ingress
+  namespace: finesse
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2 # https://kubernetes.github.io/ingress-nginx/examples/rewrite/
+    cert-manager.io/cluster-issuer: letsencrypt-http
+    ingress.kubernetes.io/force-ssl-redirect: "true"
+    kubernetes.io/tls-acme: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - finesse.ninebasetwo.xyz
+    secretName: aciacfia-tls
+  rules:
+  - host: finesse.ninebasetwo.xyz
+    http:
+      paths:
+      - path: /api(/|$)(.*)
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: finesse-backend-svc
+            port:
+              number: 8080
+
+---
+# For more information check https://github.com/nginxinc/kubernetes-ingress/issues/323
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: finesse-frontend-ingress
+  namespace: finesse
+  annotations:
+    nginx.ingress.kubernetes.io/add-base-url: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    cert-manager.io/cluster-issuer: letsencrypt-http
+    ingress.kubernetes.io/force-ssl-redirect: "true"
+    kubernetes.io/tls-acme: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - finesse.ninebasetwo.xyz
+    secretName: aciacfia-tls
+  rules:
+  - host: finesse.ninebasetwo.xyz
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: finesse-frontend-svc
+            port:
+              number: 3000

kubernetes/apps/finesse/finesse-namespace.yml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: finesse
+  labels:
+    name: finesse

kubernetes/apps/nachet/nachet-deployment.yml → kubernetes/apps/nachet/nachet-backend-deployment.yml

@@ -1,12 +1,4 @@
 apiVersion: v1
-kind: Namespace
-metadata:
-  name: nachet
-  labels:
-    name: nachet
-
----
-apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: secrets-reader
@@ -16,17 +8,17 @@ metadata:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nachet
+  name: nachet-backend
   namespace: nachet
 spec:
   replicas: 2
   selector:
     matchLabels:
-      app: nachet
+      app: nachet-backend
   template:
     metadata:
       labels:
-        app: nachet
+        app: nachet-backend
       annotations:
         vault.hashicorp.com/agent-inject: 'true'
         vault.hashicorp.com/role: 'secrets-reader'
@@ -46,7 +38,7 @@ spec:
       serviceAccountName: secrets-reader
       containers:
       - name: nachet-backend
-        image: gcr.io/spartan-rhino-408115/nachet-backend:latest
+        image: ghcr.io/ai-cfia/nachet-backend:253cc74b682be64d78b7e5951726efd3222ce2c4
         imagePullPolicy: Always
         command: ["/bin/sh", "-c"]
         args:
@@ -65,40 +57,12 @@ spec:
 apiVersion: v1
 kind: Service 
 metadata:
-  name: nachet
+  name: nachet-backend-svc
   namespace: nachet
 spec:
   clusterIP: None
   selector:
-    app: nachet
+    app: nachet-backend
   ports:
     - protocol: TCP
       port: 8080
-
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: nachet
-  namespace: nachet
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-http
-    ingress.kubernetes.io/force-ssl-redirect: "true"
-    kubernetes.io/tls-acme: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - nachir.ninebasetwo.xyz
-    secretName: aciacfia-tls
-  rules:
-  - host: nachir.ninebasetwo.xyz
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: nachet
-            port:
-              number: 8080

kubernetes/apps/nachet/nachet-frontend-deployment.yml

@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nachet-frontend
+  namespace: nachet
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: nachet-frontend
+  template:
+    metadata:
+      labels:
+        app: nachet-frontend
+    spec:
+      serviceAccountName: secrets-reader
+      containers:
+      - name: nachet-frontend
+        image: ghcr.io/ai-cfia/nachet-frontend:87e217a2e78dcbf1d1ec940c0bd69be15fc70a59
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 3000
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 3000
+          initialDelaySeconds: 60
+          periodSeconds: 10
+
+---
+apiVersion: v1
+kind: Service 
+metadata:
+  name: nachet-frontend-svc
+  namespace: nachet
+spec:
+  clusterIP: None
+  selector:
+    app: nachet-frontend
+  ports:
+    - protocol: TCP
+      port: 3000

kubernetes/apps/nachet/nachet-ingress.yml

@@ -0,0 +1,59 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nachet-backend-ingress
+  namespace: nachet
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2 # https://kubernetes.github.io/ingress-nginx/examples/rewrite/
+    cert-manager.io/cluster-issuer: letsencrypt-http
+    ingress.kubernetes.io/force-ssl-redirect: "true"
+    kubernetes.io/tls-acme: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - nachet.ninebasetwo.xyz
+    secretName: aciacfia-tls
+  rules:
+  - host: nachet.ninebasetwo.xyz
+    http:
+      paths:
+      - path: /api(/|$)(.*)
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: nachet-backend-svc
+            port:
+              number: 8080
+
+---
+# For more information check https://github.com/nginxinc/kubernetes-ingress/issues/323
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nachet-frontend-ingress
+  namespace: nachet
+  annotations:
+    nginx.ingress.kubernetes.io/add-base-url: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    cert-manager.io/cluster-issuer: letsencrypt-http
+    ingress.kubernetes.io/force-ssl-redirect: "true"
+    kubernetes.io/tls-acme: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - nachet.ninebasetwo.xyz
+    secretName: aciacfia-tls
+  rules:
+  - host: nachet.ninebasetwo.xyz
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: nachet-frontend-svc
+            port:
+              number: 3000

kubernetes/apps/nachet/nachet-namespace.yml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: nachet
+  labels:
+    name: nachet