Adds DNS (#8)

http://gke-test-2.coilysiren.me/api/healthcheck

<img width="562" alt="image"
src="https://github.com/coilysiren/k8s-gcp/assets/5768468/63f22428-0b99-4a0f-8bd0-6a478f257c6f">

infrastructure/application/main.tf

@@ -0,0 +1,27 @@
+locals {
+ name = yamldecode(file("../../config.yml")).name
+}
+
+# https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/client_config
+data "google_client_config" "default" {}
+
+data "kubernetes_service" "service" {
+ metadata {
+ name = "application"
+ }
+}
+
+# https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route53_zone
+data "aws_route53_zone" "zone" {
+ name = "coilysiren.me."
+ private_zone = false
+}
+
+# https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record
+resource "aws_route53_record" "record" {
+ zone_id = data.aws_route53_zone.zone.zone_id
+ name = "${local.name}.coilysiren.me."
+ type = "A"
+ ttl = "300"
+ records = [data.kubernetes_service.service.status.0.load_balancer.0.ingress.0.ip]
+}

infrastructure/application/state.tf

@@ -0,0 +1,37 @@
+terraform {
+ backend "gcs" {
+ bucket = "coilysiren-k8s-gpc-tfstate-0"
+ prefix = "terraform/state/application"
+ }
+}
+
+# https://registry.terraform.io/providers/hashicorp/google/latest/docs
+provider "google" {
+ project = yamldecode(file("../../config.yml")).project
+ region = yamldecode(file("../../config.yml")).region
+}
+
+# https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs
+provider "kubernetes" {
+ host = "https://${data.terraform_remote_state.foundation.outputs.endpoint}"
+ token = data.google_client_config.default.access_token
+ cluster_ca_certificate = base64decode(data.terraform_remote_state.foundation.outputs.ca_certificate)
+}
+
+# https://registry.terraform.io/providers/hashicorp/aws/latest/docs
+provider "aws" {
+ # AWS doesn't have the same regions as GCP, and also doesn't format then in the same way.
+ # That said, this isn't a huge issue because we are only using AWS for DNS.
+ region = "us-east-1"
+}
+
+# https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/project
+data "google_project" "default" {}
+
+data "terraform_remote_state" "foundation" {
+ backend = "gcs"
+ config = {
+ bucket = "coilysiren-k8s-gpc-tfstate-0"
+ prefix = "terraform/state"
+ }
+}

infrastructure/main.tf → infrastructure/foundation/main.tf

@@ -1,5 +1,5 @@
 locals {
- name = yamldecode(file("../config.yml")).name
+ name = yamldecode(file("../../config.yml")).name
 }
 
 # https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/client_config
@@ -159,9 +159,12 @@ resource "google_artifact_registry_repository" "repository" {
  }
 }
 
-# https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs
-provider "kubernetes" {
- host = "https://${module.gke.endpoint}"
- token = data.google_client_config.default.access_token
- cluster_ca_certificate = base64decode(module.gke.ca_certificate)
+output "endpoint" {
+ value = module.gke.endpoint
+ sensitive = true
+}
+
+output "ca_certificate" {
+ value = module.gke.ca_certificate
+ sensitive = true
 }

infrastructure/state.tf → infrastructure/foundation/state.tf

@@ -7,8 +7,8 @@ terraform {
 
 # https://registry.terraform.io/providers/hashicorp/google/latest/docs
 provider "google" {
- project = yamldecode(file("../config.yml")).project
- region = yamldecode(file("../config.yml")).region
+ project = yamldecode(file("../../config.yml")).project
+ region = yamldecode(file("../../config.yml")).region
 }
 
 # https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/project

infrastructure/kubeconfig.yml

@@ -0,0 +1,46 @@
+apiVersion: v1
+items:
+- apiVersion: v1
+ kind: Service
+ metadata:
+ annotations:
+ cloud.google.com/neg: '{"ingress":true}'
+ finalizers:
+ - service.kubernetes.io/load-balancer-cleanup
+ labels:
+ app: application
+ name: application
+ spec:
+ allocateLoadBalancerNodePorts: true
+ externalTrafficPolicy: Cluster
+ internalTrafficPolicy: Cluster
+ ports:
+ - port: 80
+ targetPort: 8080
+ selector:
+ app: application
+ type: LoadBalancer
+- apiVersion: apps/v1
+ kind: Deployment
+ metadata:
+ labels:
+ app: application
+ name: application
+ spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: application
+ template:
+ metadata:
+ labels:
+ app: application
+ spec:
+ containers:
+ - image: us-central1-docker.pkg.dev/root-territory-384205/repository/gke-test-2:dns-21c2dd5-kai
+ name: application
+ ports:
+ - containerPort: 8080
+kind: List
+metadata:
+ resourceVersion: ''

tasks.py

@@ -17,6 +17,7 @@ class Context:
  version: str
  docker_repo: str
  python_version: str
+ kubeconfig = "./infrastructure/kubeconfig.yml"
 
  def __init__(self, ctx) -> None:
  self.invoke = ctx
@@ -61,6 +62,20 @@ def project(self) -> str:
  """get the project id"""
  return self.config["project"]
 
+ def get_kubeconfig(self) -> str:
+ with open(self.kubeconfig, "r", encoding="utf-8") as _file:
+ return yaml.safe_load(_file.read())
+
+ def update_image(self, kubeconfig: dict, image: str) -> dict:
+ for item in kubeconfig["items"]:
+ if item["kind"] == "Deployment":
+ item["spec"]["template"]["spec"]["containers"][0]["image"] = image
+ return kubeconfig
+
+ def write_kubeconfig(self, value: str) -> None:
+ with open(self.kubeconfig, "w", encoding="utf-8") as _file:
+ yaml.dump(value, _file)
+
  def _repo_name(self) -> str:
  """get the name of the repository"""
  return self.stdout("basename -s .git `git config --get remote.origin.url`")
@@ -105,8 +120,9 @@ def deploy(ctx: [invoke.Context, Context]):
  # build docker, get the tag
  build(ctx.invoke)
 
- # deploy and infrastructure changes
- ctx.run("cd infrastructure && terraform apply")
+ # deploy foundational infrastructure
+ ctx.run("cd infrastructure/foundation && terraform init")
+ ctx.run("cd infrastructure/foundation && terraform apply")
 
  # set the project
  ctx.run(f"gcloud config set project {ctx.project}")
@@ -133,9 +149,14 @@ def deploy(ctx: [invoke.Context, Context]):
  ctx.run(f"docker push {ctx.docker_repo}:{ctx.version}")
 
  # deploy to k8s cluster
- ctx.run(f"kubectl create deployment {ctx.name} --image={ctx.docker_repo}:{ctx.version} --port=8080", warn=True)
- ctx.run(f"kubectl set image deployment/{ctx.name} {ctx.name}={ctx.docker_repo}:{ctx.version}")
- ctx.run(f"kubectl expose deployment {ctx.name} --type=LoadBalancer --port=80 --target-port=8080", warn=True)
+ kubeconfig = ctx.get_kubeconfig()
+ kubeconfig = ctx.update_image(kubeconfig, f"{ctx.docker_repo}:{ctx.version}")
+ ctx.write_kubeconfig(kubeconfig)
+ ctx.run(f"kubectl apply -f {ctx.kubeconfig}")
+
+ # deploy application infrastructure
+ ctx.run("cd infrastructure/application && terraform init")
+ ctx.run("cd infrastructure/application && terraform apply")
 
 
 @invoke.task