BC-6683 - poc board collaboration server

.github/workflows/push.yml

@@ -46,7 +46,7 @@ jobs:
 
       - name: test image exists
         run: |
-         echo "IMAGE_EXISTS=$(docker manifest inspect ghcr.io/${{ github.repository }}:${{ github.sha }} > /dev/null && echo 1 || echo 0)" >> $GITHUB_ENV
+          echo "IMAGE_EXISTS=$(docker manifest inspect ghcr.io/${{ github.repository }}:${{ github.sha }} > /dev/null && echo 1 || echo 0)" >> $GITHUB_ENV
 
       - name: Build and push ${{ github.repository }}
         if: ${{ env.IMAGE_EXISTS == 0 }}
@@ -87,7 +87,7 @@ jobs:
     needs:
       - build_and_push
       - branch_meta
-    uses: hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@main
+    uses: hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@BC-6683-poc-board-collaboration-server
     with:
       branch: ${{ needs.branch_meta.outputs.branch }}
     secrets:

Dockerfile

@@ -20,4 +20,4 @@ RUN npm run build
 
 ENV NODE_ENV=production
 ENV NO_COLOR="true"
-CMD npm run start
+CMD npm run start:prod

README.md

@@ -2,7 +2,6 @@
 
 Proof of Concept for implementing a websocket-server that enables collaboration on column boards between different users.
 
-
 ## Installation
 
 ```bash
@@ -37,8 +36,8 @@ $ npm run test:cov
 
 ## Support
 
-Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please [read more here](https://docs.nestjs.com/support).
+Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please [read more here](https://docs.nestjs.com/support)..
 
 ## License
 
-GNU AFFERO GENERAL PUBLIC LICENSE V3 (see LICENSE)
+GNU AFFERO GENERAL PUBLIC LICENSE V3 (see LICENSE-file)

ansible/group_vars/all/poc-board-collaboration-server.yml

@@ -1,3 +1,3 @@
 ---
-POC_BOARD_COLLABORATION_SERVER_PORT: 8080
+POC_BOARD_COLLABORATION_SERVER_PORT: 3000
 POC_BOARD_COLLABORATION_SERVER_IMAGE: quay.io/schulcloudverbund/poc-board-collaboration-server

ansible/roles/poc-board-collaboration-server/meta/main.yml

@@ -1,7 +1,7 @@
 galaxy_info:
-  role_name: version-aggregator
+  role_name: poc-board-collaboration-server
   author: Schul-Cloud Verbund
-  description: role for the version-aggregator
+  description: role for the poc-board-collaboration-server
   company: Schul-Cloud Verbund
   license: license (AGPLv3)
   min_ansible_version: 2.8

ansible/roles/poc-board-collaboration-server/tasks/main.yml

@@ -1,17 +1,24 @@
-  - name: poc-board-collaboration-server configmap
-    kubernetes.core.k8s:
-      kubeconfig: ~/.kube/config
-      namespace: "{{ NAMESPACE }}"
-      template: configmap.yml.j2
+- name: poc-board-collaboration-server configmap
+  kubernetes.core.k8s:
+    kubeconfig: ~/.kube/config
+    namespace: '{{ NAMESPACE }}'
+    template: configmap.yml.j2
 
-  - name: poc-board-collaboration-server deployment
-    kubernetes.core.k8s:
-      kubeconfig: ~/.kube/config
-      namespace: "{{ NAMESPACE }}"
-      template: deployment.yml.j2
+- name: poc-board-collaboration-server deployment
+  kubernetes.core.k8s:
+    kubeconfig: ~/.kube/config
+    namespace: '{{ NAMESPACE }}'
+    template: deployment.yml.j2
 
-  - name: poc-board-collaboration-server service
-    kubernetes.core.k8s:
-      kubeconfig: ~/.kube/config 
-      namespace: "{{ NAMESPACE }}"
-      template: service.yml.j2
+- name: poc-board-collaboration-server service
+  kubernetes.core.k8s:
+    kubeconfig: ~/.kube/config
+    namespace: '{{ NAMESPACE }}'
+    template: service.yml.j2
+
+- name: poc-board-collaboration-server ingress
+  kubernetes.core.k8s:
+    kubeconfig: ~/.kube/config
+    namespace: '{{ NAMESPACE }}'
+    template: ingress.yml.j2
+    apply: yes

ansible/roles/poc-board-collaboration-server/templates/deployment.yml.j2

@@ -13,7 +13,7 @@ metadata:
     git.branch: {{ POC_BOARD_COLLABORATION_SERVER_BRANCH_NAME }}
     git.repo: {{ POC_BOARD_COLLABORATION_SERVER_REPO_NAME }}
 spec:
-  replicas: {{ POC_BOARD_COLLABORATION_SERVER_REPLICAS|default("1", true) }}
+  replicas: {{ POC_BOARD_COLLABORATION_SERVER_REPLICAS|default("3", true) }}
   strategy:
     type: RollingUpdate
     rollingUpdate:
@@ -52,13 +52,15 @@ spec:
         envFrom:
         - configMapRef:
             name: poc-board-collaboration-server-configmap
+        - secretRef:
+            name: api-secret
         resources:
           limits:
             cpu: {{ POC_BOARD_COLLABORATION_SERVER__CPU_LIMITS|default("1000m", true) }}
-            memory: {{ POC_BOARD_COLLABORATION_SERVER__MEMORY_LIMITS|default("32Mi", true) }}
+            memory: {{ POC_BOARD_COLLABORATION_SERVER__MEMORY_LIMITS|default("2Gi", true) }}
           requests:
             cpu: {{ POC_BOARD_COLLABORATION_SERVER__CPU_REQUESTS|default("100m", true) }}
-            memory: {{ POC_BOARD_COLLABORATION_SERVER__MEMORY_REQUESTS|default("32Mi", true) }}
+            memory: {{ POC_BOARD_COLLABORATION_SERVER__MEMORY_REQUESTS|default("128Mi", true) }}
 {% if AFFINITY_ENABLE is defined and AFFINITY_ENABLE|bool %}
       affinity:
         podAffinity:

ansible/roles/poc-board-collaboration-server/templates/ingress.yml.j2

@@ -0,0 +1,41 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ NAMESPACE }}-poc-board-collaboration-server-ingress
+  namespace: {{ NAMESPACE }}
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "{{ TLS_ENABELD|default("false") }}"
+    nginx.ingress.kubernetes.io/proxy-body-size: "{{ INGRESS_MAX_BODY_SIZE|default("2560") }}m"
+    nginx.org/client-max-body-size: "{{ INGRESS_MAX_BODY_SIZE|default("2560") }}m"
+    # The following properties added with BC-3606.
+    # The header size of the request is too big. For e.g. state and the permanent growing jwt.
+    # Nginx throws away the Location header, resulting in the 502 Bad Gateway.
+    nginx.ingress.kubernetes.io/client-header-buffer-size: 100k
+    nginx.ingress.kubernetes.io/http2-max-header-size: 96k
+    nginx.ingress.kubernetes.io/large-client-header-buffers: 4 100k
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 96k
+{% if CLUSTER_ISSUER is defined %}
+    cert-manager.io/cluster-issuer: {{ CLUSTER_ISSUER }}
+{% endif %}
+
+spec:
+  ingressClassName: {{ INGRESS_CLASS }}
+{% if CLUSTER_ISSUER is defined or (TLS_ENABELD is defined and TLS_ENABELD|bool) %}
+  tls:
+  - hosts:
+      - {{ DOMAIN }}
+{% if CLUSTER_ISSUER is defined %}
+    secretName: {{ DOMAIN }}-tls
+{% endif %}
+{% endif %}
+  rules:
+  - host: {{ DOMAIN }}
+    http:
+      paths:
+      - path: /poc-board-collaboration-server
+        backend:
+          service:
+            name: poc-board-collaboration-server-svc
+            port:
+              number: {{ POC_BOARD_COLLABORATION_SERVER_PORT }}
+        pathType: Prefix

package.json

@@ -25,6 +25,8 @@
     "@nestjs/platform-express": "^10.0.0",
     "@nestjs/platform-socket.io": "^10.3.3",
     "@nestjs/websockets": "^10.3.3",
+    "@socket.io/redis-adapter": "^8.3.0",
+    "ioredis": "^5.3.2",
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.8.1",
     "socket.io": "^4.7.4",

src/main.ts

@@ -1,8 +1,17 @@
 import { NestFactory } from '@nestjs/core';
 import { AppModule } from './app.module';
+import { RedisIoAdapter } from './socket/socket/redis-adapter';
 
 async function bootstrap() {
-  const app = await NestFactory.create(AppModule);
+  const app = await NestFactory.create(AppModule, {
+    cors: true,
+  });
+  app.setGlobalPrefix('bc-6683-poc-board-collaboration');
+
+  const redisIoAdapter = new RedisIoAdapter(app);
+  await redisIoAdapter.connectToRedis();
+
+  app.useWebSocketAdapter(redisIoAdapter);
   await app.listen(3000); // TODO: use env variable
 }
 bootstrap();