openshift-dev.yml

apiVersion: v1
kind: Template
metadata:
  name: todoapp
  annotations:
    description: infrastructure
objects:
# role binding (view pour le service account default: permettre d'effectuer les requetes rest concernant le deployment config)
- apiVersion: v1
  kind: RoleBinding
  metadata:
    name: view
  roleRef:
    name: view
  subjects:
  - kind: ServiceAccount
    name: default
# Secret
- apiVersion: v1
  kind: Secret
  metadata:
    name: mongodb-write-secret
  data:
    user: ZGV2dXNlcg==
    password: ZGV2cGFzc3dvcmQ=
    admin_password: YWRtaW5wYXNzd29yZA==
# Config map
- apiVersion: v1
  kind: ConfigMap
  metadata:
    name: mongodb-write-config-map
  data:
    database: eventstoredb
# job purge databases (don't use in production ! only for dev !)
# After reflexion I'll keep it but in fact it is useless because it cannot be reexecuted.
# To execute a Job I have to create a new one ...
# Also currently web console do not support job. cf. https://trello.com/c/MNqXVNHs
#- apiVersion: batch/v1
#  kind: Job
#  metadata:
#    labels:
#      app: purge-databases
#    name: purge-databases
#  spec:
#    parallelism: 1
#    completions: 1
#    template:
#      metadata:
#        labels:
#          app: purge-databases
#        name: purge-databases
#      spec:
#        containers:
#        - name: purge-eventstore-database
#          env:
#          - name: KUBERNETES_NAMESPACE
#            valueFrom:
#              fieldRef:
#                apiVersion: v1
#                fieldPath: metadata.namespace
#          - name: MONGODB_USER
#            valueFrom:
#              secretKeyRef:
#                name: mongodb-write-secret
#                key: user
#          - name: MONGODB_PASSWORD
#            valueFrom:
#              secretKeyRef:
#                name: mongodb-write-secret
#                key: password
#          - name: MONGODB_ADMIN_PASSWORD
#            valueFrom:
#              secretKeyRef:
#                name: mongodb-write-secret
#                key: admin_password
#          - name: MONGODB_DATABASE
#            valueFrom:
#              configMapKeyRef:
#                name: mongodb-write-config-map
#                key: database
#          image: centos/mongodb-36-centos7
#          command:
#              - "/bin/sh"
#              - "-i"
#              - "-c"
#              - mongo eventstore-database.$(KUBERNETES_NAMESPACE).svc:27017/$MONGODB_DATABASE -u $MONGODB_USER -p $MONGODB_PASSWORD
#                --eval="db = db.getSiblingDB('$(MONGODB_DATABASE)');db.domainevents.drop();db.trackingtokens.drop();db.snapshotevents.drop();db.sagas.drop();quit()"
#        - name: purge-solr
#          env:
#          - name: KUBERNETES_NAMESPACE
#            valueFrom:
#              fieldRef:
#                apiVersion: v1
#                fieldPath: metadata.namespace
#          image: giantswarm/tiny-tools
#          command: ["sh", "-c", "curl http://solr.$(KUBERNETES_NAMESPACE).svc:8983/solr/update -H 'Content-type: text/xml' --data-binary '<delete><query>*:*</query></delete>'"]
#        restartPolicy: OnFailure
# mongo write event store database (version ephemere) + rest
- apiVersion: v1
  kind: Route
  metadata:
    labels:
      app: eventstore-database-rest
    name: eventstore-database-rest
  spec:
    port:
      targetPort: 3000
    to:
      kind: Service
      name: eventstore-database
- apiVersion: v1
  kind: Service
  metadata:
    annotations:
      template.openshift.io/expose-uri: mongodb://{.spec.clusterIP}:{.spec.ports[?(.name=="mongo")].port}
    labels:
      app: eventstore-database
    name: eventstore-database
  spec:
    ports:
    - name: mongo
      nodePort: 0
      port: 27017
      protocol: TCP
      targetPort: 27017
    - name: mongo-rest
      nodePort: 0
      port: 3000
      protocol: TCP
      targetPort: 3000
    selector:
      name: eventstore-database
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    annotations:
      template.alpha.openshift.io/wait-for-ready: 'true'
    labels:
      app: eventstore-database
    name: eventstore-database
  spec:
    replicas: 1
    selector:
      name: eventstore-database
    triggers:
    - type: ConfigChange
    strategy:
      type: Recreate
    template:
      metadata:
        labels:
          name: eventstore-database
      spec:
        containers:
        - capabilities: {}
          env:
          - name: MONGODB_USER
            valueFrom:
              secretKeyRef:
                name: mongodb-write-secret
                key: user
          - name: MONGODB_PASSWORD
            valueFrom:
              secretKeyRef:
                name: mongodb-write-secret
                key: password
          - name: MONGODB_ADMIN_PASSWORD
            valueFrom:
              secretKeyRef:
                name: mongodb-write-secret
                key: admin_password
          - name: MONGODB_DATABASE
            valueFrom:
              configMapKeyRef:
                name: mongodb-write-config-map
                key: database
          image: centos/mongodb-36-centos7
          imagePullPolicy: IfNotPresent
          livenessProbe:
            initialDelaySeconds: 30
            tcpSocket:
              port: 27017
            timeoutSeconds: 1
          name: mongodb
          ports:
          - containerPort: 27017
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - "/bin/sh"
              - "-i"
              - "-c"
              - mongo 127.0.0.1:27017/$MONGODB_DATABASE -u $MONGODB_USER -p $MONGODB_PASSWORD
                --eval="quit()"
            initialDelaySeconds: 3
            timeoutSeconds: 1
          resources:
            limits:
              memory: 256Mi
          securityContext:
            capabilities: {}
            privileged: false
          terminationMessagePath: "/dev/termination-log"
          volumeMounts:
          - mountPath: "/var/lib/mongodb/data"
            name: eventstore-database-data
        - name: eventstore-database-rest
          env:
          - name: MONGODB_USER
            valueFrom:
              secretKeyRef:
                name: mongodb-write-secret
                key: user
          - name: MONGODB_PASSWORD
            valueFrom:
              secretKeyRef:
                name: mongodb-write-secret
                key: password
          - name: MONGODB_DATABASE
            valueFrom:
              configMapKeyRef:
                name: mongodb-write-config-map
                key: database
          - name: ME_CONFIG_DBSTRING
            value: mongodb://$(MONGODB_USER):$(MONGODB_PASSWORD)@localhost:27017/$(MONGODB_DATABASE)
          - name: ME_CONFIG_READONLY
            value: y
          image: linuxenko/mongo-rest
          ports:
          - containerPort: 3000
            protocol: TCP
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        volumes:
        - emptyDir:
            medium: ''
          name: eventstore-database-data
# solr
- apiVersion: v1
  kind: Service
  metadata:
    labels:
      app: solr
    name: solr
  spec:
    ports:
    - name: 8983-tcp
      port: 8983
      protocol: TCP
      targetPort: 8983
    selector:
      app: solr
    sessionAffinity: None
    type: ClusterIP
- apiVersion: v1
  kind: Route
  metadata:
    labels:
      app: solr
    name: solr
  spec:
    port:
      targetPort: 8983-tcp
    to:
      kind: Service
      name: solr
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      app: solr
    name: solr
  spec:
    replicas: 1
    selector:
      app: solr
    triggers:
    - type: ConfigChange
    strategy:
      activeDeadlineSeconds: 21600
      rollingParams:
        intervalSeconds: 1
        maxSurge: 25%
        maxUnavailable: 25%
        timeoutSeconds: 600
        updatePeriodSeconds: 1
        post:
          failurePolicy: Retry
          execNewPod:
            containerName: tools
            env:
            - name: KUBERNETES_NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            command: ["sh", "-c", "curl -X GET -G http://solr.$(KUBERNETES_NAMESPACE).svc:8983/solr/admin/cores -d action=CREATE -d name=mycores -d collection=my_collection -d configSet=_default"]
      type: Rolling
    template:
      metadata:
        labels:
          app: solr
      spec:
        containers:
        - image: giantswarm/tiny-tools
          name: tools
          command:
          - tail
          - '-f'
          - /dev/null
        - image: solr:7.4.0-alpine
          imagePullPolicy: Always
          name: solr
          ports:
          - containerPort: 8983
            protocol: TCP
          readinessProbe:
            tcpSocket:
              port: 8983
            initialDelaySeconds: 5
            periodSeconds: 10
          livenessProbe:
            tcpSocket:
              port: 8983
            initialDelaySeconds: 15
            periodSeconds: 20
          terminationMessagePath: "/dev/termination-log"
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: "/opt/solr/server/solr/mycores"
            name: solr-data
          - mountPath: "/opt/solr/server/logs"
            name: solr-log
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - emptyDir:
            medium: ''
          name: solr-data
        - emptyDir:
            medium: ''
          name: solr-log