malert commit
This commit is contained in:
Jay Sharma
@@ -1,5 +1,9 @@
|
|||||||
FROM wyveo/nginx-php-fpm:php74
|
FROM wyveo/nginx-php-fpm:php74
|
||||||
COPY wp/ /usr/share/nginx/html
|
RUN mkdir -p /var/lib/nginx/cache /usr/share/nginx/subdomain; cd /usr/share/nginx/subdomain ; mkdir www
|
||||||
RUN rm /etc/nginx/conf.d/default.conf
|
COPY wp/ /usr/share/nginx/subdomain/www
|
||||||
|
#RUN rm /etc/nginx/conf.d/default.conf
|
||||||
|
#COPY build/default.conf /etc/nginx/conf.d/default.conf
|
||||||
|
COPY redinessprobe-wp.sh /root/redinessprobe-wp.sh
|
||||||
|
RUN chmod +x /etc/nginx/conf.d/default.conf /root/redinessprobe-wp.sh
|
||||||
RUN chmod +xw -R /usr/share/nginx/
|
RUN chmod +xw -R /usr/share/nginx/
|
||||||
#USER nginx
|
#USER nginx
|
||||||
|
|||||||
269
bitbucket-pipelines.yml
Normal file
269
bitbucket-pipelines.yml
Normal file
@@ -0,0 +1,269 @@
|
|||||||
|
definitions:
|
||||||
|
set-variables: &set-variables
|
||||||
|
- variables:
|
||||||
|
- name: VERSION
|
||||||
|
default: "latest"
|
||||||
|
|
||||||
|
set-variables-jobs: &set-variables-jobs
|
||||||
|
- variables:
|
||||||
|
- name: ENV
|
||||||
|
default: "dev"
|
||||||
|
allowed-values: # Optionally restrict variable values
|
||||||
|
- "dev"
|
||||||
|
- "qa"
|
||||||
|
- "stage"
|
||||||
|
- "prod"
|
||||||
|
- name: JOBNAME
|
||||||
|
default: "mysql-backup"
|
||||||
|
allowed-values: # Optionally restrict variable values
|
||||||
|
- "mysql-backup"
|
||||||
|
- "wp-data-backup"
|
||||||
|
- "mysql-restore"
|
||||||
|
- "wp-data-restore"
|
||||||
|
- name: SUBDOMAIN
|
||||||
|
default: www
|
||||||
|
allowed-values: # Optionally restrict variable values
|
||||||
|
- "www"
|
||||||
|
- "dev01"
|
||||||
|
- "dev02"
|
||||||
|
- "dev03"
|
||||||
|
- "dev04"
|
||||||
|
- "dev05"
|
||||||
|
- name: RESTORE_VERSION
|
||||||
|
default: "PASTE_RESTORE_VERSION_FILE_NAME"
|
||||||
|
|
||||||
|
set-variables-subdomain: &set-variables-subdomain
|
||||||
|
- variables:
|
||||||
|
- name: ENV
|
||||||
|
default: "dev"
|
||||||
|
allowed-values: # Optionally restrict variable values
|
||||||
|
- "dev"
|
||||||
|
- name: URL_DOMAIN
|
||||||
|
default: dev01.dev-medicalalert.com
|
||||||
|
allowed-values: # Optionally restrict variable values
|
||||||
|
- "dev01.dev-medicalalert.com"
|
||||||
|
- "dev02.dev-medicalalert.com"
|
||||||
|
- "dev03.dev-medicalalert.com"
|
||||||
|
- "dev04.dev-medicalalert.com"
|
||||||
|
- "dev05.dev-medicalalert.com"
|
||||||
|
- name: MYSQL_FILE_NAME
|
||||||
|
default: "MYSQL_FILE_NAME_TO_DEPLOY"
|
||||||
|
- name: STATIC_FILE_NAME
|
||||||
|
default: "STATIC_FILE_NAME_TO_DEPLOY"
|
||||||
|
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- step: &deploy
|
||||||
|
name: deploy to $ENV environment
|
||||||
|
image: atlassian/default-image:3
|
||||||
|
script:
|
||||||
|
# check if env file exists
|
||||||
|
- if [ -e setenv.sh ]; then
|
||||||
|
- cat setenv.sh
|
||||||
|
- source setenv.sh
|
||||||
|
- fi
|
||||||
|
- echo "This is for $ENV environment"
|
||||||
|
- ls -lrth && cd build/${ENV}
|
||||||
|
# - export DB_PASSWORD=$(aws ssm get-parameters --names $ENV-$BITBUCKET_REPO_SLUG --query "Parameters[*].{Value:Value}" --output text)
|
||||||
|
# - export DB_PASSWORD=`echo -n "$DB_PASSWORD" | base64` && sed -i "/DB_PASSWORD/c\ DB_PASSWORD = $DB_PASSWORD" secrets.yaml
|
||||||
|
- envsubst < deployment.tpl > deployment.yaml
|
||||||
|
- cat deployment.yaml
|
||||||
|
- pipe: atlassian/aws-eks-kubectl-run:2.2.0
|
||||||
|
variables:
|
||||||
|
AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
|
||||||
|
AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
|
||||||
|
AWS_DEFAULT_REGION: $AWS_DEFAULT_REGION
|
||||||
|
CLUSTER_NAME: $CLUSTER
|
||||||
|
KUBECTL_COMMAND: "apply"
|
||||||
|
RESOURCE_PATH: "../${ENV}"
|
||||||
|
KUBECTL_ARGS: ""
|
||||||
|
KUBECTL_APPLY_ARGS: "-f"
|
||||||
|
DEBUG: "true"
|
||||||
|
|
||||||
|
pipelines:
|
||||||
|
# our custom pipeline, what shows up Bitbucket web app
|
||||||
|
custom:
|
||||||
|
deploy-dev:
|
||||||
|
- !!merge <<: *set-variables
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: dev
|
||||||
|
name: "deploy to dev"
|
||||||
|
|
||||||
|
deploy-qa:
|
||||||
|
- !!merge <<: *set-variables
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: qa
|
||||||
|
name: "deploy to qa"
|
||||||
|
|
||||||
|
release-stg:
|
||||||
|
- !!merge <<: *set-variables
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: stage
|
||||||
|
name: "deploy to stage"
|
||||||
|
|
||||||
|
release-prod:
|
||||||
|
- !!merge <<: *set-variables
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: prod
|
||||||
|
name: "deploy to prod"
|
||||||
|
|
||||||
|
|
||||||
|
common-jobs:
|
||||||
|
- !!merge <<: *set-variables-jobs
|
||||||
|
- step:
|
||||||
|
name: vars for common-jobs
|
||||||
|
script:
|
||||||
|
- source setenv.sh
|
||||||
|
- echo "export JOBNAME=$JOBNAME" >> setenv.sh
|
||||||
|
- echo "export ENV=$ENV" >> setenv.sh
|
||||||
|
- echo "export CLUSTER=caresage-eks-cluster-$ENV" >> setenv.sh
|
||||||
|
- echo "export VERSION=$BITBUCKET_BUILD_NUMBER" >> setenv.sh
|
||||||
|
- echo "export RESTORE_VERSION=$RESTORE_VERSION" >> setenv.sh
|
||||||
|
- echo "export SUBDOMAIN=$SUBDOMAIN" >> setenv.sh
|
||||||
|
- echo "export BITBUCKET_REPO_SLUG=$BITBUCKET_REPO_SLUG" >> setenv.sh
|
||||||
|
artifacts: # define the artifacts to be passed to each future step
|
||||||
|
- setenv.sh
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: common jobs for SQL and WWW backup and restore.
|
||||||
|
image: atlassian/pipelines-awscli
|
||||||
|
script:
|
||||||
|
- source setenv.sh && chmod 755 ./common-jobs-bitbucket.sh
|
||||||
|
- if [ "$JOBNAME" = "mysql-restore" ] && [ "$SUBDOMAIN" = "www" ] ; then ./common-jobs-bitbucket.sh subdomain_deploy; fi
|
||||||
|
# - [[ "$SUBDOMAIN" != "www" ]] && [[ "$ENV" = "qa" || "$ENV" = "stage" || "$ENV" = "prod" ]] && exit || echo VALIDATION-PASS
|
||||||
|
- if [[ "$SUBDOMAIN" != "www" ]] && [[ "$ENV" = "qa" || "$ENV" = "stage" || "$ENV" = "prod" ]] ; then echo VALIDATION-FAIL && exit 9 ; else echo VALIDATION-PASS;fi
|
||||||
|
- ./common-jobs-bitbucket.sh $JOBNAME
|
||||||
|
|
||||||
|
|
||||||
|
subdomain-deploy:
|
||||||
|
- !!merge <<: *set-variables-subdomain
|
||||||
|
- step:
|
||||||
|
name: vars for subdomain
|
||||||
|
script:
|
||||||
|
- source setenv.sh
|
||||||
|
- echo "export ENV=$ENV" >> setenv.sh
|
||||||
|
- echo "export CLUSTER=caresage-eks-cluster-$ENV" >> setenv.sh
|
||||||
|
- echo "export VERSION=$BITBUCKET_BUILD_NUMBER" >> setenv.sh
|
||||||
|
- echo "export RESTORE_VERSION=$RESTORE_VERSION" >> setenv.sh
|
||||||
|
- echo "export URL_DOMAIN=$URL_DOMAIN" >> setenv.sh
|
||||||
|
- echo "export MYSQL_FILE_NAME=$MYSQL_FILE_NAME" >> setenv.sh
|
||||||
|
- echo "export STATIC_FILE_NAME=$STATIC_FILE_NAME" >> setenv.sh
|
||||||
|
- echo "export BITBUCKET_REPO_SLUG=$BITBUCKET_REPO_SLUG" >> setenv.sh
|
||||||
|
artifacts:
|
||||||
|
- setenv.sh
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: Deploy the wp source code
|
||||||
|
trigger: manual
|
||||||
|
image: atlassian/pipelines-awscli
|
||||||
|
script:
|
||||||
|
- source setenv.sh
|
||||||
|
- chmod 755 ./common-jobs-bitbucket.sh && ./common-jobs-bitbucket.sh subdomain_deploy
|
||||||
|
artifacts:
|
||||||
|
- setenv.sh
|
||||||
|
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: Deploy the mysql database
|
||||||
|
trigger: manual
|
||||||
|
image: atlassian/pipelines-awscli
|
||||||
|
script:
|
||||||
|
- source setenv.sh
|
||||||
|
- chmod 755 ./common-jobs-bitbucket.sh && ./common-jobs-bitbucket.sh mysql-restore $MYSQL_FILE_NAME
|
||||||
|
artifacts:
|
||||||
|
- setenv.sh
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: Deploy the static data
|
||||||
|
trigger: manual
|
||||||
|
image: atlassian/pipelines-awscli
|
||||||
|
script:
|
||||||
|
- source setenv.sh
|
||||||
|
- chmod 755 ./common-jobs-bitbucket.sh && ./common-jobs-bitbucket.sh wp-data-restore $STATIC_FILE_NAME
|
||||||
|
|
||||||
|
|
||||||
|
release:
|
||||||
|
- !!merge <<: *set-variables
|
||||||
|
- step:
|
||||||
|
name: "plan for the release and tag the given version."
|
||||||
|
image: atlassian/pipelines-awscli
|
||||||
|
script:
|
||||||
|
- echo "make sure that release version file and plan has been added to the release repo"
|
||||||
|
- source release
|
||||||
|
- export MANIFEST=$(aws ecr batch-get-image --repository-name medicalalert-web --image-ids imageTag=$VERSION --output json | jq --raw-output --join-output '.images[0].imageManifest')
|
||||||
|
- aws ecr put-image --repository-name medicalalert-web --image-tag $RELEASE --image-manifest "$MANIFEST" && echo ------ image $VERSION has been retagged as $RELEASE || exit 9
|
||||||
|
- echo "export VERSION=$RELEASE" >> setenv.sh
|
||||||
|
- echo "export ENV=stage" >> setenv.sh
|
||||||
|
artifacts: # define the artifacts to be passed to each future step
|
||||||
|
- setenv.sh
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: stage
|
||||||
|
name: "deploy the release to stage"
|
||||||
|
trigger: manual
|
||||||
|
- step:
|
||||||
|
name: vars for prod
|
||||||
|
script:
|
||||||
|
- source release
|
||||||
|
- echo "export VERSION=$RELEASE" >> setenv.sh
|
||||||
|
- echo "export ENV=prod" >> setenv.sh
|
||||||
|
artifacts: # define the artifacts to be passed to each future step
|
||||||
|
- setenv.sh
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: prod
|
||||||
|
name: "deploy the release to production"
|
||||||
|
trigger: manual
|
||||||
|
|
||||||
|
pull-requests:
|
||||||
|
develop:
|
||||||
|
- step:
|
||||||
|
name: build the application and push that to dev env.
|
||||||
|
image: atlassian/default-image:3
|
||||||
|
script:
|
||||||
|
- curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" && unzip awscliv2.zip && ./aws/install
|
||||||
|
- export BUILD_D=$BITBUCKET_BRANCH_$BITBUCKET_COMMIT_$BITBUCKET_BUILD_NUMBER
|
||||||
|
- export IMAGE="medicalalert-web" && export VERSION=$BITBUCKET_BUILD_NUMBER
|
||||||
|
- aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 716593996126.dkr.ecr.us-east-1.amazonaws.com
|
||||||
|
- docker build -t ${IMAGE} .
|
||||||
|
- docker tag ${IMAGE} ${IMAGE}:${VERSION}
|
||||||
|
- pipe: atlassian/aws-ecr-push-image:1.6.2
|
||||||
|
variables:
|
||||||
|
AWS_ACCESS_KEY_ID: $AWS_ACCESS_KEY_ID
|
||||||
|
AWS_SECRET_ACCESS_KEY: $AWS_SECRET_ACCESS_KEY
|
||||||
|
AWS_DEFAULT_REGION: $AWS_DEFAULT_REGION
|
||||||
|
IMAGE_NAME: $IMAGE
|
||||||
|
TAGS: $VERSION
|
||||||
|
services:
|
||||||
|
- docker
|
||||||
|
caches:
|
||||||
|
- docker
|
||||||
|
|
||||||
|
- step:
|
||||||
|
name: vars for dev
|
||||||
|
script:
|
||||||
|
- echo "export VERSION=$BITBUCKET_BUILD_NUMBER" >> setenv.sh
|
||||||
|
- echo "export ENV=dev" >> setenv.sh
|
||||||
|
artifacts: # define the artifacts to be passed to each future step
|
||||||
|
- setenv.sh
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: dev
|
||||||
|
name: "deploy to dev"
|
||||||
|
- step:
|
||||||
|
name: vars for qa
|
||||||
|
script:
|
||||||
|
- echo "export VERSION=$BITBUCKET_BUILD_NUMBER" >> setenv.sh
|
||||||
|
- echo "export ENV=qa" >> setenv.sh
|
||||||
|
artifacts:
|
||||||
|
- setenv.sh
|
||||||
|
- step:
|
||||||
|
!!merge <<: *deploy
|
||||||
|
deployment: qa
|
||||||
|
name: "deploy to qa"
|
||||||
|
trigger: manual
|
||||||
|
|
||||||
17
build/dev-org/configmap.yaml
Normal file
17
build/dev-org/configmap.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
namespace: caresage-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
data:
|
||||||
|
DB_HOST: dev-medicalalert-ecommerce.c5om7w6xopq1.us-east-1.rds.amazonaws.com
|
||||||
|
ENV: dev
|
||||||
|
WP_DEBUG: "false"
|
||||||
|
DB_CHARSET: utf8
|
||||||
|
DB_COLLATE: utf8_general_ci
|
||||||
|
CACHE_HOST: master.redis-cache-all-be-caresage.cqsmse.use1.cache.amazonaws.com
|
||||||
|
CACHE_PORT: "6379"
|
||||||
|
DB_NAME: "pantheon"
|
||||||
|
DB_USER: "pantheon"
|
||||||
92
build/dev-org/deployment.tpl
Normal file
92
build/dev-org/deployment.tpl
Normal file
@@ -0,0 +1,92 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: "11"
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
progressDeadlineSeconds: 600
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 10
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: medicalalert-web
|
||||||
|
strategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 25%
|
||||||
|
maxUnavailable: 25%
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- env:
|
||||||
|
- name: ENVIRONMENT
|
||||||
|
value: "$ENV"
|
||||||
|
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/medicalalert-web:$VERSION
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
imagePullPolicy: Always
|
||||||
|
name: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
name: http
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 200m
|
||||||
|
memory: 300Mi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 100Mi
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
- mountPath: /etc/nginx/conf.d/
|
||||||
|
name: default-conf
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim
|
||||||
|
- name: default-conf
|
||||||
|
configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
98
build/dev-org/deployment.yml
Normal file
98
build/dev-org/deployment.yml
Normal file
@@ -0,0 +1,98 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: "11"
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
progressDeadlineSeconds: 600
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 10
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: medicalalert-web
|
||||||
|
strategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 25%
|
||||||
|
maxUnavailable: 25%
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- env:
|
||||||
|
- name: ENVIRONMENT
|
||||||
|
value: dev
|
||||||
|
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/medicalalert-web:v01
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
imagePullPolicy: Always
|
||||||
|
name: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
name: http
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 200m
|
||||||
|
memory: 300Mi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 100Mi
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
- mountPath: /etc/nginx/conf.d/
|
||||||
|
name: default-conf
|
||||||
|
- mountPath: /var/lib/nginx/cache
|
||||||
|
name: cache
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert
|
||||||
|
- name: default-conf
|
||||||
|
configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
- name: cache
|
||||||
|
emptyDir: {}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
50
build/dev-org/jobs.tpl
Normal file
50
build/dev-org/jobs.tpl
Normal file
@@ -0,0 +1,50 @@
|
|||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: common-jobs
|
||||||
|
namespace: caresage-exec
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- name: common-jobs
|
||||||
|
image: bitnami/percona-xtrabackup:latest
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: lifeline-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: lifeline-web-cm
|
||||||
|
command: ["bash"]
|
||||||
|
args:
|
||||||
|
- -c
|
||||||
|
- cp -rf /usr/share/nginx/html/wp-content/uploads/common-jobs.sh /root/ && /root/common-jobs.sh $JOBNAME
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Never
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim
|
||||||
|
|
||||||
285
build/dev-org/medicalalert-web-default-conf-cm.yaml
Normal file
285
build/dev-org/medicalalert-web-default-conf-cm.yaml
Normal file
@@ -0,0 +1,285 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
namespace: medicalalert-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
data:
|
||||||
|
default.conf: |
|
||||||
|
|
||||||
|
# ---------------------
|
||||||
|
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
||||||
|
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
||||||
|
# -----------------------------------------
|
||||||
|
fastcgi_intercept_errors on;
|
||||||
|
fastcgi_ignore_client_abort on;
|
||||||
|
fastcgi_buffers 8 16k;
|
||||||
|
fastcgi_buffer_size 32k;
|
||||||
|
fastcgi_read_timeout 120;
|
||||||
|
#fastcgi_index index.php;
|
||||||
|
# --------------------------------
|
||||||
|
|
||||||
|
# Only cache positive responses
|
||||||
|
proxy_cache_valid 200 1h;
|
||||||
|
proxy_cache_valid 301 302 15m;
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80 default; ## listen for ipv4; this line is default and implied
|
||||||
|
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
||||||
|
|
||||||
|
server_name dev-medicalalert.com "";
|
||||||
|
|
||||||
|
return 301 https://www.$host$request_uri;
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
subdomain.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name ~^(?<subdomain>.+)\.dev-medicalalert\.com$;
|
||||||
|
|
||||||
|
if ($http_x_forwarded_proto != 'https') {
|
||||||
|
return 301 https://$host$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
sendfile off;
|
||||||
|
|
||||||
|
# Security - Hide nginx version number in error pages and Server header
|
||||||
|
server_tokens off;
|
||||||
|
|
||||||
|
# Add stdout logging
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
localhost.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name localhost;
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
sendfile off;
|
||||||
|
server_tokens off;
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
13
build/dev-org/medicalalert-web-hpa.yml
Normal file
13
build/dev-org/medicalalert-web-hpa.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: autoscaling/v1
|
||||||
|
kind: HorizontalPodAutoscaler
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-hpa
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
scaleTargetRef:
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
name: medicalalert-web
|
||||||
|
minReplicas: 1
|
||||||
|
maxReplicas: 1
|
||||||
|
targetCPUUtilizationPercentage: 70
|
||||||
13
build/dev-org/pvc.yml
Normal file
13
build/dev-org/pvc.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-medicalalert
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 10Gi
|
||||||
13
build/dev-org/secrets.yaml
Normal file
13
build/dev-org/secrets.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
data:
|
||||||
|
CACHE_PASSWORD: UU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXhoUU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXho
|
||||||
|
DB_PASSWORD: cGFudGhlb24=
|
||||||
|
TOKEN: QVRDVFQzeEZmR04wbXpCZjF4NDVaSkVIa3l0eWVYX0NvWXJRSHJwbHk4RlUzWG1wTjZHcGNjNHU5RzB5bW5DMzg2SjFQUTFSR3Z3VG10QWN3WUVmc2s5MGt4UDQxVEc3Q0xhSWwtYUs2cFRTY0NqYVVQcUdOY3phWEFxdVFXaGhlWjc5d1FXa3dTd2J6NDVhY1Z4T21ZZWtpTFlIU21TMTBsWV9ibF9wZ1ZxbG9kMVFxSy1uYmV3PTg4NjIyMEM3
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
namespace: caresage-web
|
||||||
|
type: Opaque
|
||||||
16
build/dev-org/service.yml
Normal file
16
build/dev-org/service.yml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
type: NodePort
|
||||||
|
selector:
|
||||||
|
app: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- protocol: TCP
|
||||||
|
port: 80
|
||||||
|
targetPort: 80
|
||||||
|
nodePort: 30846
|
||||||
13
build/dev-org/storageclass.yaml
Normal file
13
build/dev-org/storageclass.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
kind: StorageClass
|
||||||
|
apiVersion: storage.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: efs-sc
|
||||||
|
provisioner: efs.csi.aws.com
|
||||||
|
parameters:
|
||||||
|
provisioningMode: efs-ap
|
||||||
|
# reclaimPolicy: Retain
|
||||||
|
fileSystemId: fs-01d898a0e680dbd45
|
||||||
|
directoryPerms: "700"
|
||||||
|
gidRangeStart: "1000" # optional
|
||||||
|
gidRangeEnd: "2000" # optional
|
||||||
|
basePath: "/dynamic_provisioning" # optional
|
||||||
@@ -1,17 +1,18 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
name: medicalalert-web-cm
|
name: lifeline-web-cm
|
||||||
namespace: caresage-web
|
namespace: lifeline-web
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
data:
|
data:
|
||||||
DB_HOST: dev-medicalalert-ecommerce.c5om7w6xopq1.us-east-1.rds.amazonaws.com
|
DB_HOST: dev-lifeline-ecommerce.c5om7w6xopq1.us-east-1.rds.amazonaws.com
|
||||||
ENV: dev
|
ENV: dev
|
||||||
WP_DEBUG: "false"
|
WP_DEBUG: "false"
|
||||||
DB_CHARSET: utf8
|
DB_CHARSET: utf8
|
||||||
DB_COLLATE: utf8_general_ci
|
DB_COLLATE: utf8_general_ci
|
||||||
CACHE_HOST: master.redis-cache-all-be-caresage.cqsmse.use1.cache.amazonaws.com
|
CACHE_HOST: master.redis-cache-all-be-caresage.cqsmse.use1.cache.amazonaws.com
|
||||||
CACHE_PORT: "6379"
|
CACHE_PORT: "6379"
|
||||||
DB_NAME: "pantheon"
|
DB_USER: pantheon
|
||||||
DB_USER: "pantheon"
|
DB_NAME: pantheon
|
||||||
|
SUBDB_NAME: dev03
|
||||||
|
|||||||
@@ -4,16 +4,16 @@ metadata:
|
|||||||
annotations:
|
annotations:
|
||||||
deployment.kubernetes.io/revision: "11"
|
deployment.kubernetes.io/revision: "11"
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
name: medicalalert-web
|
name: lifeline-web
|
||||||
namespace: caresage-web
|
namespace: lifeline-web
|
||||||
spec:
|
spec:
|
||||||
progressDeadlineSeconds: 600
|
progressDeadlineSeconds: 600
|
||||||
replicas: 1
|
replicas: 1
|
||||||
revisionHistoryLimit: 10
|
revisionHistoryLimit: 10
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
strategy:
|
strategy:
|
||||||
rollingUpdate:
|
rollingUpdate:
|
||||||
maxSurge: 25%
|
maxSurge: 25%
|
||||||
@@ -25,7 +25,7 @@ spec:
|
|||||||
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
||||||
creationTimestamp: null
|
creationTimestamp: null
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
spec:
|
spec:
|
||||||
affinity:
|
affinity:
|
||||||
nodeAffinity:
|
nodeAffinity:
|
||||||
@@ -41,30 +41,40 @@ spec:
|
|||||||
- env:
|
- env:
|
||||||
- name: ENVIRONMENT
|
- name: ENVIRONMENT
|
||||||
value: "$ENV"
|
value: "$ENV"
|
||||||
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/medicalalert-web:$VERSION
|
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/lifeline-web:$VERSION
|
||||||
envFrom:
|
envFrom:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: medicalalert-web-secrets
|
name: lifeline-web-secrets
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: medicalalert-web-cm
|
name: lifeline-web-cm
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
name: medicalalert-web
|
name: lifeline-web
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 80
|
- containerPort: 80
|
||||||
name: http
|
name: http
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
cpu: 200m
|
cpu: 500m
|
||||||
memory: 300Mi
|
memory: 700Mi
|
||||||
requests:
|
requests:
|
||||||
cpu: 100m
|
cpu: 300m
|
||||||
memory: 100Mi
|
memory: 500Mi
|
||||||
terminationMessagePath: /dev/termination-log
|
terminationMessagePath: /dev/termination-log
|
||||||
terminationMessagePolicy: File
|
terminationMessagePolicy: File
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
- mountPath: /usr/share/nginx/subdomain/www/wp-content/uploads
|
||||||
name: persistent-storage
|
name: persistent-storage
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev01
|
||||||
|
name: persistent-storage-dev01
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev02
|
||||||
|
name: persistent-storage-dev02
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev03
|
||||||
|
name: persistent-storage-dev03
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev04
|
||||||
|
name: persistent-storage-dev04
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev05
|
||||||
|
name: persistent-storage-dev05
|
||||||
- mountPath: /etc/nginx/conf.d/
|
- mountPath: /etc/nginx/conf.d/
|
||||||
name: default-conf
|
name: default-conf
|
||||||
dnsPolicy: ClusterFirst
|
dnsPolicy: ClusterFirst
|
||||||
@@ -78,15 +88,23 @@ spec:
|
|||||||
volumes:
|
volumes:
|
||||||
- name: persistent-storage
|
- name: persistent-storage
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: efs-claim
|
claimName: efs-claim-lifeline
|
||||||
|
- name: persistent-storage-dev01
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline-dev01
|
||||||
|
- name: persistent-storage-dev02
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline-dev02
|
||||||
|
- name: persistent-storage-dev03
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline-dev03
|
||||||
|
- name: persistent-storage-dev04
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline-dev04
|
||||||
|
- name: persistent-storage-dev05
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline-dev05
|
||||||
- name: default-conf
|
- name: default-conf
|
||||||
configMap:
|
configMap:
|
||||||
defaultMode: 420
|
defaultMode: 420
|
||||||
name: medicalalert-web-default-conf-cm
|
name: lifeline-web-default-conf-cm
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -2,11 +2,12 @@ apiVersion: batch/v1
|
|||||||
kind: Job
|
kind: Job
|
||||||
metadata:
|
metadata:
|
||||||
name: common-jobs
|
name: common-jobs
|
||||||
namespace: caresage-exec
|
namespace: lifeline-web
|
||||||
labels:
|
labels:
|
||||||
app: lifeline-web
|
app: lifeline-web
|
||||||
rds: enable
|
rds: enable
|
||||||
spec:
|
spec:
|
||||||
|
ttlSecondsAfterFinished: 10
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
@@ -25,7 +26,7 @@ spec:
|
|||||||
- arm64
|
- arm64
|
||||||
containers:
|
containers:
|
||||||
- name: common-jobs
|
- name: common-jobs
|
||||||
image: bitnami/percona-xtrabackup:latest
|
image: ubuntu:latest
|
||||||
envFrom:
|
envFrom:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: lifeline-web-secrets
|
name: lifeline-web-secrets
|
||||||
@@ -34,9 +35,9 @@ spec:
|
|||||||
command: ["bash"]
|
command: ["bash"]
|
||||||
args:
|
args:
|
||||||
- -c
|
- -c
|
||||||
- cp -rf /usr/share/nginx/html/wp-content/uploads/common-jobs.sh /root/ && /root/common-jobs.sh $JOBNAME
|
- cp -rf /usr/share/nginx/subdomain/www/wp-content/uploads/common-jobs.sh /root/ && chmod 755 /root/common-jobs.sh && /root/common-jobs.sh $JOBNAME
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
- mountPath: /usr/share/nginx/subdomain/www/wp-content/uploads
|
||||||
name: persistent-storage
|
name: persistent-storage
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
- name: regcred
|
- name: regcred
|
||||||
@@ -46,5 +47,4 @@ spec:
|
|||||||
volumes:
|
volumes:
|
||||||
- name: persistent-storage
|
- name: persistent-storage
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: efs-claim
|
claimName: efs-claim-lifeline
|
||||||
|
|
||||||
|
|||||||
285
build/dev/lifeline-web-default-conf-cm.yaml
Normal file
285
build/dev/lifeline-web-default-conf-cm.yaml
Normal file
@@ -0,0 +1,285 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: lifeline-web-default-conf-cm
|
||||||
|
namespace: lifeline-web
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
data:
|
||||||
|
default.conf: |
|
||||||
|
|
||||||
|
# ---------------------
|
||||||
|
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
||||||
|
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
||||||
|
# -----------------------------------------
|
||||||
|
fastcgi_intercept_errors on;
|
||||||
|
fastcgi_ignore_client_abort on;
|
||||||
|
fastcgi_buffers 8 16k;
|
||||||
|
fastcgi_buffer_size 32k;
|
||||||
|
fastcgi_read_timeout 120;
|
||||||
|
#fastcgi_index index.php;
|
||||||
|
# --------------------------------
|
||||||
|
|
||||||
|
# Only cache positive responses
|
||||||
|
proxy_cache_valid 200 1h;
|
||||||
|
proxy_cache_valid 301 302 15m;
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80 default; ## listen for ipv4; this line is default and implied
|
||||||
|
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
||||||
|
|
||||||
|
server_name dev-lifeline.com "";
|
||||||
|
|
||||||
|
return 301 https://www.$host$request_uri;
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
subdomain.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name ~^(?<subdomain>.+)\.dev-lifeline\.com$;
|
||||||
|
|
||||||
|
if ($http_x_forwarded_proto != 'https') {
|
||||||
|
return 301 https://$host$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
sendfile off;
|
||||||
|
|
||||||
|
# Security - Hide nginx version number in error pages and Server header
|
||||||
|
server_tokens off;
|
||||||
|
|
||||||
|
# Add stdout logging
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
localhost.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name localhost;
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
sendfile off;
|
||||||
|
server_tokens off;
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
13
build/dev/lifeline-web-hpa.yml
Normal file
13
build/dev/lifeline-web-hpa.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: autoscaling/v1
|
||||||
|
kind: HorizontalPodAutoscaler
|
||||||
|
metadata:
|
||||||
|
name: lifeline-web-hpa
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
scaleTargetRef:
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
name: lifeline-web
|
||||||
|
minReplicas: 1
|
||||||
|
maxReplicas: 1
|
||||||
|
targetCPUUtilizationPercentage: 70
|
||||||
@@ -1,168 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: ConfigMap
|
|
||||||
metadata:
|
|
||||||
name: medicalalert-web-default-conf-cm
|
|
||||||
namespace: caresage-web
|
|
||||||
labels:
|
|
||||||
app: medicalalert-web
|
|
||||||
data:
|
|
||||||
default.conf: |
|
|
||||||
|
|
||||||
# ---------------------
|
|
||||||
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
|
||||||
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
|
||||||
|
|
||||||
|
|
||||||
# Only cache positive responses
|
|
||||||
proxy_cache_valid 200 1h;
|
|
||||||
proxy_cache_valid 301 302 15m;
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 80; ## listen for ipv4; this line is default and implied
|
|
||||||
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
|
||||||
|
|
||||||
# if ($http_x_forwarded_proto != 'https') {
|
|
||||||
#set $cond A;
|
|
||||||
#}
|
|
||||||
|
|
||||||
#if ($http_host ~ ^localhost) {
|
|
||||||
#set $cond "${cond}B";
|
|
||||||
|
|
||||||
#if ($cond = AB) {
|
|
||||||
# return 301 http://$host$request_uri;
|
|
||||||
#}
|
|
||||||
|
|
||||||
if ($http_x_forwarded_proto != 'https') {
|
|
||||||
return 301 https://$host$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
index index.php index.html index.htm;
|
|
||||||
|
|
||||||
# Make site accessible from http://localhost/
|
|
||||||
server_name localhost;
|
|
||||||
#server_name local.lifeline-prod.com;
|
|
||||||
|
|
||||||
# Disable sendfile as per https://docs.vagrantup.com/v2/synced-folders/virtualbox.html
|
|
||||||
sendfile off;
|
|
||||||
|
|
||||||
# Security - Hide nginx version number in error pages and Server header
|
|
||||||
server_tokens off;
|
|
||||||
|
|
||||||
# Add stdout logging
|
|
||||||
error_log /dev/stdout error;
|
|
||||||
access_log /dev/stdout;
|
|
||||||
|
|
||||||
# reduce the data that needs to be sent over network
|
|
||||||
gzip on;
|
|
||||||
gzip_min_length 10240;
|
|
||||||
gzip_proxied expired no-cache no-store private auth;
|
|
||||||
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
|
||||||
gzip_disable "MSIE [1-6]\.";
|
|
||||||
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
|
||||||
add_header X-Cache-Status $upstream_cache_status;
|
|
||||||
add_header Cache-Control "public";
|
|
||||||
|
|
||||||
#Cache everything by default
|
|
||||||
set $no_cache 0;
|
|
||||||
|
|
||||||
#Don't cache POST requests
|
|
||||||
if ($request_method = POST)
|
|
||||||
{
|
|
||||||
set $no_cache 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
#Don't cache if the URL contains a query string
|
|
||||||
if ($query_string != "")
|
|
||||||
{
|
|
||||||
set $no_cache 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
#Don't cache the following URLs
|
|
||||||
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
|
||||||
{
|
|
||||||
set $no_cache 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
#Don't cache if there is a cookie called PHPSESSID
|
|
||||||
if ($http_cookie = "PHPSESSID")
|
|
||||||
{
|
|
||||||
set $no_cache 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
# First attempt to serve request as file, then
|
|
||||||
# as directory, then fall back to index.php
|
|
||||||
try_files $uri $uri/ /index.php?$args;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
#proxy_cache cache;
|
|
||||||
#proxy_cache_background_update on;
|
|
||||||
#proxy_cache_lock on;
|
|
||||||
#proxy_cache_revalidate on;
|
|
||||||
include /etc/nginx/fastcgi_params;
|
|
||||||
fastcgi_cache MYAPP;
|
|
||||||
fastcgi_cache_valid 200 302 60m;
|
|
||||||
fastcgi_cache_valid 301 1h;
|
|
||||||
fastcgi_cache_valid any 1m;
|
|
||||||
fastcgi_cache_bypass $no_cache;
|
|
||||||
fastcgi_no_cache $no_cache;
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
# redirect server error pages to the static page /50x.html
|
|
||||||
#
|
|
||||||
error_page 500 502 503 504 /50x.html;
|
|
||||||
location = /50x.html {
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
# pass the PHP scripts to FastCGI server listening on socket
|
|
||||||
#
|
|
||||||
#~ \.php$
|
|
||||||
location ~ [^/]\.php(/|$) {
|
|
||||||
#try_files $uri $uri/ /index.php?$query_string;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
#proxy_cache cache;
|
|
||||||
#proxy_cache_background_update on;
|
|
||||||
#proxy_cache_lock on;
|
|
||||||
#proxy_cache_revalidate on;
|
|
||||||
try_files $uri $uri/ /index.php?$args;
|
|
||||||
if (!-f $document_root$fastcgi_script_name) {
|
|
||||||
return 404;
|
|
||||||
}
|
|
||||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
||||||
|
|
||||||
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
|
||||||
fastcgi_index index.php;
|
|
||||||
include /etc/nginx/fastcgi_params;
|
|
||||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
||||||
fastcgi_cache MYAPP;
|
|
||||||
fastcgi_cache_valid 200 302 60m;
|
|
||||||
fastcgi_cache_valid 301 1h;
|
|
||||||
fastcgi_cache_valid any 1m;
|
|
||||||
fastcgi_cache_bypass $no_cache;
|
|
||||||
fastcgi_no_cache $no_cache;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
fastcgi_cache MYAPP;
|
|
||||||
fastcgi_cache_valid 200 302 60m;
|
|
||||||
fastcgi_cache_valid 301 1h;
|
|
||||||
fastcgi_cache_valid any 1m;
|
|
||||||
proxy_cache_background_update on;
|
|
||||||
proxy_cache_lock on;
|
|
||||||
access_log off;
|
|
||||||
expires max;
|
|
||||||
}
|
|
||||||
|
|
||||||
# deny access to . files, for security
|
|
||||||
#
|
|
||||||
location ~ /\. {
|
|
||||||
log_not_found off;
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@@ -2,7 +2,7 @@ apiVersion: v1
|
|||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
name: medicalalert-web-default-conf-cm
|
name: medicalalert-web-default-conf-cm
|
||||||
namespace: caresage-web
|
namespace: medicalalert-web
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: medicalalert-web
|
||||||
data:
|
data:
|
||||||
@@ -11,39 +11,47 @@ data:
|
|||||||
# ---------------------
|
# ---------------------
|
||||||
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
||||||
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
||||||
|
# -----------------------------------------
|
||||||
|
fastcgi_intercept_errors on;
|
||||||
|
fastcgi_ignore_client_abort on;
|
||||||
|
fastcgi_buffers 8 16k;
|
||||||
|
fastcgi_buffer_size 32k;
|
||||||
|
fastcgi_read_timeout 120;
|
||||||
|
#fastcgi_index index.php;
|
||||||
|
# --------------------------------
|
||||||
|
|
||||||
# Only cache positive responses
|
# Only cache positive responses
|
||||||
proxy_cache_valid 200 1h;
|
proxy_cache_valid 200 1h;
|
||||||
proxy_cache_valid 301 302 15m;
|
proxy_cache_valid 301 302 15m;
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 80; ## listen for ipv4; this line is default and implied
|
listen 80 default; ## listen for ipv4; this line is default and implied
|
||||||
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
||||||
|
|
||||||
# if ($http_x_forwarded_proto != 'https') {
|
server_name dev-medicalalert.com "";
|
||||||
#set $cond A;
|
|
||||||
#}
|
|
||||||
|
|
||||||
#if ($http_host ~ ^localhost) {
|
return 301 https://www.$host$request_uri;
|
||||||
#set $cond "${cond}B";
|
|
||||||
|
|
||||||
#if ($cond = AB) {
|
root /usr/share/nginx/subdomain/www;
|
||||||
# return 301 http://$host$request_uri;
|
index index.php index.html index.htm;
|
||||||
#}
|
|
||||||
|
|
||||||
if ($http_x_forwarded_proto != 'https') {
|
}
|
||||||
|
|
||||||
|
|
||||||
|
subdomain.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name ~^(?<subdomain>.+)\.dev-medicalalert\.com$;
|
||||||
|
|
||||||
|
if ($http_x_forwarded_proto != 'https') {
|
||||||
return 301 https://$host$request_uri;
|
return 301 https://$host$request_uri;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
root /usr/share/nginx/html;
|
|
||||||
index index.php index.html index.htm;
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
# Make site accessible from http://localhost/
|
|
||||||
server_name localhost;
|
|
||||||
#server_name local.lifeline-prod.com;
|
|
||||||
|
|
||||||
# Disable sendfile as per https://docs.vagrantup.com/v2/synced-folders/virtualbox.html
|
|
||||||
sendfile off;
|
sendfile off;
|
||||||
|
|
||||||
# Security - Hide nginx version number in error pages and Server header
|
# Security - Hide nginx version number in error pages and Server header
|
||||||
@@ -95,11 +103,8 @@ data:
|
|||||||
# as directory, then fall back to index.php
|
# as directory, then fall back to index.php
|
||||||
try_files $uri $uri/ /index.php?$args;
|
try_files $uri $uri/ /index.php?$args;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
#proxy_cache cache;
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
#proxy_cache_background_update on;
|
include fastcgi_params;
|
||||||
#proxy_cache_lock on;
|
|
||||||
#proxy_cache_revalidate on;
|
|
||||||
include /etc/nginx/fastcgi_params;
|
|
||||||
fastcgi_cache MYAPP;
|
fastcgi_cache MYAPP;
|
||||||
fastcgi_cache_valid 200 302 60m;
|
fastcgi_cache_valid 200 302 60m;
|
||||||
fastcgi_cache_valid 301 1h;
|
fastcgi_cache_valid 301 1h;
|
||||||
@@ -113,19 +118,14 @@ data:
|
|||||||
#
|
#
|
||||||
error_page 500 502 503 504 /50x.html;
|
error_page 500 502 503 504 /50x.html;
|
||||||
location = /50x.html {
|
location = /50x.html {
|
||||||
root /usr/share/nginx/html;
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
}
|
}
|
||||||
|
|
||||||
# pass the PHP scripts to FastCGI server listening on socket
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
#
|
#
|
||||||
#~ \.php$
|
#~ \.php$
|
||||||
location ~ [^/]\.php(/|$) {
|
location ~ [^/]\.php(/|$) {
|
||||||
#try_files $uri $uri/ /index.php?$query_string;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
#proxy_cache cache;
|
|
||||||
#proxy_cache_background_update on;
|
|
||||||
#proxy_cache_lock on;
|
|
||||||
#proxy_cache_revalidate on;
|
|
||||||
try_files $uri $uri/ /index.php?$args;
|
try_files $uri $uri/ /index.php?$args;
|
||||||
if (!-f $document_root$fastcgi_script_name) {
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
return 404;
|
return 404;
|
||||||
@@ -134,7 +134,8 @@ data:
|
|||||||
|
|
||||||
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
fastcgi_index index.php;
|
fastcgi_index index.php;
|
||||||
include /etc/nginx/fastcgi_params;
|
include fastcgi_params;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
fastcgi_cache MYAPP;
|
fastcgi_cache MYAPP;
|
||||||
@@ -163,3 +164,122 @@ data:
|
|||||||
}
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
localhost.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name localhost;
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
sendfile off;
|
||||||
|
server_tokens off;
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|||||||
43
build/dev/pod.tpl
Normal file
43
build/dev/pod.tpl
Normal file
@@ -0,0 +1,43 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: common-job-pod
|
||||||
|
namespace: lifeline-web
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- name: common-job
|
||||||
|
image: ubuntu:latest
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: lifeline-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: lifeline-web-cm
|
||||||
|
command: ["bash"]
|
||||||
|
args:
|
||||||
|
- -c
|
||||||
|
- sleep infinity
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/www/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Never
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline
|
||||||
@@ -1,13 +1,77 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-lifeline
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 5Gi
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
name: efs-claim-medicalalert
|
name: efs-claim-lifeline-dev05
|
||||||
namespace: caresage-web
|
namespace: lifeline-web
|
||||||
spec:
|
spec:
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteMany
|
- ReadWriteMany
|
||||||
storageClassName: efs-sc
|
storageClassName: efs-sc
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 10Gi
|
storage: 3Gi
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-lifeline-dev04
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 3Gi
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-lifeline-dev03
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 3Gi
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-lifeline-dev02
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 3Gi
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-lifeline-dev01
|
||||||
|
namespace: lifeline-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 3Gi
|
||||||
|
|||||||
@@ -1,13 +1,12 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
data:
|
|
||||||
CACHE_PASSWORD: UU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXhoUU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXho
|
|
||||||
DB_PASSWORD: cGFudGhlb24=
|
|
||||||
TOKEN: QVRDVFQzeEZmR04wbXpCZjF4NDVaSkVIa3l0eWVYX0NvWXJRSHJwbHk4RlUzWG1wTjZHcGNjNHU5RzB5bW5DMzg2SjFQUTFSR3Z3VG10QWN3WUVmc2s5MGt4UDQxVEc3Q0xhSWwtYUs2cFRTY0NqYVVQcUdOY3phWEFxdVFXaGhlWjc5d1FXa3dTd2J6NDVhY1Z4T21ZZWtpTFlIU21TMTBsWV9ibF9wZ1ZxbG9kMVFxSy1uYmV3PTg4NjIyMEM3
|
|
||||||
kind: Secret
|
kind: Secret
|
||||||
metadata:
|
metadata:
|
||||||
annotations:
|
name: lifeline-web-secrets
|
||||||
|
namespace: lifeline-web
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
name: medicalalert-web-secrets
|
|
||||||
namespace: caresage-web
|
|
||||||
type: Opaque
|
type: Opaque
|
||||||
|
data:
|
||||||
|
DB_PASSWORD: cGFudGhlb24=
|
||||||
|
CACHE_PASSWORD: UU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXhoUU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXho
|
||||||
|
TOKEN: QVRDVFQzeEZmR04wbXpCZjF4NDVaSkVIa3l0eWVYX0NvWXJRSHJwbHk4RlUzWG1wTjZHcGNjNHU5RzB5bW5DMzg2SjFQUTFSR3Z3VG10QWN3WUVmc2s5MGt4UDQxVEc3Q0xhSWwtYUs2cFRTY0NqYVVQcUdOY3phWEFxdVFXaGhlWjc5d1FXa3dTd2J6NDVhY1Z4T21ZZWtpTFlIU21TMTBsWV9ibF9wZ1ZxbG9kMVFxSy1uYmV3PTg4NjIyMEM3
|
||||||
|
|||||||
@@ -1,16 +1,16 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: medicalalert-web
|
name: lifeline-web
|
||||||
namespace: caresage-web
|
namespace: lifeline-web
|
||||||
labels:
|
labels:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
spec:
|
spec:
|
||||||
type: NodePort
|
type: NodePort
|
||||||
selector:
|
selector:
|
||||||
app: medicalalert-web
|
app: lifeline-web
|
||||||
ports:
|
ports:
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 80
|
port: 80
|
||||||
targetPort: 80
|
targetPort: 80
|
||||||
nodePort: 30846
|
nodePort: 30843
|
||||||
|
|||||||
@@ -3,9 +3,11 @@ apiVersion: storage.k8s.io/v1
|
|||||||
metadata:
|
metadata:
|
||||||
name: efs-sc
|
name: efs-sc
|
||||||
provisioner: efs.csi.aws.com
|
provisioner: efs.csi.aws.com
|
||||||
|
#reclaimPolicy: Retain
|
||||||
|
allowVolumeExpansion: true
|
||||||
|
volumeBindingMode: Immediate
|
||||||
parameters:
|
parameters:
|
||||||
provisioningMode: efs-ap
|
provisioningMode: efs-ap
|
||||||
# reclaimPolicy: Retain
|
|
||||||
fileSystemId: fs-01d898a0e680dbd45
|
fileSystemId: fs-01d898a0e680dbd45
|
||||||
directoryPerms: "700"
|
directoryPerms: "700"
|
||||||
gidRangeStart: "1000" # optional
|
gidRangeStart: "1000" # optional
|
||||||
|
|||||||
17
build/qa/configmap.yaml
Normal file
17
build/qa/configmap.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
namespace: caresage-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
data:
|
||||||
|
DB_HOST: dev-medicalalert-ecommerce.c5om7w6xopq1.us-east-1.rds.amazonaws.com
|
||||||
|
ENV: dev
|
||||||
|
WP_DEBUG: "false"
|
||||||
|
DB_CHARSET: utf8
|
||||||
|
DB_COLLATE: utf8_general_ci
|
||||||
|
CACHE_HOST: master.redis-cache-all-be-caresage.cqsmse.use1.cache.amazonaws.com
|
||||||
|
CACHE_PORT: "6379"
|
||||||
|
DB_NAME: "pantheon"
|
||||||
|
DB_USER: "pantheon"
|
||||||
92
build/qa/deployment.tpl
Normal file
92
build/qa/deployment.tpl
Normal file
@@ -0,0 +1,92 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: "11"
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
progressDeadlineSeconds: 600
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 10
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: medicalalert-web
|
||||||
|
strategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 25%
|
||||||
|
maxUnavailable: 25%
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- env:
|
||||||
|
- name: ENVIRONMENT
|
||||||
|
value: "$ENV"
|
||||||
|
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/medicalalert-web:$VERSION
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
imagePullPolicy: Always
|
||||||
|
name: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
name: http
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 200m
|
||||||
|
memory: 300Mi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 100Mi
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
- mountPath: /etc/nginx/conf.d/
|
||||||
|
name: default-conf
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim
|
||||||
|
- name: default-conf
|
||||||
|
configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
98
build/qa/deployment.yml
Normal file
98
build/qa/deployment.yml
Normal file
@@ -0,0 +1,98 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
deployment.kubernetes.io/revision: "11"
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
progressDeadlineSeconds: 600
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 10
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: medicalalert-web
|
||||||
|
strategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 25%
|
||||||
|
maxUnavailable: 25%
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
kubectl.kubernetes.io/restartedAt: "2023-06-08T17:04:19-04:00"
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- env:
|
||||||
|
- name: ENVIRONMENT
|
||||||
|
value: dev
|
||||||
|
image: 716593996126.dkr.ecr.us-east-1.amazonaws.com/medicalalert-web:v01
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
imagePullPolicy: Always
|
||||||
|
name: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
name: http
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 200m
|
||||||
|
memory: 300Mi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 100Mi
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
- mountPath: /etc/nginx/conf.d/
|
||||||
|
name: default-conf
|
||||||
|
- mountPath: /var/lib/nginx/cache
|
||||||
|
name: cache
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert
|
||||||
|
- name: default-conf
|
||||||
|
configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
- name: cache
|
||||||
|
emptyDir: {}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
50
build/qa/jobs.tpl
Normal file
50
build/qa/jobs.tpl
Normal file
@@ -0,0 +1,50 @@
|
|||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: common-jobs
|
||||||
|
namespace: caresage-exec
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- name: common-jobs
|
||||||
|
image: bitnami/percona-xtrabackup:latest
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: lifeline-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: lifeline-web-cm
|
||||||
|
command: ["bash"]
|
||||||
|
args:
|
||||||
|
- -c
|
||||||
|
- cp -rf /usr/share/nginx/html/wp-content/uploads/common-jobs.sh /root/ && /root/common-jobs.sh $JOBNAME
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/html/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Never
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim
|
||||||
|
|
||||||
285
build/qa/medicalalert-web-default-conf-cm.yaml
Normal file
285
build/qa/medicalalert-web-default-conf-cm.yaml
Normal file
@@ -0,0 +1,285 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-default-conf-cm
|
||||||
|
namespace: medicalalert-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
data:
|
||||||
|
default.conf: |
|
||||||
|
|
||||||
|
# ---------------------
|
||||||
|
fastcgi_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=MYAPP:100m inactive=60m;
|
||||||
|
fastcgi_cache_key "$scheme$request_method$host$request_uri";
|
||||||
|
# -----------------------------------------
|
||||||
|
fastcgi_intercept_errors on;
|
||||||
|
fastcgi_ignore_client_abort on;
|
||||||
|
fastcgi_buffers 8 16k;
|
||||||
|
fastcgi_buffer_size 32k;
|
||||||
|
fastcgi_read_timeout 120;
|
||||||
|
#fastcgi_index index.php;
|
||||||
|
# --------------------------------
|
||||||
|
|
||||||
|
# Only cache positive responses
|
||||||
|
proxy_cache_valid 200 1h;
|
||||||
|
proxy_cache_valid 301 302 15m;
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80 default; ## listen for ipv4; this line is default and implied
|
||||||
|
listen [::]:80 default ipv6only=on; ## listen for ipv6
|
||||||
|
|
||||||
|
server_name qa-medicalalert.com "";
|
||||||
|
|
||||||
|
return 301 https://www.$host$request_uri;
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
subdomain.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name ~^(?<subdomain>.+)\.qa-medicalalert\.com$;
|
||||||
|
|
||||||
|
if ($http_x_forwarded_proto != 'https') {
|
||||||
|
return 301 https://$host$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
sendfile off;
|
||||||
|
|
||||||
|
# Security - Hide nginx version number in error pages and Server header
|
||||||
|
server_tokens off;
|
||||||
|
|
||||||
|
# Add stdout logging
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/$subdomain;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SUBDOMAIN $subdomain; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
localhost.conf: |
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen [::]:80;
|
||||||
|
|
||||||
|
server_name localhost;
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
sendfile off;
|
||||||
|
server_tokens off;
|
||||||
|
error_log /dev/stdout error;
|
||||||
|
access_log /dev/stdout;
|
||||||
|
|
||||||
|
# reduce the data that needs to be sent over network
|
||||||
|
gzip on;
|
||||||
|
gzip_min_length 10240;
|
||||||
|
gzip_proxied expired no-cache no-store private auth;
|
||||||
|
gzip_types text/plain text/css text/xml application/json text/javascript application/x-javascript application/xml;
|
||||||
|
gzip_disable "MSIE [1-6]\.";
|
||||||
|
add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
|
||||||
|
add_header X-Cache-Status $upstream_cache_status;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
|
||||||
|
#Cache everything by default
|
||||||
|
set $no_cache 0;
|
||||||
|
|
||||||
|
#Don't cache POST requests
|
||||||
|
if ($request_method = POST)
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if the URL contains a query string
|
||||||
|
if ($query_string != "")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache the following URLs
|
||||||
|
if ($request_uri ~* "/(administrator/|wp-login.php)")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#Don't cache if there is a cookie called PHPSESSID
|
||||||
|
if ($http_cookie = "PHPSESSID")
|
||||||
|
{
|
||||||
|
set $no_cache 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to index.php
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# redirect server error pages to the static page /50x.html
|
||||||
|
#
|
||||||
|
error_page 500 502 503 504 /50x.html;
|
||||||
|
location = /50x.html {
|
||||||
|
root /usr/share/nginx/subdomain/www;
|
||||||
|
}
|
||||||
|
|
||||||
|
# pass the PHP scripts to FastCGI server listening on socket
|
||||||
|
#
|
||||||
|
#~ \.php$
|
||||||
|
location ~ [^/]\.php(/|$) {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
try_files $uri $uri/ /index.php?$args;
|
||||||
|
if (!-f $document_root$fastcgi_script_name) {
|
||||||
|
return 404;
|
||||||
|
}
|
||||||
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
|
||||||
|
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
|
||||||
|
fastcgi_index index.php;
|
||||||
|
include fastcgi_params;
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
|
fastcgi_param SUBDOMAIN www; # $_SERVER["SUBDOMAIN"]
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
fastcgi_cache_bypass $no_cache;
|
||||||
|
fastcgi_no_cache $no_cache;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
fastcgi_cache MYAPP;
|
||||||
|
fastcgi_cache_valid 200 302 60m;
|
||||||
|
fastcgi_cache_valid 301 1h;
|
||||||
|
fastcgi_cache_valid any 1m;
|
||||||
|
proxy_cache_background_update on;
|
||||||
|
proxy_cache_lock on;
|
||||||
|
}
|
||||||
|
|
||||||
|
# deny access to . files, for security
|
||||||
|
#
|
||||||
|
location ~ /\. {
|
||||||
|
log_not_found off;
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
13
build/qa/medicalalert-web-hpa.yml
Normal file
13
build/qa/medicalalert-web-hpa.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: autoscaling/v1
|
||||||
|
kind: HorizontalPodAutoscaler
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web-hpa
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
scaleTargetRef:
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
name: medicalalert-web
|
||||||
|
minReplicas: 1
|
||||||
|
maxReplicas: 1
|
||||||
|
targetCPUUtilizationPercentage: 70
|
||||||
13
build/qa/pvc.yml
Normal file
13
build/qa/pvc.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: efs-claim-medicalalert
|
||||||
|
namespace: caresage-web
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
storageClassName: efs-sc
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 10Gi
|
||||||
13
build/qa/secrets.yaml
Normal file
13
build/qa/secrets.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
data:
|
||||||
|
CACHE_PASSWORD: UU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXhoUU1FRVQ0ZG15VlE4OXZKWUFSUjdQQXho
|
||||||
|
DB_PASSWORD: cGFudGhlb24=
|
||||||
|
TOKEN: QVRDVFQzeEZmR04wbXpCZjF4NDVaSkVIa3l0eWVYX0NvWXJRSHJwbHk4RlUzWG1wTjZHcGNjNHU5RzB5bW5DMzg2SjFQUTFSR3Z3VG10QWN3WUVmc2s5MGt4UDQxVEc3Q0xhSWwtYUs2cFRTY0NqYVVQcUdOY3phWEFxdVFXaGhlWjc5d1FXa3dTd2J6NDVhY1Z4T21ZZWtpTFlIU21TMTBsWV9ibF9wZ1ZxbG9kMVFxSy1uYmV3PTg4NjIyMEM3
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
namespace: caresage-web
|
||||||
|
type: Opaque
|
||||||
16
build/qa/service.yml
Normal file
16
build/qa/service.yml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: medicalalert-web
|
||||||
|
namespace: caresage-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
spec:
|
||||||
|
type: NodePort
|
||||||
|
selector:
|
||||||
|
app: medicalalert-web
|
||||||
|
ports:
|
||||||
|
- protocol: TCP
|
||||||
|
port: 80
|
||||||
|
targetPort: 80
|
||||||
|
nodePort: 30846
|
||||||
13
build/qa/storageclass.yaml
Normal file
13
build/qa/storageclass.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
kind: StorageClass
|
||||||
|
apiVersion: storage.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: efs-sc
|
||||||
|
provisioner: efs.csi.aws.com
|
||||||
|
parameters:
|
||||||
|
provisioningMode: efs-ap
|
||||||
|
# reclaimPolicy: Retain
|
||||||
|
fileSystemId: fs-01d898a0e680dbd45
|
||||||
|
directoryPerms: "700"
|
||||||
|
gidRangeStart: "1000" # optional
|
||||||
|
gidRangeEnd: "2000" # optional
|
||||||
|
basePath: "/dynamic_provisioning" # optional
|
||||||
162
common-jobs-bitbucket.sh
Normal file
162
common-jobs-bitbucket.sh
Normal file
@@ -0,0 +1,162 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Install the required packages #
|
||||||
|
# --------------------------------------------------------------
|
||||||
|
apk upgrade && apk add curl wget zip unzip
|
||||||
|
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl && chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
|
||||||
|
|
||||||
|
. ./setenv.sh
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
export CLUSTER=caresage-eks-cluster-$ENV
|
||||||
|
export SUBDOMAIN=`echo $URL_DOMAIN | awk -F. '{print $1}'`
|
||||||
|
export APP=`echo $URL_DOMAIN | awk -F[.-] '{print $3}'`
|
||||||
|
export NAMESPACE=$APP-web
|
||||||
|
export REPO=$BITBUCKET_REPO_SLUG
|
||||||
|
|
||||||
|
# ---------------------------
|
||||||
|
echo "export SUBDOMAIN=`echo $URL_DOMAIN | awk -F. '{print $1}'`" >> setenv.sh
|
||||||
|
echo "export NEW_URL=https://$URL_DOMAIN" >> setenv.sh
|
||||||
|
echo "export APP=`echo $URL_DOMAIN | awk -F[.-] '{print $3}'`" >> setenv.sh
|
||||||
|
echo "export NAMESPACE=$APP-web" >> setenv.sh
|
||||||
|
echo "export REPO=$BITBUCKET_REPO_SLUG" >> setenv.sh
|
||||||
|
# ---------------------------------------------------------------
|
||||||
|
echo "JOBNAME -- $JOBNAME"
|
||||||
|
echo "ENV -- $ENV"
|
||||||
|
echo "CLUSTER -- $CLUSTER"
|
||||||
|
echo "VERSION -- $BITBUCKET_BUILD_NUMBER"
|
||||||
|
echo "RESTORE_VERSION -- $RESTORE_VERSION"
|
||||||
|
echo "URL_DOMAIN -- $URL_DOMAIN"
|
||||||
|
echo "SUBDOMAIN -- $SUBDOMAIN"
|
||||||
|
echo "VERSION -- $VERSION"
|
||||||
|
echo "RESTORE_VERSION -- $RESTORE_VERSION"
|
||||||
|
echo "DB_NAME -- $DB_NAME"
|
||||||
|
echo "MYSQL_FILE_NAME -- $MYSQL_FILE_NAME"
|
||||||
|
echo "STATIC_FILE_NAME -- $STATIC_FILE_NAME"
|
||||||
|
|
||||||
|
cat ./setenv.sh
|
||||||
|
# -------------------------------------------------------------------------------------------------------------------------
|
||||||
|
opt=$1
|
||||||
|
deploy_version=$2
|
||||||
|
|
||||||
|
case $opt in
|
||||||
|
|
||||||
|
|
||||||
|
subdomain_deploy)
|
||||||
|
|
||||||
|
echo "Deploy the wordpress source code fromo the branch to pvc mount of subdomain..."
|
||||||
|
aws eks update-kubeconfig --name caresage-eks-cluster-$ENV --region us-east-1
|
||||||
|
kubectl apply -f build/$ENV/pod.tpl && sleep 15 && echo pod-created
|
||||||
|
kubectl cp wp $NAMESPACE/common-job-pod:/tmp && echo "wp copy to /tmp done" || exit 9
|
||||||
|
kubectl cp setenv.sh $NAMESPACE/common-job-pod:/tmp/setenv.sh && echo "setenv copy done" || exit 9
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'chmod 755 /tmp/setenv.sh'
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh ; cp -rf /tmp/wp/* /usr/share/nginx/subdomain/$SUBDOMAIN/'
|
||||||
|
echo $URL_DOMAIN | grep www && echo "maindomain $URL_DOMAIN" || kubectl delete po common-job-pod -n $NAMESPACE
|
||||||
|
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
mysql-backup)
|
||||||
|
|
||||||
|
echo "Running mysql backup with s3..."
|
||||||
|
aws eks update-kubeconfig --name caresage-eks-cluster-$ENV --region us-east-1
|
||||||
|
kubectl apply -f build/$ENV/pod.tpl && sleep 15
|
||||||
|
|
||||||
|
kubectl cp setenv.sh $NAMESPACE/common-job-pod:/tmp/setenv.sh
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'chmod 755 /tmp/setenv.sh'
|
||||||
|
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt update
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt install zip wget unzip curl mariadb-client -y
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh ;mysqldump -h $DB_HOST --single-transaction --quick --lock-tables=false --user=$DB_USER --password=$DB_PASSWORD $SUBDOMAIN --skip-lock-tables | gzip > /tmp/$NAMESPACE-pantheon.sql.gz'
|
||||||
|
|
||||||
|
kubectl cp $NAMESPACE/common-job-pod:/tmp/$NAMESPACE-pantheon.sql.gz $NAMESPACE-pantheon-$VERSION-$ENV-$SUBDOMAIN-$(date +%Y-%m-%dT%H_%M_%S).sql.gz
|
||||||
|
FILE=`ls $NAMESPACE-pantheon-*.sql.gz`
|
||||||
|
|
||||||
|
aws s3 cp $FILE s3://commonjobs/$NAMESPACE/$opt/
|
||||||
|
|
||||||
|
curl --request POST -F files=@"$FILE" --url "https://api.bitbucket.org/2.0/repositories/connectamerica/$REPO/downloads" \
|
||||||
|
--header "Authorization: Bearer $TOKEN"
|
||||||
|
|
||||||
|
kubectl delete po common-job-pod -n $NAMESPACE
|
||||||
|
|
||||||
|
;;
|
||||||
|
|
||||||
|
wp-data-backup)
|
||||||
|
|
||||||
|
aws eks update-kubeconfig --name caresage-eks-cluster-$ENV --region us-east-1
|
||||||
|
kubectl apply -f build/$ENV/pod.tpl && sleep 15
|
||||||
|
kubectl cp setenv.sh $NAMESPACE/common-job-pod:/tmp/setenv.sh
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'chmod 755 /tmp/setenv.sh'
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt update
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt install wget zip unzip curl -y
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh;cd /usr/share/nginx/subdomain/$SUBDOMAIN/wp-content/uploads;zip -r /tmp/upload.zip .'
|
||||||
|
kubectl cp $NAMESPACE/common-job-pod:/tmp/upload.zip $NAMESPACE-$VERSION-$ENV-$SUBDOMAIN-$(date +%Y-%m-%dT%H_%M_%S).zip
|
||||||
|
FILE=`ls $NAMESPACE-*.zip`
|
||||||
|
aws s3 cp $FILE s3://commonjobs/$NAMESPACE/$opt/
|
||||||
|
kubectl delete po common-job-pod -n $NAMESPACE
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
mysql-restore)
|
||||||
|
|
||||||
|
aws eks update-kubeconfig --name caresage-eks-cluster-$ENV --region us-east-1
|
||||||
|
kubectl apply -f build/$ENV/pod.tpl && sleep 15
|
||||||
|
kubectl cp setenv.sh $NAMESPACE/common-job-pod:/tmp/setenv.sh
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'chmod 755 /tmp/setenv.sh'
|
||||||
|
|
||||||
|
[ -n "$RESTORE_VERSION" ] && FILE=$RESTORE_VERSION || FILE=$deploy_version
|
||||||
|
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt update
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt install zip wget unzip curl mariadb-client -y
|
||||||
|
|
||||||
|
#Check if file is present in bitbucket download else check on s3
|
||||||
|
# -------------------------------------------------------------------
|
||||||
|
curl -s -L -O -H "Authorization: Bearer $TOKEN" https://api.bitbucket.org/2.0/repositories/connectamerica/$REPO/downloads/$FILE && echo file_downloaded || aws s3 cp s3://commonjobs/$NAMESPACE/mysql-backup/$FILE $FILE
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
kubectl cp $FILE $NAMESPACE/common-job-pod:/tmp/$FILE
|
||||||
|
|
||||||
|
#Create schema if not present #
|
||||||
|
# -------------------------------
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh; mysql -h $DB_HOST --user=$DB_USER --password=$DB_PASSWORD -e "create schema IF NOT EXISTS $SUBDOMAIN"'
|
||||||
|
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh; export FILE=`ls /tmp/*.sql.gz` ; gunzip -c $FILE | mysql -h $DB_HOST --user=$DB_USER --password=$DB_PASSWORD $SUBDOMAIN'
|
||||||
|
|
||||||
|
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'wget https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar ; chmod u+x wp-cli.phar;mv wp-cli.phar /usr/local/bin/wp; php /usr/local/bin/wp --info'
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh; OLD_URL=`wp option get siteurl --allow-root --path=/usr/share/nginx/subdomain/$SUBDOMAIN`; echo "export OLD_URL=$OLD_URL" >> /tmp/setenv.sh'
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh; wp search-replace --allow-root --path=/usr/share/nginx/subdomain/$SUBDOMAIN "$OLD_URL" "$NEW_URL"'
|
||||||
|
|
||||||
|
kubectl delete po common-job-pod -n $NAMESPACE
|
||||||
|
|
||||||
|
;;
|
||||||
|
|
||||||
|
wp-data-restore)
|
||||||
|
aws eks update-kubeconfig --name caresage-eks-cluster-$ENV --region us-east-1
|
||||||
|
kubectl apply -f build/$ENV/pod.tpl && sleep 60 || exit 9
|
||||||
|
kubectl get po common-job-pod -n $NAMESPACE | grep -i pending && exit 9 || echo ----common-pod-NOT-in-pending-state --
|
||||||
|
|
||||||
|
kubectl cp setenv.sh $NAMESPACE/common-job-pod:/tmp/setenv.sh
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c 'chmod 755 /tmp/setenv.sh'
|
||||||
|
|
||||||
|
[ -n "$RESTORE_VERSION" ] && FILE=$RESTORE_VERSION || FILE=$deploy_version
|
||||||
|
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt update
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- apt install wget zip unzip curl -y
|
||||||
|
aws s3 cp s3://commonjobs/$NAMESPACE/wp-data-backup/$FILE $FILE
|
||||||
|
kubectl cp $FILE $NAMESPACE/common-job-pod:/tmp/$FILE
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh; mkdir -p /usr/share/nginx/subdomain/$SUBDOMAIN/wp-content/uploads'
|
||||||
|
kubectl exec common-job-pod -n $NAMESPACE -- sh -c '. /tmp/setenv.sh;export FILE=`ls /tmp/*.zip`;unzip -o $FILE -d /usr/share/nginx/subdomain/$SUBDOMAIN/wp-content/uploads'
|
||||||
|
kubectl delete po common-job-pod -n $NAMESPACE
|
||||||
|
|
||||||
|
;;
|
||||||
|
|
||||||
|
*)
|
||||||
|
echo "common job shell script utility taking variables from env"
|
||||||
|
echo "Usage: $0 {mysql-backup|wp-data-backup|mysql-restore|wp-data-restore}"
|
||||||
|
echo "mysql-backup : Run MySQL backup utility and upload"
|
||||||
|
echo "mysql-restore : Run MySQL backup utility and upload it to bitbucket."
|
||||||
|
echo "wp-data-backup : Run web server backup utility and uplaod."
|
||||||
|
echo "wp-data-restore : Run web server backup utility and uplaod to bitbucket." ;;
|
||||||
|
esac
|
||||||
68
common-jobs.sh
Normal file
68
common-jobs.sh
Normal file
@@ -0,0 +1,68 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
|
||||||
|
# Install the required packages #
|
||||||
|
# --------------------------------------------------------------
|
||||||
|
apt update && apt install curl unzip zip mariadb-client -y
|
||||||
|
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" && unzip awscliv2.zip && ./aws/install
|
||||||
|
# -------------------------------------------------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
opt=$1
|
||||||
|
case $opt in
|
||||||
|
mysql-backup)
|
||||||
|
echo "Running mysql backup with s3..."
|
||||||
|
export DATABASES=perchon
|
||||||
|
export MYSQL_USER=perchona
|
||||||
|
|
||||||
|
# execute the command now #
|
||||||
|
# --------------------------------------------------------------------------------------------------------------
|
||||||
|
mysqldump -h $DB_HOST --single-transaction --quick --lock-tables=false --user=pantheon --password=$DB_PASSWORD \
|
||||||
|
pantheon --skip-lock-tables | gzip > "/tmp/lifeline-web-pantheon-$(date +%Y-%m-%dT%H_%M_%S).sql.gz"
|
||||||
|
# ----------------------------------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
# upload the same to s3 #
|
||||||
|
# -----------------------------------------
|
||||||
|
# aws s3 cp /tmp/lifeline-web-pantheon-*.sql.gz s3://caresage-dev-ws/mysqlbackups/
|
||||||
|
# aws s3 ls s3://caresage-dev-ws/mysqlbackups/
|
||||||
|
|
||||||
|
# upload to bitbucket #
|
||||||
|
# ---------------------------------------
|
||||||
|
FILE=`ls /tmp/lifeline-web-pantheon-*.sql.gz`
|
||||||
|
curl --request POST -F files=@"$FILE" --url 'https://api.bitbucket.org/2.0/repositories/connectamerica/lifeline-ecommerce/downloads' \
|
||||||
|
--header "Authorization: Bearer $TOKEN"
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
mysql-backup-bitbucket)
|
||||||
|
echo "Running bmysql-backup-s3 with bitbucket ..."
|
||||||
|
export DATABASES=perchona
|
||||||
|
export MYSQL_USER=perchona
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
wp-data-backup)
|
||||||
|
echo "Running wp-data-s3..."
|
||||||
|
cd /usr/share/nginx/html/wp-content/
|
||||||
|
zip -r lifeline-web-static-data-$(date +%Y-%m-%dT%H_%M_%S).zip ./uploads && FILE=`ls lifeline-web-static-data-*.zip`
|
||||||
|
curl --request POST -F files=@"$FILE" --url 'https://api.bitbucket.org/2.0/repositories/connectamerica/lifeline-ecommerce/downloads' \
|
||||||
|
--header "Authorization: Bearer $TOKEN"
|
||||||
|
#aws s3 mv lifeline-web-static-data-*.zip s3://caresage-dev-ws/staticbackups/
|
||||||
|
#aws s3 ls s3://caresage-dev-ws/staticbackups/
|
||||||
|
|
||||||
|
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
wp-data-bitbucket)
|
||||||
|
echo "Running wp-data-bitbucket ..."
|
||||||
|
;;
|
||||||
|
|
||||||
|
|
||||||
|
*)
|
||||||
|
echo "common job shell script utility taking variables from env"
|
||||||
|
echo "Usage: $0 {mysql-backup|mysql-backup-bitbucket|wp-data-backup}"
|
||||||
|
echo " mysql-backup : Run MySQL backup utility and upload"
|
||||||
|
echo " mysql-backup-bitbucket : Run MySQL backup utility and upload it to bitbucket."
|
||||||
|
echo " wp-data-backup : Run web server backup utility and uplaod."
|
||||||
|
echo " wp-data-bitbucket : Run web server backup utility and uplaod to bitbucket." ;;
|
||||||
|
esac
|
||||||
5
envvars-phpfpm
Normal file
5
envvars-phpfpm
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
env["CACHE_PASSWORD"] = $CACHE_PASSWORD
|
||||||
|
env["CACHE_HOST"] = $CACHE_HOST
|
||||||
|
env["CACHE_PORT"] = $CACHE_PORT
|
||||||
|
env["DB_PASSWORD"] = $DB_PASSWORD
|
||||||
|
env["DB_HOST"] = $DB_HOST
|
||||||
50
jobs.tpl
Normal file
50
jobs.tpl
Normal file
@@ -0,0 +1,50 @@
|
|||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: common-jobs
|
||||||
|
namespace: lifeline-web
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
ttlSecondsAfterFinished: 10
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: lifeline-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- name: common-jobs
|
||||||
|
image: ubuntu:latest
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: lifeline-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: lifeline-web-cm
|
||||||
|
command: ["bash"]
|
||||||
|
args:
|
||||||
|
- -c
|
||||||
|
- cp -rf /usr/share/nginx/subdomain/www/wp-content/uploads/common-jobs.sh /root/ && chmod 755 /root/common-jobs.sh && /root/common-jobs.sh $JOBNAME
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/www/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Never
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-lifeline
|
||||||
69
pod.tpl
Normal file
69
pod.tpl
Normal file
@@ -0,0 +1,69 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: common-job-pod
|
||||||
|
namespace: medicalalert-web
|
||||||
|
labels:
|
||||||
|
app: medicalalert-web
|
||||||
|
rds: enable
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
nodeAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
nodeSelectorTerms:
|
||||||
|
- matchExpressions:
|
||||||
|
- key: kubernetes.io/arch
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- amd64
|
||||||
|
- arm64
|
||||||
|
containers:
|
||||||
|
- name: common-job
|
||||||
|
image: wyveo/nginx-php-fpm:php74
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: medicalalert-web-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: medicalalert-web-cm
|
||||||
|
command: ["bash"]
|
||||||
|
args:
|
||||||
|
- -c
|
||||||
|
- sleep infinity
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/www/wp-content/uploads
|
||||||
|
name: persistent-storage
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev01
|
||||||
|
name: persistent-storage-dev01
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev02
|
||||||
|
name: persistent-storage-dev02
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev03
|
||||||
|
name: persistent-storage-dev03
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev04
|
||||||
|
name: persistent-storage-dev04
|
||||||
|
- mountPath: /usr/share/nginx/subdomain/dev05
|
||||||
|
name: persistent-storage-dev05
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: regcred
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/os: linux
|
||||||
|
restartPolicy: Never
|
||||||
|
volumes:
|
||||||
|
- name: persistent-storage
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert
|
||||||
|
- name: persistent-storage-dev01
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert-dev01
|
||||||
|
- name: persistent-storage-dev02
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert-dev02
|
||||||
|
- name: persistent-storage-dev03
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert-dev03
|
||||||
|
- name: persistent-storage-dev04
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert-dev04
|
||||||
|
- name: persistent-storage-dev05
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: efs-claim-medicalalert-dev05
|
||||||
|
|
||||||
7
redinessprobe-wp.sh
Normal file
7
redinessprobe-wp.sh
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
sed -i '/^define.*NONCE_SALT.*/a define(\'\'WP_SITEURL\'', '\'http://localhost/\'');' /usr/share/nginx/html/wp-config.php || exit
|
||||||
|
sed -i '/^define.*NONCE_SALT.*/a define(\'\'WP_HOME\'', '\'http://localhost/\'');' /usr/share/nginx/html/wp-config.php || exit
|
||||||
|
wget -q --spider localhost && wget -q --spider localhost/wp-login.php || exit
|
||||||
|
sed -i '/http\:\/\/localhost/d' /usr/share/nginx/html/wp-config.php || exit
|
||||||
|
|
||||||
|
|
||||||
25
setenv.sh
Normal file
25
setenv.sh
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
case $ENV in
|
||||||
|
|
||||||
|
dev)
|
||||||
|
export CLUSTER=caresage-eks-cluster-$ENV
|
||||||
|
export URL_DOMAIN=$SUBDOMAIN.$ENV-medicalalert.com
|
||||||
|
;;
|
||||||
|
qa)
|
||||||
|
export CLUSTER=caresage-eks-cluster-$ENV
|
||||||
|
export URL_DOMAIN=$SUBDOMAIN.$ENV-medicalalert.com
|
||||||
|
;;
|
||||||
|
stage)
|
||||||
|
export CLUSTER=caresage-eks-cluster-$ENV
|
||||||
|
export URL_DOMAIN=$SUBDOMAIN.$ENV-medicalalert.com
|
||||||
|
;;
|
||||||
|
prod)
|
||||||
|
export CLUSTER=caresage-eks-cluster-$ENV
|
||||||
|
export URL_DOMAIN=$SUBDOMAIN.medicalalert.com
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "source env varibales"
|
||||||
|
echo "Usage: $0 ENV"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
Reference in New Issue
Block a user