eShopOnAbp helm deployment configuration

etc/k8s/README.md

@@ -0,0 +1,33 @@
+ ### Pre-requirements
+
+* Docker Desktop with Kubernetes enabled
+* Install [NGINX ingress](https://kubernetes.github.io/ingress-nginx/deploy/) for k8s
+OR
+* Install NGINX ingress using helm
+```
+helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
+helm repo update
+
+helm install ingress-nginx ingress-nginx/ingress-nginx
+```
+* Install [Helm](https://helm.sh/docs/intro/install/) for running helm charts
+
+
+### How to run?
+
+* Add entries to the hosts file (in Windows: `C:\Windows\System32\drivers\etc\hosts`):
+
+````
+127.0.0.1 eshoponabp-public-web
+127.0.0.1 eshoponabp-authserver
+127.0.0.1 eshoponabp-identity
+127.0.0.1 eshoponabp-administration
+127.0.0.1 eshoponabp-saas
+127.0.0.1 eshoponabp-public-webgateway
+````
+
+* Run `build-images.ps1` in the `scripts` directory.
+* Run `deploy-staging.ps1` in the `helm-chart` directory. It is deployed with the `eventhub` namespace.
+* *You may wait ~30 seconds on first run for preparing the database*.
+* Browse https://eshoponabp-public-web and https://eshoponabp-authserver
+* Username: `admin`, password: `1q2w3E*`.

etc/k8s/deploy-staging.ps1

@@ -0,0 +1,3 @@
+param ($version='latest')
+
+helm upgrade --install eshoponabp eshoponabp --namespace eshop --create-namespace --set global.eventHubImageVersion=$version

etc/k8s/eshoponabp/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

etc/k8s/eshoponabp/Chart.yaml

@@ -0,0 +1,24 @@
+apiVersion: v2
+name: eshoponabp
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "1.16.0"

etc/k8s/eshoponabp/charts/administration/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: administration
+appVersion: "1.0"
+description: eShopOnAbp Administration Microservice
+version: 1.0.0
+type: application

etc/k8s/eshoponabp/charts/administration/templates/administration-ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}-ingress
+ annotations:
+ kubernetes.io/ingress.class: "nginx"
+ nginx.ingress.kubernetes.io/rewrite-target: /
+ nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+ nginx.ingress.kubernetes.io/proxy-buffer-size: "{{ .Values.global.nginxProxyBufferSize }}"
+ nginx.ingress.kubernetes.io/proxy-buffers-number: "{{ .Values.global.nginxProxyBuffersNumber }}"
+ cert-manager.io/cluster-issuer: letsencrypt
+spec:
+ tls:
+ - hosts:
+ - {{ .Values.global.administrationService.domain }}
+ secretName: {{ .Release.Name }}-{{ .Chart.Name }}-tls
+ rules:
+ - host: "{{ .Values.global.administrationService.domain }}"
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ port:
+ number: 80

etc/k8s/eshoponabp/charts/administration/templates/administration-service.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ ports:
+ - name: "80"
+ port: 80
+ - name: "443"
+ port: 443
+ selector:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}

etc/k8s/eshoponabp/charts/administration/templates/administration.yaml

@@ -0,0 +1,29 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ selector:
+ matchLabels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ template:
+ metadata:
+ labels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ spec:
+ containers:
+ - image: {{ .Values.global.administrationService.containerImage }}:{{ .Values.global.eventHubImageVersion }}
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ env:
+{{ include "eshoponabp.global.env" . | indent 8 }}
+ - name: "ConnectionStrings__AdministrationService"
+ value: {{ .Values.global.administrationService.connString }}
+ - name: "ConnectionStrings__SaasService"
+ value: {{ .Values.global.saasService.connString }} 
+

etc/k8s/eshoponabp/charts/authserver/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: authserver
+appVersion: "1.0"
+description: eShopOnAbp AuthServer Application
+version: 1.0.0
+type: application

etc/k8s/eshoponabp/charts/authserver/templates/authserver-ingress.yaml

@@ -0,0 +1,29 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}-ingress
+ annotations:
+ kubernetes.io/ingress.class: nginx
+ nginx.ingress.kubernetes.io/rewrite-target: /
+ nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+ nginx.ingress.kubernetes.io/proxy-buffer-size: "{{ .Values.global.nginxProxyBufferSize }}"
+ nginx.ingress.kubernetes.io/proxy-buffers-number: "{{ .Values.global.nginxProxyBuffersNumber }}"
+ cert-manager.io/cluster-issuer: letsencrypt
+ nginx.ingress.kubernetes.io/configuration-snippet: |
+ more_set_input_headers "from-ingress: true";
+spec:
+ tls:
+ - hosts:
+ - {{ .Values.global.authServer.domain }}
+ secretName: {{ .Release.Name }}-{{ .Chart.Name }}-tls
+ rules:
+ - host: "{{ .Values.global.authServer.domain }}"
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ port:
+ number: 80

etc/k8s/eshoponabp/charts/authserver/templates/authserver-service.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ ports:
+ - name: "80"
+ port: 80
+ - name: "443"
+ port: 443
+ selector:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}

etc/k8s/eshoponabp/charts/authserver/templates/authserver.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ selector:
+ matchLabels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ template:
+ metadata:
+ labels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ spec:
+ containers:
+ - image: {{ .Values.global.authServer.containerImage }}:{{ .Values.global.eshoponabpImageVersion }}
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ env:
+{{ include "eshoponabp.global.env" . | indent 8 }}
+ - name: "ConnectionStrings__IdentityService"
+ value: {{ .Values.global.identityService.connString }}
+ - name: "ConnectionStrings__AdministrationService"
+ value: {{ .Values.global.administrationService.connString }}
+ - name: "ConnectionStrings__SaasService"
+ value: {{ .Values.global.saasService.connString }}

etc/k8s/eshoponabp/charts/identity/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: identity
+appVersion: "1.0"
+description: eShopOnAbp Identity Microservice
+version: 1.0.0
+type: application

etc/k8s/eshoponabp/charts/identity/templates/identity-ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}-ingress
+ annotations:
+ kubernetes.io/ingress.class: "nginx"
+ nginx.ingress.kubernetes.io/rewrite-target: /
+ nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+ nginx.ingress.kubernetes.io/proxy-buffer-size: "{{ .Values.global.nginxProxyBufferSize }}"
+ nginx.ingress.kubernetes.io/proxy-buffers-number: "{{ .Values.global.nginxProxyBuffersNumber }}"
+ cert-manager.io/cluster-issuer: letsencrypt
+spec:
+ tls:
+ - hosts:
+ - {{ .Values.global.identityService.domain }}
+ secretName: {{ .Release.Name }}-{{ .Chart.Name }}-tls
+ rules:
+ - host: "{{ .Values.global.identityService.domain }}"
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ port:
+ number: 80

etc/k8s/eshoponabp/charts/identity/templates/identity-service.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ ports:
+ - name: "80"
+ port: 80
+ - name: "443"
+ port: 443
+ selector:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}

etc/k8s/eshoponabp/charts/identity/templates/identity.yaml

@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+spec:
+ selector:
+ matchLabels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ template:
+ metadata:
+ labels:
+ app: {{ .Release.Name }}-{{ .Chart.Name }}
+ spec:
+ containers:
+ - image: {{ .Values.global.identityService.containerImage }}:{{ .Values.global.eventHubImageVersion }}
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ ports:
+ - name: http
+ containerPort: 80
+ - name: https
+ containerPort: 443
+ env:
+{{ include "eshoponabp.global.env" . | indent 8 }}
+ - name: "ConnectionStrings__IdentityService"
+ value: {{ .Values.global.identityService.connString }}
+ - name: "ConnectionStrings__AdministrationService"
+ value: {{ .Values.global.administrationService.connString }}
+ - name: "ConnectionStrings__SaasService"
+ value: {{ .Values.global.saasService.connString }} 
+

etc/k8s/eshoponabp/charts/public-web/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: public-web
+appVersion: "1.0"
+description: eShopOnAbp Public Web Application
+version: 1.0.0
+type: application

etc/k8s/eshoponabp/charts/public-web/templates/public-web-ingress.yaml

@@ -0,0 +1,37 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}-ingress
+ annotations:
+ kubernetes.io/ingress.class: nginx
+ nginx.ingress.kubernetes.io/rewrite-target: /
+ nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+ nginx.ingress.kubernetes.io/proxy-buffer-size: "{{ .Values.global.nginxProxyBufferSize }}"
+ nginx.ingress.kubernetes.io/proxy-buffers-number: "{{ .Values.global.nginxProxyBuffersNumber }}"
+{{- if eq .Release.Name "eh-az" }}
+ nginx.ingress.kubernetes.io/from-to-www-redirect: "true"
+{{- end }}
+ cert-manager.io/cluster-issuer: letsencrypt
+spec:
+ tls:
+ - hosts:
+ - {{ .Values.global.publicWeb.domain }}
+{{- if eq .Release.Name "eh-az" }}
+ - {{ print "www." .Values.global.publicWeb.domain }}
+{{- end }}
+ secretName: {{ .Release.Name }}-{{ .Chart.Name }}-tls
+ rules:
+{{- if eq .Release.Name "eh-az" }}
+ - host: "{{ print "www." .Values.global.publicWeb.domain }}"
+{{- else }}
+ - host: "{{ .Values.global.publicWeb.domain }}"
+{{- end }}
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: {{ .Release.Name }}-{{ .Chart.Name }}
+ port:
+ number: 80