auth deployment

Makefile

@@ -66,7 +66,7 @@ build-client-image:
 		-f ./src/Dockerfile.frontend ./src/$(SERVICE)
 
 	@docker push git.vdhsn.com/barretthousen/client-$(SERVICE):$(VERSION)
-	@[ ! -z $(ENV) ] && docker tag git.vdhsn.com/barretthousen/client-$(SERVICE):$(VERSION) git.vdhsn.com/barretthousen/client-$(SERVICE):beta || true
+	@[ ! -z $(ENV) ] && docker tag git.vdhsn.com/barretthousen/client-$(SERVICE):$(VERSION) git.vdhsn.com/barretthousen/client-$(SERVICE):$(ENV) || true
 	@[ ! -z $(ENV) ] && docker push git.vdhsn.com/barretthousen/client-$(SERVICE):$(ENV) || true
 
 .PHONY: build-backend-image
@@ -84,8 +84,8 @@ build-backend-image:
 
 	@docker push git.vdhsn.com/barretthousen/service-$(SERVICE):$(VERSION)
 
-	@[ ! -z $(ENV) ] && docker tag git.vdhsn.com/barretthousen/service-$(SERVICE):$(VERSION) git.vdhsn.com/barretthousen/service-$(SERVICE):beta || true
-	@[ ! -z $(ENV) ] && docker push git.vdhsn.com/barretthousen/service-$(SERVICE):beta || true
+	@[ ! -z $(ENV) ] && docker tag git.vdhsn.com/barretthousen/service-$(SERVICE):$(VERSION) git.vdhsn.com/barretthousen/service-$(SERVICE):$(ENV) || true
+	@[ ! -z $(ENV) ] && docker push git.vdhsn.com/barretthousen/service-$(SERVICE):$(ENV) || true
 
 # TODO: investigate tagging without needing to pull? https://dille.name/blog/2018/09/20/how-to-tag-docker-images-without-pulling-them/
 .PHONY: promote-client-prod

Tiltfile

@@ -166,3 +166,6 @@ bh_backend_service(service="proxy-web", port_forwards=[
 
 bh_client(service='web', deps=["proxy-web-local"])
 bh_client(service='admin', deps=["proxy-admin-local"])
+
+
+

doc/deployment.md

@@ -61,6 +61,7 @@ helm install --upgrade bh-db bitnami/postgresql -n 'barretthousen-beta' \
 export ENV=beta; # if not specified, will only build and push for the git commit
 make build-backend-image SERVICE=catalog
 make build-backend-image SERVICE=runner
+make build-backend-image SERVICE=auth
 make build-backend-image SERVICE=proxy-admin
 make build-backend-image SERVICE=proxy-web
 
@@ -78,6 +79,9 @@ kubectl rollout status -n barretthousen-beta deployment runner-beta -w
 kubectl rollout restart -n barretthousen-beta deployment catalog-beta
 kubectl rollout status -n barretthousen-beta deployment catalog-beta  -w
 
+kubectl rollout restart -n barretthousen-beta deployment auth-beta
+kubectl rollout status -n barretthousen-beta deployment auth-beta  -w
+
 kubectl rollout restart -n barretthousen-beta deployment proxy-admin-beta
 kubectl rollout status -n barretthousen-beta deployment proxy-admin-beta -w
 
@@ -95,6 +99,7 @@ kubectl rollout status -n barretthousen-beta deployment admin-client-beta -w
 ```sh
 make promote-backend-prod SERVICE=catalog
 make promote-backend-prod SERVICE=runner
+make promote-backend-prod SERVICE=auth
 make promote-backend-prod SERVICE=proxy-admin
 make promote-backend-prod SERVICE=proxy-web
 

env/base/auth-deployment.yaml

@@ -46,6 +46,7 @@ spec:
   ports:
     - port: 5001
       targetPort: 5001
+      name: grpc
 ---
 apiVersion: v1
 kind: Secret

env/base/catalog-deployment.yaml

@@ -46,6 +46,7 @@ spec:
   ports:
     - port: 5001
       targetPort: 5001
+      name: grpc
 ---
 apiVersion: v1
 kind: Secret

env/base/runner-deployment.yaml

@@ -46,7 +46,7 @@ spec:
   ports:
     - port: 5001
       targetPort: 5001
-
+      name: grpc
 ---
 apiVersion: v1
 kind: Secret

env/beta/auth-secret.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: auth-config
+stringData:
+  config.yaml: |
+    log_level: 2
+    port: 5001
+    db_service:
+        scheme: postgres
+        port: 5432
+        host: bh-db
+        name: bh
+        user: auth-service
+        password: auth-service
+    db_migrate:
+        scheme: postgres
+        port: 5432
+        host: bh-db
+        name: bh
+        user: postgres
+        password: bh-admin-beta

env/beta/kustomization.yaml

@@ -7,10 +7,11 @@ namespace: barretthousen-beta
 
 patchesStrategicMerge:
   - sync-cronjob.yaml
+  - auth-secret.yaml
   - catalog-secret.yaml
+  - runner-secret.yaml
   - proxy-admin-secret.yaml
   - proxy-web-secret.yaml
-  - runner-secret.yaml
 
 patches:
   - target:
@@ -27,6 +28,13 @@ patches:
       - op: replace
         path: /spec/rules/0/host
         value: beta.barretthousen.com
+  - target:
+      kind: Deployment
+      name: auth
+    patch: |-
+      - op: replace
+        path: /spec/template/spec/containers/0/image
+        value: git.vdhsn.com/barretthousen/service-auth:beta
   - target:
       kind: Deployment
       name: catalog