Final

.circleci/config.yml

@@ -0,0 +1,41 @@
+version: 2.1
+
+jobs:
+  build:            # job name
+    docker:         # executor type
+      - image: cimg/base:current # Docker image that installs Docker and has Git,
+    working_directory: ~/app
+    steps:
+      - checkout
+      - setup_remote_docker:
+          version: 20.10.14
+      - run:
+          name: Install dependencies
+          command: echo "No need to install anything. \n Just build and push the Docker image."
+      - run:
+          name: Build and push Docker image
+          command: |
+            echo "Inside the Build and push Docker image step"
+
+            docker --version # print the version for logging
+            docker-compose --version
+
+            docker-compose build  --no-cache --progress plain frontend
+            docker-compose build  --no-cache --progress plain reverseproxy
+            docker-compose build  --no-cache --progress plain feed-api
+            docker-compose build  --no-cache --progress plain user-api
+
+            echo "All images"
+            docker images
+
+            echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin
+
+            docker-compose push frontend
+            docker-compose push reverseproxy
+            docker-compose push feed-api
+            docker-compose push user-api
+workflows:
+  build-workflow: # This is the name of the workflow, feel free to change it to better match your workflow.
+    # Inside the workflow, you define the jobs you want to run.
+    jobs:
+      - build

.gitignore

@@ -40,3 +40,4 @@ venv/
 .elasticbeanstalk/*
 !.elasticbeanstalk/*.cfg.yml
 !.elasticbeanstalk/*.global.yml
+set_env.sh

docker-compose.yml

@@ -0,0 +1,106 @@
+version: '3'
+
+services:
+  postgres:
+    image: postgres:13
+    container_name: postgres
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: mypassword
+      POSTGRES_DB: postgres
+    volumes:
+    - postgres-db-volume:/var/lib/postgresql/data
+    healthcheck:
+      interval: 10s
+      retries: 5
+      start_period: 5s
+    restart: unless-stopped
+    ports:
+      - 5432:5432
+
+  frontend:
+    image: iamnarutohokage1995/udagram-frontend
+    container_name: udagram-frontend
+    build:
+      context: ./udagram-frontend
+    volumes:
+      - app.config.json:/usr/share/nginx/html/assets/app.config.json
+    ports:
+      - 8100:80
+    restart: unless-stopped
+
+  api:
+    image: iamnarutohokage1995/udagram-api
+    container_name: udagram-api
+    build:
+      dockerfile: Dockerfile
+      context: ./udagram-api/
+    volumes:
+      - $HOME/.aws:/root/.aws
+    ports:
+      - 8888:8080
+    restart: unless-stopped
+    environment:
+    - POSTGRES_USERNAME=$POSTGRES_USERNAME
+    - POSTGRES_PASSWORD=$POSTGRES_PASSWORD
+    - POSTGRES_HOST=$POSTGRES_HOST
+    - POSTGRES_DB=$POSTGRES_DB
+    - AWS_BUCKET=$AWS_BUCKET
+    - AWS_REGION=$AWS_REGION
+    - AWS_PROFILE=$AWS_PROFILE
+    - JWT_SECRET=$JWT_SECRET
+    - URL=$URL
+
+  user-api:
+    image: iamnarutohokage1995/udagram-api-user
+    container_name: udagram-api-user
+    build:
+      context: ./udagram-api-user
+    restart: unless-stopped
+    environment:
+    - POSTGRES_USERNAME=$POSTGRES_USERNAME
+    - POSTGRES_PASSWORD=$POSTGRES_PASSWORD
+    - POSTGRES_HOST=$POSTGRES_HOST
+    - POSTGRES_DB=$POSTGRES_DB
+    - AWS_BUCKET=$AWS_BUCKET
+    - AWS_REGION=$AWS_REGION
+    - AWS_PROFILE=$AWS_PROFILE
+    - JWT_SECRET=$JWT_SECRET
+    - URL=$URL
+
+  feed-api:
+    image: iamnarutohokage1995/udagram-api-feed
+    container_name: udagram-api-feed
+    build:
+      context: ./udagram-api-feed
+    volumes:
+      - $HOME/.aws:/root/.aws
+    restart: unless-stopped
+    environment:
+    - POSTGRES_USERNAME=$POSTGRES_USERNAME
+    - POSTGRES_PASSWORD=$POSTGRES_PASSWORD
+    - POSTGRES_HOST=$POSTGRES_HOST
+    - POSTGRES_DB=$POSTGRES_DB
+    - AWS_BUCKET=$AWS_BUCKET
+    - AWS_REGION=$AWS_REGION
+    - AWS_PROFILE=$AWS_PROFILE
+    - JWT_SECRET=$JWT_SECRET
+    - URL=$URL
+
+  reverseproxy:
+    image: iamnarutohokage1995/reverseproxy
+    container_name: reverseproxy
+    build:
+      context: ./udagram-reverseproxy
+    ports:
+      - 8080:8080
+    restart: always
+    depends_on:
+      - user-api
+      - feed-api
+networks:
+  default:
+    driver: bridge
+
+volumes:
+  postgres-db-volume:

eks/aws-secret.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: aws-secret
+type: Opaque
+data:
+  AWS_ACCESS_KEY_ID: <base64 encode access key>
+  AWS_SECRET_ACCESS_KEY: <base64 encode secret key>
+

eks/backend-feed-deployment.yaml

@@ -0,0 +1,76 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: feed-api
+  labels:
+    app: feed-api
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: feed-api
+  template:
+    metadata:
+      labels:
+        app: feed-api
+    spec:
+      containers:
+      - name: feed-api
+        image: iamnarutohokage1995/udagram-api-feed
+        ports:
+        - containerPort: 8080
+        volumeMounts:
+        - name: aws-credentials
+          mountPath: /root/.aws/credentials
+          subPath: credentials
+        env:
+        - name: AWS_BUCKET
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: AWS_BUCKET
+        - name: AWS_REGION
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: AWS_REGION
+        - name: URL
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: URL
+        - name: POSTGRES_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_USERNAME
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_PASSWORD
+        - name: POSTGRES_HOST
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_HOST
+        - name: POSTGRES_DB
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_DB
+        - name: JWT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: JWT_SECRET
+        - name: AWS_PROFILE
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: AWS_PROFILE
+
+      volumes:
+      - name: aws-credentials
+        secret:
+          secretName: aws-secret 

eks/backend-feed-service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: feed-api
+  labels:
+    app: feed-api
+spec:
+  ports:
+  - port: 8080 # expose port
+    targetPort: 8080 # container port
+    protocol: TCP
+  selector:
+    app: feed-api

eks/backend-user-deployment.yaml

@@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: user-api
+  labels:
+    app: user-api
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: user-api
+  template:
+    metadata:
+      labels:
+        app: user-api
+    spec:
+      containers:
+      - name: user-api
+        image: iamnarutohokage1995/udagram-api-user
+        ports:
+        - containerPort: 8080
+        env:
+        - name: AWS_BUCKET
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: AWS_BUCKET
+        - name: AWS_REGION
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: AWS_REGION
+        - name: URL
+          valueFrom:
+            configMapKeyRef:
+              name: env-config
+              key: URL
+        - name: POSTGRES_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_USERNAME
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_PASSWORD
+        - name: POSTGRES_HOST
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_HOST
+        - name: POSTGRES_DB
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: POSTGRES_DB
+        - name: JWT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: JWT_SECRET
+        - name: AWS_PROFILE
+          valueFrom:
+            secretKeyRef:
+              name: env-secret
+              key: AWS_PROFILE

eks/backend-user-service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: user-api
+  labels:
+    app: user-api
+spec:
+  ports:
+  - port: 8080 # expose port
+    targetPort: 8080 # container port
+    protocol: TCP
+  selector:
+    app: user-api

eks/commands.sh

@@ -0,0 +1,49 @@
+# describe pods
+kubectl get pods
+kubectl describe pod [pod-name]
+kubectl logs [pod-name]
+kubectl exec --stdin --tty [pod-name] -- [/bin/bash | sh]
+
+# describe services
+kubectl get services
+kubectl describe services
+
+# describe hpa
+kubectl autoscale deployment feed-api --cpu-percent=70 --min=3 --max=5
+kubectl describe hpa
+
+# describe deployments
+kubectl get deployments
+
+# apply all configmap and secret
+kubectl apply -f env-secret.yaml
+kubectl apply -f env-configmap.yaml
+
+# apply all deployments and services
+kubectl apply -f backend-feed-deployment.yaml 
+kubectl apply -f backend-user-deployment.yaml
+kubectl apply -f backend-feed-service.yaml 
+kubectl apply -f backend-user-service.yaml 
+
+kubectl apply -f reverse-proxy-deployment.yaml 
+kubectl apply -f frontend-deployment.yaml 
+
+# expose services to external internet
+kubectl expose deployment frontend --type=LoadBalancer --name=frontend
+kubectl expose deployment reverse-proxy --type=LoadBalancer --name=reverse-proxy
+
+# mount file to configmap
+kubectl create configmap frontend-app-config --from-file=app.config.json
+
+# mount file to secret
+kubectl create secret generic aws-secret --from-file=$HOME/.aws/credentials
+
+volumes:
+    - name: aws-credentials
+    secret:
+        secretName: aws-secret 
+
+volumeMounts:
+    - name: aws-credentials
+    mountPath: /root/.aws/credentials
+    subPath: credentials

eks/env-configmap.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: env-config
+data:
+  AWS_BUCKET: udagram-chungvv3-730554764003-bucket
+  AWS_REGION: us-east-1
+  URL: http://localhost:8080