Feature/bff to helm (#33)

* Added health and api prefix

* Added BFF

* Moved security into backend. Fronted should not depend on KC

* Reordered the dependencies

* Fixed a dependency problem

* Made database work for Health-Check

* Changed defaults to make them less dangerous

* Moved Health-Module into modules

* Renamed BFF-Module to backend-for-frontend

* Health module reference broke

charts/dbildungs-iam/charts/dbildungs-iam-keycloak-dev/templates/dbildungs-iam-deployment-keycloak.yaml

@@ -20,6 +20,7 @@ spec:
           image: quay.io/keycloak/keycloak:22.0.3
           args:
             - start-dev
+            - "--import-realm"
           imagePullPolicy: IfNotPresent
           ports:
             - name: web
@@ -31,5 +32,13 @@ spec:
               value: admin
             - name: KC_PROXY
               value: "edge"
+          volumeMounts:
+           - mountPath: "/opt/keycloak/data/import"
+             name: "realm-config"
+             readOnly: true
       restartPolicy: Always
+      volumes:
+        - name: realm-config
+          secret:
+            secretName: realm-config-secret
 

charts/dbildungs-iam/charts/dbildungs-iam-keycloak-dev/templates/dbildungs-iam-keycloak-config-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: realm-config-secret
+type: opaque
+data:
+  realm-spsh.json: |-
+      {{.Files.Get "dev-realm-spsh.json" | b64enc}}

charts/dbildungs-iam/charts/dbildungs-iam-keycloak-dev/values.yaml

@@ -1 +1,2 @@
-keycloakHostname: "keycloak.dev.spsh.dbildungsplattform.de"
+keycloakHostname: "keycloak.dev.spsh.dbildungsplattform.de"
+keycloakPublic: false

charts/dbildungs-iam/templates/dbildungs-iam-deployment.yaml → charts/dbildungs-iam/templates/dbildungs-iam-deployment-backend.yaml

@@ -1,7 +1,7 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: {{ .Release.Name }}-deployment
+  name: dbiam-deployment-backend
   labels:
     app.kubernetes.io/name: dbildungs-iam
 spec:
@@ -16,7 +16,7 @@ spec:
         layer: dbildungs-iam-backend
     spec:
       containers:
-        - name: dbildungs-iam
+        - name: dbildungs-iam-backend
           image: {{.Values.dbildungsIamContainer}}
           imagePullPolicy: Always
           ports:

charts/dbildungs-iam/templates/dbildungs-iam-deployment-bff.yaml

@@ -0,0 +1,56 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dbiam-deployment-bff
+  labels:
+    app.kubernetes.io/name: dbildungs-iam
+spec:
+  selector:
+    matchLabels:
+      layer: dbildungs-iam-bff
+  replicas: {{.Values.dbildungsIamReplications}}
+  template:
+    metadata:
+      name: dbildungs-iam
+      labels:
+        layer: dbildungs-iam-bff
+    spec:
+      containers:
+        - name: dbildungs-iam-bff
+          image: {{.Values.dbildungsIamContainer}}
+          imagePullPolicy: Always
+          command: ["node", "dist/src/backend-for-frontend/main.js"]
+          ports:
+             - name: web
+               containerPort: 8080
+          env:
+            - name: NODE_ENV
+              value: {{.Values.environment}}
+            - name: DEPLOY_STAGE
+              value: {{.Values.environment}}
+          volumeMounts:
+            - mountPath: /app/config/
+              name: config
+              readOnly: true
+          resources:
+            limits:
+              cpu: {{.Values.dbildungsIamCpuMax}}
+              memory: {{.Values.dbildungsIamMemMax}}
+          livenessProbe:
+            initialDelaySeconds: 10
+            httpGet:
+              port: 8080
+              scheme: 'HTTP'
+              path: '/health'
+          readinessProbe:
+            initialDelaySeconds: 10
+            httpGet:
+              port: 8080
+              scheme: 'HTTP'
+              path: '/health'
+      restartPolicy: Always
+      volumes:
+        - name: config
+          secret:
+            secretName: {{.Values.secrets.name | default (print .Release.Name "-secret")}}
+

charts/dbildungs-iam/templates/dbildungs-iam-ingress.yaml

@@ -14,13 +14,13 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: dbiam
+                name: dbiam-bff
                 port:
                   number: 80
           - path: /docs
             pathType: Prefix
             backend:
               service:
-                name: dbiam
+                name: dbiam-bff
                 port:
                   number: 80

charts/dbildungs-iam/templates/dbildungs-iam-service.yaml → charts/dbildungs-iam/templates/dbildungs-iam-service-backend.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: dbiam
+  name: dbiam-backend
   labels:
     app.kubernetes.io/name: dbildungs-iam
 spec:

charts/dbildungs-iam/templates/dbildungs-iam-service-bff.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: dbiam-bff
+  labels:
+    app.kubernetes.io/name: dbildungs-iam
+spec:
+  selector:
+    layer: dbildungs-iam-bff
+  ports:
+    - protocol: TCP
+      name: web
+      port: {{.Values.dbildungsIamExternalPort}}
+      targetPort: web
+  type: ClusterIP
+

charts/dbildungs-iam/values.yaml

@@ -22,5 +22,7 @@ secrets:
 # If we're running inside an environment with a Prometheus-Operator installed we configure a service monitor
 enableServiceMonitor: false
 
-keycloakEnabled: true
-keycloakPublic: true
+# Both of these are disabled as to make them intentional
+keycloakEnabled: false
+dbildungs-iam-keycloak-dev:
+  keycloakPublic: false

nest-cli.json

@@ -19,10 +19,10 @@
                 "tsConfigPath": "tsconfig.build.json"
             }
         },
-        "frontend": {
+        "backend-for-frontend": {
             "type": "application",
             "root": "src",
-            "entryFile": "src/frontend/main",
+            "entryFile": "src/backend-for-frontend/main",
             "sourceRoot": "src",
             "compilerOptions": {
                 "tsConfigPath": "tsconfig.build.json"