diff --git a/.github/workflows/CI-backend.yml b/.github/workflows/CI-backend.yml deleted file mode 100644 index 38d66dd..0000000 --- a/.github/workflows/CI-backend.yml +++ /dev/null @@ -1,47 +0,0 @@ -name: CI-backend - -on: - push: - branches: - - master - pull_request: - -permissions: write-all - -jobs: - main: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 - with: - fetch-depth: 0 - fetch-tags: true - - - name: Setup Git - run: | - git config user.name "GitHub Bot" - git config user.email "gituser@example.com" - - - name: Set up QEMU - uses: docker/setup-qemu-action@v3 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 - - - name: Login to GitHub Container Registry - uses: docker/login-action@v1 - with: - registry: ghcr.io - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - - - name: Build and Push Docker Images - run: | - cd cloud/backend - # Find each module's target directory and build the image - for module in $(find . -name "target" -type d -exec dirname {} \;); do - if [ -f "$module/*-runner" ]; then - image_name=$(basename $module) # Use the module name as the image name - docker buildx build --push --tag ghcr.io/${{ github.repository }}/$image_name -f "$module/Dockerfile" "$module" - fi - done diff --git a/.github/workflows/docker-build-alert.yml b/.github/workflows/docker-build-alert.yml new file mode 100644 index 0000000..1e5ca29 --- /dev/null +++ b/.github/workflows/docker-build-alert.yml @@ -0,0 +1,39 @@ +name: CI-backend + +on: + push: + branches: + - main + - fix-ci + +permissions: write-all + +jobs: + main: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + - name: Login to GitHub Container Registry + uses: docker/login-action@v1 + with: + registry: ghcr.io + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: downcase REPO name as output + id: downcase + run: | + echo "::set-output name=downcase::$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" + - name: Build and push api image + uses: docker/build-push-action@v5 + with: + platforms: linux/amd64,linux/arm64 + push: true + context: cloud/backend + file: cloud/backend/alert-management/src/main/docker/Dockerfile.multistage + tags: ghcr.io/${{ steps.downcase.outputs.downcase }}/alert-management:${{ github.sha }}, ghcr.io/${{ steps.downcase.outputs.downcase }}/alert-management:${{ github.ref_name }} + diff --git a/.github/workflows/docker-build-gateway.yml b/.github/workflows/docker-build-gateway.yml new file mode 100644 index 0000000..7c608c1 --- /dev/null +++ b/.github/workflows/docker-build-gateway.yml @@ -0,0 +1,45 @@ +name: Docker Build and Push Gateway Images +on: + push: + branches: + - main + - fix-ci + +permissions: write-all + +jobs: + build-push-gateway: + runs-on: ubuntu-latest + strategy: + matrix: + application: [adapter, dataManager, AlerteDetector] + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + - name: Login to GitHub Container Registry + uses: docker/login-action@v1 + with: + registry: ghcr.io + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: downcase REPO name as output + id: downcase + run: | + echo "::set-output name=downcase::$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" + + - name: downcase APPLICATION name as output + id: downcase-application + run: | + echo "::set-output name=downcase::$(echo ${{ matrix.application }} | tr '[:upper:]' '[:lower:]')" + - name: Build and push api image + uses: docker/build-push-action@v5 + with: + platforms: linux/amd64,linux/arm64 + push: true + context: gateway/${{ matrix.application }} + tags: ghcr.io/${{ steps.downcase.outputs.downcase }}/gateway-${{ steps.downcase-application.outputs.downcase }}:${{ github.sha }}, ghcr.io/${{ steps.downcase.outputs.downcase }}/gateway-${{ steps.downcase-application.outputs.downcase }}:${{ github.ref_name }} + diff --git a/.github/workflows/docker-build-patient.yml b/.github/workflows/docker-build-patient.yml new file mode 100644 index 0000000..961f9aa --- /dev/null +++ b/.github/workflows/docker-build-patient.yml @@ -0,0 +1,39 @@ +name: CI-backend + +on: + push: + branches: + - main + - fix-ci + +permissions: write-all + +jobs: + main: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + - name: Login to GitHub Container Registry + uses: docker/login-action@v1 + with: + registry: ghcr.io + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: downcase REPO name as output + id: downcase + run: | + echo "::set-output name=downcase::$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" + - name: Build and push api image + uses: docker/build-push-action@v5 + with: + platforms: linux/amd64,linux/arm64 + push: true + context: cloud/backend + file: cloud/backend/patient-management/src/main/docker/Dockerfile.multistage + tags: ghcr.io/${{ steps.downcase.outputs.downcase }}/patient-management:${{ github.sha }}, ghcr.io/${{ steps.downcase.outputs.downcase }}/patient-management:${{ github.ref_name }} + diff --git a/README.md b/README.md index 911b67c..698b2c9 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ ### Create Kind cluster ```bash -kind create cluster --config kind-config.yaml +kind create cluster --config kind-cluster.yaml ``` ### Install Manifests @@ -14,5 +14,5 @@ NB: The command will fail on the first run because the crds are not yet created. ### Add the following entries to /etc/hosts ```bash -127.0.0.1 keycloak.al.apoorva64.com prometheus.al.apoorva64.com grafana.al.apoorva64.com +127.0.0.1 keycloak.al.apoorva64.com prometheus.al.apoorva64.com grafana.al.apoorva64.com patient-management.al.apoorva64.com alert-management.al.apoorva64.com ``` \ No newline at end of file diff --git a/cloud/backend/.dockerignore b/cloud/backend/.dockerignore index 94810d0..23347a3 100644 --- a/cloud/backend/.dockerignore +++ b/cloud/backend/.dockerignore @@ -1,4 +1,3 @@ -* !target/*-runner !target/*-runner.jar !target/lib/* diff --git a/cloud/backend/Service-analyse-haut-niveau/src/main/resources/application.properties b/cloud/backend/Service-analyse-haut-niveau/src/main/resources/application.properties index cbb6d7d..926727f 100644 --- a/cloud/backend/Service-analyse-haut-niveau/src/main/resources/application.properties +++ b/cloud/backend/Service-analyse-haut-niveau/src/main/resources/application.properties @@ -1,3 +1,14 @@ +# configure the mongoDB client for a single instance on localhost +quarkus.mongodb.connection-string=${DB_URL:mongodb://localhost:27017} +quarkus.mongodb.database=${DB_NAME:poulet} +# Enable keycloak authentication +quarkus.oidc.auth-server-url=${AUTH_SERVER_URL:http://localhost:8081/realms/poulet-realm} +quarkus.oidc.client-id=${CLIENT_ID:backend-service} +quarkus.oidc.credentials.secret=${CLIENT_SECRET:J1jZPePtgzG4Q9ltZTHlBGKEyj93P4hd} +quarkus.oidc.application-type=web-app +# Docker build properties +quarkus.container-image.registry=ghcr.io + quarkus.http.port=8083 quarkus.metric.enabled=true diff --git a/cloud/backend/alert-management/.dockerignore b/cloud/backend/alert-management/.dockerignore index 94810d0..23347a3 100644 --- a/cloud/backend/alert-management/.dockerignore +++ b/cloud/backend/alert-management/.dockerignore @@ -1,4 +1,3 @@ -* !target/*-runner !target/*-runner.jar !target/lib/* diff --git a/cloud/backend/alert-management/manifests/base/deployment.yml b/cloud/backend/alert-management/manifests/base/deployment.yml new file mode 100644 index 0000000..f916b36 --- /dev/null +++ b/cloud/backend/alert-management/manifests/base/deployment.yml @@ -0,0 +1,30 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + io.kompose.service: alert-management + name: alert-management +spec: + replicas: 1 + selector: + matchLabels: + io.kompose.service: alert-management + template: + metadata: + labels: + io.kompose.service: alert-management + spec: + containers: + - image: ghcr.io/startupnationlabs/poulet/alert-management:e3911b5eaa38b49c29022ad6c7e83d45884a7f32 + name: alert-management + ports: + - containerPort: 8080 + protocol: TCP + resources: + requests: + cpu: "100m" + memory: "128Mi" + limits: + cpu: "500m" + memory: "512Mi" + restartPolicy: Always diff --git a/cloud/backend/alert-management/manifests/base/ingress.yml b/cloud/backend/alert-management/manifests/base/ingress.yml new file mode 100644 index 0000000..93f5065 --- /dev/null +++ b/cloud/backend/alert-management/manifests/base/ingress.yml @@ -0,0 +1,24 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: ingress-alert-management + annotations: + kubernetes.io/ingress.class: traefik + cert-manager.io/cluster-issuer: letsencrypt-prod + traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd +spec: + rules: + - host: alert-management.al.polytech.apoorva64.com + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: alert-management + port: + number: 8080 + tls: + - hosts: + - alert-management.al.polytech.apoorva64.com + secretName: alert-management.al.polytech.apoorva64-tls diff --git a/cloud/backend/alert-management/manifests/base/kustomization.yml b/cloud/backend/alert-management/manifests/base/kustomization.yml new file mode 100644 index 0000000..5343fb8 --- /dev/null +++ b/cloud/backend/alert-management/manifests/base/kustomization.yml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 + +kind: Kustomization +resources: + - deployment.yml + - ingress.yml + - service.yml \ No newline at end of file diff --git a/cloud/backend/alert-management/manifests/base/service.yml b/cloud/backend/alert-management/manifests/base/service.yml new file mode 100644 index 0000000..f1134dc --- /dev/null +++ b/cloud/backend/alert-management/manifests/base/service.yml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: Service +metadata: + labels: + io.kompose.service: alert-management + name: alert-management +spec: + ports: + - name: "8080" + port: 8080 + targetPort: 8080 + selector: + io.kompose.service: alert-management diff --git a/cloud/backend/alert-management/mvnw b/cloud/backend/alert-management/mvnw new file mode 100644 index 0000000..5e9618c --- /dev/null +++ b/cloud/backend/alert-management/mvnw @@ -0,0 +1,332 @@ +#!/bin/sh +# ---------------------------------------------------------------------------- +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. +# ---------------------------------------------------------------------------- + +# ---------------------------------------------------------------------------- +# Apache Maven Wrapper startup batch script, version 3.3.2 +# +# Required ENV vars: +# ------------------ +# JAVA_HOME - location of a JDK home dir +# +# Optional ENV vars +# ----------------- +# MAVEN_OPTS - parameters passed to the Java VM when running Maven +# e.g. to debug Maven itself, use +# set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000 +# MAVEN_SKIP_RC - flag to disable loading of mavenrc files +# ---------------------------------------------------------------------------- + +if [ -z "$MAVEN_SKIP_RC" ]; then + + if [ -f /usr/local/etc/mavenrc ]; then + . /usr/local/etc/mavenrc + fi + + if [ -f /etc/mavenrc ]; then + . /etc/mavenrc + fi + + if [ -f "$HOME/.mavenrc" ]; then + . "$HOME/.mavenrc" + fi + +fi + +# OS specific support. $var _must_ be set to either true or false. +cygwin=false +darwin=false +mingw=false +case "$(uname)" in +CYGWIN*) cygwin=true ;; +MINGW*) mingw=true ;; +Darwin*) + darwin=true + # Use /usr/libexec/java_home if available, otherwise fall back to /Library/Java/Home + # See https://developer.apple.com/library/mac/qa/qa1170/_index.html + if [ -z "$JAVA_HOME" ]; then + if [ -x "/usr/libexec/java_home" ]; then + JAVA_HOME="$(/usr/libexec/java_home)" + export JAVA_HOME + else + JAVA_HOME="/Library/Java/Home" + export JAVA_HOME + fi + fi + ;; +esac + +if [ -z "$JAVA_HOME" ]; then + if [ -r /etc/gentoo-release ]; then + JAVA_HOME=$(java-config --jre-home) + fi +fi + +# For Cygwin, ensure paths are in UNIX format before anything is touched +if $cygwin; then + [ -n "$JAVA_HOME" ] \ + && JAVA_HOME=$(cygpath --unix "$JAVA_HOME") + [ -n "$CLASSPATH" ] \ + && CLASSPATH=$(cygpath --path --unix "$CLASSPATH") +fi + +# For Mingw, ensure paths are in UNIX format before anything is touched +if $mingw; then + [ -n "$JAVA_HOME" ] && [ -d "$JAVA_HOME" ] \ + && JAVA_HOME="$( + cd "$JAVA_HOME" || ( + echo "cannot cd into $JAVA_HOME." >&2 + exit 1 + ) + pwd + )" +fi + +if [ -z "$JAVA_HOME" ]; then + javaExecutable="$(which javac)" + if [ -n "$javaExecutable" ] && ! [ "$(expr "$javaExecutable" : '\([^ ]*\)')" = "no" ]; then + # readlink(1) is not available as standard on Solaris 10. + readLink=$(which readlink) + if [ ! "$(expr "$readLink" : '\([^ ]*\)')" = "no" ]; then + if $darwin; then + javaHome="$(dirname "$javaExecutable")" + javaExecutable="$(cd "$javaHome" && pwd -P)/javac" + else + javaExecutable="$(readlink -f "$javaExecutable")" + fi + javaHome="$(dirname "$javaExecutable")" + javaHome=$(expr "$javaHome" : '\(.*\)/bin') + JAVA_HOME="$javaHome" + export JAVA_HOME + fi + fi +fi + +if [ -z "$JAVACMD" ]; then + if [ -n "$JAVA_HOME" ]; then + if [ -x "$JAVA_HOME/jre/sh/java" ]; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD="$JAVA_HOME/jre/sh/java" + else + JAVACMD="$JAVA_HOME/bin/java" + fi + else + JAVACMD="$( + \unset -f command 2>/dev/null + \command -v java + )" + fi +fi + +if [ ! -x "$JAVACMD" ]; then + echo "Error: JAVA_HOME is not defined correctly." >&2 + echo " We cannot execute $JAVACMD" >&2 + exit 1 +fi + +if [ -z "$JAVA_HOME" ]; then + echo "Warning: JAVA_HOME environment variable is not set." >&2 +fi + +# traverses directory structure from process work directory to filesystem root +# first directory with .mvn subdirectory is considered project base directory +find_maven_basedir() { + if [ -z "$1" ]; then + echo "Path not specified to find_maven_basedir" >&2 + return 1 + fi + + basedir="$1" + wdir="$1" + while [ "$wdir" != '/' ]; do + if [ -d "$wdir"/.mvn ]; then + basedir=$wdir + break + fi + # workaround for JBEAP-8937 (on Solaris 10/Sparc) + if [ -d "${wdir}" ]; then + wdir=$( + cd "$wdir/.." || exit 1 + pwd + ) + fi + # end of workaround + done + printf '%s' "$( + cd "$basedir" || exit 1 + pwd + )" +} + +# concatenates all lines of a file +concat_lines() { + if [ -f "$1" ]; then + # Remove \r in case we run on Windows within Git Bash + # and check out the repository with auto CRLF management + # enabled. Otherwise, we may read lines that are delimited with + # \r\n and produce $'-Xarg\r' rather than -Xarg due to word + # splitting rules. + tr -s '\r\n' ' ' <"$1" + fi +} + +log() { + if [ "$MVNW_VERBOSE" = true ]; then + printf '%s\n' "$1" + fi +} + +BASE_DIR=$(find_maven_basedir "$(dirname "$0")") +if [ -z "$BASE_DIR" ]; then + exit 1 +fi + +MAVEN_PROJECTBASEDIR=${MAVEN_BASEDIR:-"$BASE_DIR"} +export MAVEN_PROJECTBASEDIR +log "$MAVEN_PROJECTBASEDIR" + +########################################################################################## +# Extension to allow automatically downloading the maven-wrapper.jar from Maven-central +# This allows using the maven wrapper in projects that prohibit checking in binary data. +########################################################################################## +wrapperJarPath="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar" +if [ -r "$wrapperJarPath" ]; then + log "Found $wrapperJarPath" +else + log "Couldn't find $wrapperJarPath, downloading it ..." + + if [ -n "$MVNW_REPOURL" ]; then + wrapperUrl="$MVNW_REPOURL/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar" + else + wrapperUrl="https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar" + fi + while IFS="=" read -r key value; do + # Remove '\r' from value to allow usage on windows as IFS does not consider '\r' as a separator ( considers space, tab, new line ('\n'), and custom '=' ) + safeValue=$(echo "$value" | tr -d '\r') + case "$key" in wrapperUrl) + wrapperUrl="$safeValue" + break + ;; + esac + done <"$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.properties" + log "Downloading from: $wrapperUrl" + + if $cygwin; then + wrapperJarPath=$(cygpath --path --windows "$wrapperJarPath") + fi + + if command -v wget >/dev/null; then + log "Found wget ... using wget" + [ "$MVNW_VERBOSE" = true ] && QUIET="" || QUIET="--quiet" + if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then + wget $QUIET "$wrapperUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath" + else + wget $QUIET --http-user="$MVNW_USERNAME" --http-password="$MVNW_PASSWORD" "$wrapperUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath" + fi + elif command -v curl >/dev/null; then + log "Found curl ... using curl" + [ "$MVNW_VERBOSE" = true ] && QUIET="" || QUIET="--silent" + if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then + curl $QUIET -o "$wrapperJarPath" "$wrapperUrl" -f -L || rm -f "$wrapperJarPath" + else + curl $QUIET --user "$MVNW_USERNAME:$MVNW_PASSWORD" -o "$wrapperJarPath" "$wrapperUrl" -f -L || rm -f "$wrapperJarPath" + fi + else + log "Falling back to using Java to download" + javaSource="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/MavenWrapperDownloader.java" + javaClass="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/MavenWrapperDownloader.class" + # For Cygwin, switch paths to Windows format before running javac + if $cygwin; then + javaSource=$(cygpath --path --windows "$javaSource") + javaClass=$(cygpath --path --windows "$javaClass") + fi + if [ -e "$javaSource" ]; then + if [ ! -e "$javaClass" ]; then + log " - Compiling MavenWrapperDownloader.java ..." + ("$JAVA_HOME/bin/javac" "$javaSource") + fi + if [ -e "$javaClass" ]; then + log " - Running MavenWrapperDownloader.java ..." + ("$JAVA_HOME/bin/java" -cp .mvn/wrapper MavenWrapperDownloader "$wrapperUrl" "$wrapperJarPath") || rm -f "$wrapperJarPath" + fi + fi + fi +fi +########################################################################################## +# End of extension +########################################################################################## + +# If specified, validate the SHA-256 sum of the Maven wrapper jar file +wrapperSha256Sum="" +while IFS="=" read -r key value; do + case "$key" in wrapperSha256Sum) + wrapperSha256Sum=$value + break + ;; + esac +done <"$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.properties" +if [ -n "$wrapperSha256Sum" ]; then + wrapperSha256Result=false + if command -v sha256sum >/dev/null; then + if echo "$wrapperSha256Sum $wrapperJarPath" | sha256sum -c >/dev/null 2>&1; then + wrapperSha256Result=true + fi + elif command -v shasum >/dev/null; then + if echo "$wrapperSha256Sum $wrapperJarPath" | shasum -a 256 -c >/dev/null 2>&1; then + wrapperSha256Result=true + fi + else + echo "Checksum validation was requested but neither 'sha256sum' or 'shasum' are available." >&2 + echo "Please install either command, or disable validation by removing 'wrapperSha256Sum' from your maven-wrapper.properties." >&2 + exit 1 + fi + if [ $wrapperSha256Result = false ]; then + echo "Error: Failed to validate Maven wrapper SHA-256, your Maven wrapper might be compromised." >&2 + echo "Investigate or delete $wrapperJarPath to attempt a clean download." >&2 + echo "If you updated your Maven version, you need to update the specified wrapperSha256Sum property." >&2 + exit 1 + fi +fi + +MAVEN_OPTS="$(concat_lines "$MAVEN_PROJECTBASEDIR/.mvn/jvm.config") $MAVEN_OPTS" + +# For Cygwin, switch paths to Windows format before running java +if $cygwin; then + [ -n "$JAVA_HOME" ] \ + && JAVA_HOME=$(cygpath --path --windows "$JAVA_HOME") + [ -n "$CLASSPATH" ] \ + && CLASSPATH=$(cygpath --path --windows "$CLASSPATH") + [ -n "$MAVEN_PROJECTBASEDIR" ] \ + && MAVEN_PROJECTBASEDIR=$(cygpath --path --windows "$MAVEN_PROJECTBASEDIR") +fi + +# Provide a "standardized" way to retrieve the CLI args that will +# work with both Windows and non-Windows executions. +MAVEN_CMD_LINE_ARGS="$MAVEN_CONFIG $*" +export MAVEN_CMD_LINE_ARGS + +WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain + +# shellcheck disable=SC2086 # safe args +exec "$JAVACMD" \ + $MAVEN_OPTS \ + $MAVEN_DEBUG_OPTS \ + -classpath "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar" \ + "-Dmaven.multiModuleProjectDirectory=${MAVEN_PROJECTBASEDIR}" \ + ${WRAPPER_LAUNCHER} $MAVEN_CONFIG "$@" diff --git a/cloud/backend/alert-management/pom.xml b/cloud/backend/alert-management/pom.xml index 45915bb..6681797 100644 --- a/cloud/backend/alert-management/pom.xml +++ b/cloud/backend/alert-management/pom.xml @@ -104,6 +104,13 @@ ${compiler-plugin.version} true + + + org.projectlombok + lombok + 1.18.34 + + @@ -150,10 +157,50 @@ false true + + + + local + + + local + + + + true + docker + + ghcr.io + StartUpNationLabs/poulet + poulet/${project.artifactId} + ${project.version} + + plain + + + + ci + + + ci + + + + false true true + true linux/amd64,linux/arm64 + src/main/build/Dockerfile.jvm + + ghcr.io + StartUpNationLabs/poulet + ${project.artifactId} + ${project.version} + diff --git a/cloud/backend/alert-management/src/main/docker/Dockerfile.jvm b/cloud/backend/alert-management/src/main/docker/Dockerfile.jvm new file mode 100644 index 0000000..49fa8cf --- /dev/null +++ b/cloud/backend/alert-management/src/main/docker/Dockerfile.jvm @@ -0,0 +1,97 @@ +#### +# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode +# +# Before building the container image run: +# +# ./mvnw package +# +# Then, build the image with: +# +# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/patient-management-jvm . +# +# Then run the container using: +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management-jvm +# +# If you want to include the debug port into your docker image +# you will have to expose the debug port (default 5005 being the default) like this : EXPOSE 8080 5005. +# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005 +# when running the container +# +# Then run the container using : +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management-jvm +# +# This image uses the `run-java.sh` script to run the application. +# This scripts computes the command line to execute your Java application, and +# includes memory/GC tuning. +# You can configure the behavior using the following environment properties: +# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") +# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options +# in JAVA_OPTS (example: "-Dsome.property=foo") +# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is +# used to calculate a default maximal heap memory based on a containers restriction. +# If used in a container without any memory constraints for the container then this +# option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio +# of the container available memory as set here. The default is `50` which means 50% +# of the available memory is used as an upper boundary. You can skip this mechanism by +# setting this value to `0` in which case no `-Xmx` option is added. +# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This +# is used to calculate a default initial heap memory based on the maximum heap memory. +# If used in a container without any memory constraints for the container then this +# option has no effect. If there is a memory constraint then `-Xms` is set to a ratio +# of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx` +# is used as the initial heap size. You can skip this mechanism by setting this value +# to `0` in which case no `-Xms` option is added (example: "25") +# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS. +# This is used to calculate the maximum value of the initial heap memory. If used in +# a container without any memory constraints for the container then this option has +# no effect. If there is a memory constraint then `-Xms` is limited to the value set +# here. The default is 4096MB which means the calculated value of `-Xms` never will +# be greater than 4096MB. The value of this variable is expressed in MB (example: "4096") +# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output +# when things are happening. This option, if set to true, will set +# `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true"). +# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example: +# true"). +# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787"). +# - CONTAINER_CORE_LIMIT: A calculated core limit as described in +# https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2") +# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024"). +# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion. +# (example: "20") +# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking. +# (example: "40") +# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection. +# (example: "4") +# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus +# previous GC times. (example: "90") +# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20") +# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100") +# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should +# contain the necessary JRE command-line options to specify the required GC, which +# will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC). +# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080") +# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080") +# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be +# accessed directly. (example: "foo.example.com,bar.example.com") +# +### +FROM registry.access.redhat.com/ubi8/openjdk-21:1.20 + +ENV LANGUAGE='en_US:en' + + +# We make four distinct layers so if there are application changes the library layers can be re-used +COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/ +COPY --chown=185 target/quarkus-app/*.jar /deployments/ +COPY --chown=185 target/quarkus-app/app/ /deployments/app/ +COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/ + +EXPOSE 8080 +USER 185 +ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager" +ENV JAVA_APP_JAR="/deployments/quarkus-run.jar" + +ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ] + diff --git a/cloud/backend/alert-management/src/main/docker/Dockerfile.legacy-jar b/cloud/backend/alert-management/src/main/docker/Dockerfile.legacy-jar new file mode 100644 index 0000000..01e4495 --- /dev/null +++ b/cloud/backend/alert-management/src/main/docker/Dockerfile.legacy-jar @@ -0,0 +1,93 @@ +#### +# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode +# +# Before building the container image run: +# +# ./mvnw package -Dquarkus.package.jar.type=legacy-jar +# +# Then, build the image with: +# +# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/patient-management-legacy-jar . +# +# Then run the container using: +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management-legacy-jar +# +# If you want to include the debug port into your docker image +# you will have to expose the debug port (default 5005 being the default) like this : EXPOSE 8080 5005. +# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005 +# when running the container +# +# Then run the container using : +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management-legacy-jar +# +# This image uses the `run-java.sh` script to run the application. +# This scripts computes the command line to execute your Java application, and +# includes memory/GC tuning. +# You can configure the behavior using the following environment properties: +# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class") +# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options +# in JAVA_OPTS (example: "-Dsome.property=foo") +# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is +# used to calculate a default maximal heap memory based on a containers restriction. +# If used in a container without any memory constraints for the container then this +# option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio +# of the container available memory as set here. The default is `50` which means 50% +# of the available memory is used as an upper boundary. You can skip this mechanism by +# setting this value to `0` in which case no `-Xmx` option is added. +# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This +# is used to calculate a default initial heap memory based on the maximum heap memory. +# If used in a container without any memory constraints for the container then this +# option has no effect. If there is a memory constraint then `-Xms` is set to a ratio +# of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx` +# is used as the initial heap size. You can skip this mechanism by setting this value +# to `0` in which case no `-Xms` option is added (example: "25") +# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS. +# This is used to calculate the maximum value of the initial heap memory. If used in +# a container without any memory constraints for the container then this option has +# no effect. If there is a memory constraint then `-Xms` is limited to the value set +# here. The default is 4096MB which means the calculated value of `-Xms` never will +# be greater than 4096MB. The value of this variable is expressed in MB (example: "4096") +# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output +# when things are happening. This option, if set to true, will set +# `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true"). +# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example: +# true"). +# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787"). +# - CONTAINER_CORE_LIMIT: A calculated core limit as described in +# https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2") +# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024"). +# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion. +# (example: "20") +# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking. +# (example: "40") +# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection. +# (example: "4") +# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus +# previous GC times. (example: "90") +# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20") +# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100") +# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should +# contain the necessary JRE command-line options to specify the required GC, which +# will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC). +# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080") +# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080") +# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be +# accessed directly. (example: "foo.example.com,bar.example.com") +# +### +FROM registry.access.redhat.com/ubi8/openjdk-21:1.20 + +ENV LANGUAGE='en_US:en' + + +COPY target/lib/* /deployments/lib/ +COPY target/*-runner.jar /deployments/quarkus-run.jar + +EXPOSE 8080 +USER 185 +ENV JAVA_OPTS_APPEND="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager" +ENV JAVA_APP_JAR="/deployments/quarkus-run.jar" + +ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ] diff --git a/cloud/backend/alert-management/src/main/docker/Dockerfile.multistage b/cloud/backend/alert-management/src/main/docker/Dockerfile.multistage new file mode 100644 index 0000000..7667d4c --- /dev/null +++ b/cloud/backend/alert-management/src/main/docker/Dockerfile.multistage @@ -0,0 +1,29 @@ +## Stage 1 : build with maven builder image with native capabilities +FROM quay.io/quarkus/ubi-quarkus-graalvmce-builder-image:jdk-23 AS build +COPY --chown=quarkus:quarkus . /code +## install maven with curl +# https://dlcdn.apache.org/maven/maven-3/3.9.9/binaries/apache-maven-3.9.9-bin.tar.gz +USER root +RUN curl -fsSL -o /tmp/apache-maven.tar.gz https://dlcdn.apache.org/maven/maven-3/3.9.9/binaries/apache-maven-3.9.9-bin.tar.gz +RUN tar -xzf /tmp/apache-maven.tar.gz -C /opt/ +RUN ln -s /opt/apache-maven-3.9.9 /opt/maven +ENV PATH="/opt/maven/bin:${PATH}" +USER quarkus +WORKDIR /code +RUN mvn -B -f /code/alert-management/pom.xml -DskipTests clean package -Dnative + +## Stage 2 : create the docker final image +FROM quay.io/quarkus/quarkus-micro-image:2.0 +WORKDIR /work/ +COPY --from=build /code/alert-management/target/*-runner /work/application + +# set up permissions for user `1001` +RUN chmod 775 /work /work/application \ + && chown -R 1001 /work \ + && chmod -R "g+rwX" /work \ + && chown -R 1001:root /work + +EXPOSE 8080 +USER 1001 + +CMD ["./application", "-Dquarkus.http.host=0.0.0.0"] \ No newline at end of file diff --git a/cloud/backend/alert-management/src/main/docker/Dockerfile.native b/cloud/backend/alert-management/src/main/docker/Dockerfile.native new file mode 100644 index 0000000..c7feff5 --- /dev/null +++ b/cloud/backend/alert-management/src/main/docker/Dockerfile.native @@ -0,0 +1,27 @@ +#### +# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode. +# +# Before building the container image run: +# +# ./mvnw package -Dnative +# +# Then, build the image with: +# +# docker build -f src/main/docker/Dockerfile.native -t quarkus/patient-management . +# +# Then run the container using: +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management +# +### +FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10 +WORKDIR /work/ +RUN chown 1001 /work \ + && chmod "g+rwX" /work \ + && chown 1001:root /work +COPY --chown=1001:root target/*-runner /work/application + +EXPOSE 8080 +USER 1001 + +ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"] diff --git a/cloud/backend/alert-management/src/main/docker/Dockerfile.native-micro b/cloud/backend/alert-management/src/main/docker/Dockerfile.native-micro new file mode 100644 index 0000000..88095c9 --- /dev/null +++ b/cloud/backend/alert-management/src/main/docker/Dockerfile.native-micro @@ -0,0 +1,30 @@ +#### +# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode. +# It uses a micro base image, tuned for Quarkus native executables. +# It reduces the size of the resulting container image. +# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image. +# +# Before building the container image run: +# +# ./mvnw package -Dnative +# +# Then, build the image with: +# +# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/patient-management . +# +# Then run the container using: +# +# docker run -i --rm -p 8080:8080 quarkus/patient-management +# +### +FROM quay.io/quarkus/quarkus-micro-image:2.0 +WORKDIR /work/ +RUN chown 1001 /work \ + && chmod "g+rwX" /work \ + && chown 1001:root /work +COPY --chown=1001:root target/*-runner /work/application + +EXPOSE 8080 +USER 1001 + +ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"] diff --git a/cloud/backend/alert-management/src/main/java/fr/etu/polytech/entity/Alert.java b/cloud/backend/alert-management/src/main/java/fr/etu/polytech/entity/Alert.java index 4b58fb2..9324d85 100644 --- a/cloud/backend/alert-management/src/main/java/fr/etu/polytech/entity/Alert.java +++ b/cloud/backend/alert-management/src/main/java/fr/etu/polytech/entity/Alert.java @@ -2,10 +2,15 @@ import io.quarkus.mongodb.panache.PanacheMongoEntity; +import io.quarkus.runtime.annotations.RegisterForReflection; import lombok.Getter; import lombok.Setter; import java.time.LocalDateTime; + +@RegisterForReflection +@Getter +@Setter public class Alert extends PanacheMongoEntity { public String type; public String message; diff --git a/cloud/backend/alert-management/src/main/resources/application.properties b/cloud/backend/alert-management/src/main/resources/application.properties index de18ec6..4cac082 100644 --- a/cloud/backend/alert-management/src/main/resources/application.properties +++ b/cloud/backend/alert-management/src/main/resources/application.properties @@ -1,2 +1,10 @@ -quarkus.mongodb.connection-string = mongodb://localhost:27017 -quarkus.mongodb.database=poulet +# configure the mongoDB client for a single instance on localhost +quarkus.mongodb.connection-string=${DB_URL:mongodb://localhost:27017} +quarkus.mongodb.database=${DB_NAME:poulet} +# Enable keycloak authentication +quarkus.oidc.auth-server-url=${AUTH_SERVER_URL:http://localhost:8081/realms/poulet-realm} +quarkus.oidc.client-id=${CLIENT_ID:backend-service} +quarkus.oidc.credentials.secret=${CLIENT_SECRET:J1jZPePtgzG4Q9ltZTHlBGKEyj93P4hd} +quarkus.oidc.application-type=web-app +# Docker build properties +quarkus.container-image.registry=ghcr.io diff --git a/cloud/backend/patient-management/.env.example b/cloud/backend/patient-management/.env.example deleted file mode 100644 index 0c08869..0000000 --- a/cloud/backend/patient-management/.env.example +++ /dev/null @@ -1,2 +0,0 @@ -CLIENT_ID=TODO -CLIENT_SECRET=TODO \ No newline at end of file diff --git a/cloud/backend/patient-management/manifests/base/deployment.yml b/cloud/backend/patient-management/manifests/base/deployment.yml new file mode 100644 index 0000000..56c7c38 --- /dev/null +++ b/cloud/backend/patient-management/manifests/base/deployment.yml @@ -0,0 +1,30 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + io.kompose.service: patient-management + name: patient-management +spec: + replicas: 1 + selector: + matchLabels: + io.kompose.service: patient-management + template: + metadata: + labels: + io.kompose.service: patient-management + spec: + containers: + - image: ghcr.io/startupnationlabs/poulet/patient-management:e3911b5eaa38b49c29022ad6c7e83d45884a7f32 + name: patient-management + ports: + - containerPort: 8080 + protocol: TCP + resources: + requests: + cpu: "100m" + memory: "128Mi" + limits: + cpu: "500m" + memory: "512Mi" + restartPolicy: Always diff --git a/cloud/backend/patient-management/manifests/base/ingress.yml b/cloud/backend/patient-management/manifests/base/ingress.yml new file mode 100644 index 0000000..e4ecc0c --- /dev/null +++ b/cloud/backend/patient-management/manifests/base/ingress.yml @@ -0,0 +1,24 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: ingress-patient-management + annotations: + kubernetes.io/ingress.class: traefik + cert-manager.io/cluster-issuer: letsencrypt-prod + traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd +spec: + rules: + - host: patient-management.al.polytech.apoorva64.com + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: patient-management + port: + number: 8080 + tls: + - hosts: + - patient-management.al.polytech.apoorva64.com + secretName: patient-management.al.polytech.apoorva64-tls diff --git a/cloud/backend/patient-management/manifests/base/kustomization.yml b/cloud/backend/patient-management/manifests/base/kustomization.yml new file mode 100644 index 0000000..5343fb8 --- /dev/null +++ b/cloud/backend/patient-management/manifests/base/kustomization.yml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 + +kind: Kustomization +resources: + - deployment.yml + - ingress.yml + - service.yml \ No newline at end of file diff --git a/cloud/backend/patient-management/manifests/base/service.yml b/cloud/backend/patient-management/manifests/base/service.yml new file mode 100644 index 0000000..9dadcb6 --- /dev/null +++ b/cloud/backend/patient-management/manifests/base/service.yml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: Service +metadata: + labels: + io.kompose.service: patient-management + name: patient-management +spec: + ports: + - name: "8080" + port: 8080 + targetPort: 8080 + selector: + io.kompose.service: patient-management diff --git a/cloud/backend/patient-management/pom.xml b/cloud/backend/patient-management/pom.xml index 53cf1b9..5068e67 100644 --- a/cloud/backend/patient-management/pom.xml +++ b/cloud/backend/patient-management/pom.xml @@ -100,6 +100,13 @@ ${compiler-plugin.version} true + + + org.projectlombok + lombok + 1.18.34 + + @@ -143,12 +150,49 @@ native + + false + true + + + + local + + + local + + + + true + docker + + poulet/${project.artifactId} + ${project.version} + + plain + + + + ci + + + ci + + false true true true + true linux/amd64,linux/arm64 + + ghcr.io + StartUpNationLabs/poulet + ${project.artifactId} + ${project.version} diff --git a/cloud/backend/patient-management/src/main/docker/Dockerfile.multistage b/cloud/backend/patient-management/src/main/docker/Dockerfile.multistage new file mode 100644 index 0000000..f52449c --- /dev/null +++ b/cloud/backend/patient-management/src/main/docker/Dockerfile.multistage @@ -0,0 +1,29 @@ +## Stage 1 : build with maven builder image with native capabilities +FROM quay.io/quarkus/ubi-quarkus-graalvmce-builder-image:jdk-23 AS build +COPY --chown=quarkus:quarkus . /code +## install maven with curl +# https://dlcdn.apache.org/maven/maven-3/3.9.9/binaries/apache-maven-3.9.9-bin.tar.gz +USER root +RUN curl -fsSL -o /tmp/apache-maven.tar.gz https://dlcdn.apache.org/maven/maven-3/3.9.9/binaries/apache-maven-3.9.9-bin.tar.gz +RUN tar -xzf /tmp/apache-maven.tar.gz -C /opt/ +RUN ln -s /opt/apache-maven-3.9.9 /opt/maven +ENV PATH="/opt/maven/bin:${PATH}" +USER quarkus +WORKDIR /code +RUN mvn -B -f /code/patient-management/pom.xml -DskipTests clean package -Dnative + +## Stage 2 : create the docker final image +FROM quay.io/quarkus/quarkus-micro-image:2.0 +WORKDIR /work/ +COPY --from=build /code/patient-management/target/*-runner /work/application + +# set up permissions for user `1001` +RUN chmod 775 /work /work/application \ + && chown -R 1001 /work \ + && chmod -R "g+rwX" /work \ + && chown -R 1001:root /work + +EXPOSE 8080 +USER 1001 + +CMD ["./application", "-Dquarkus.http.host=0.0.0.0"] \ No newline at end of file diff --git a/cloud/backend/patient-management/src/main/resources/application.properties b/cloud/backend/patient-management/src/main/resources/application.properties index 13ef2c5..0328fcf 100644 --- a/cloud/backend/patient-management/src/main/resources/application.properties +++ b/cloud/backend/patient-management/src/main/resources/application.properties @@ -1,8 +1,10 @@ # configure the mongoDB client for a single instance on localhost -quarkus.mongodb.connection-string=mongodb://localhost:27017 -quarkus.mongodb.database=poulet +quarkus.mongodb.connection-string=${DB_URL:mongodb://localhost:27017} +quarkus.mongodb.database=${DB_NAME:poulet} # Enable keycloak authentication -#quarkus.oidc.auth-server-url=http://localhost:8081/realms/poulet-realm -#quarkus.oidc.client-id=${CLIENT_ID} -#quarkus.oidc.credentials.secret=${CLIENT_SECRET} -#quarkus.oidc.application-type=web-app \ No newline at end of file +quarkus.oidc.auth-server-url=${AUTH_SERVER_URL:http://localhost:8081/realms/poulet-realm} +quarkus.oidc.client-id=${CLIENT_ID:backend-service} +quarkus.oidc.credentials.secret=${CLIENT_SECRET:J1jZPePtgzG4Q9ltZTHlBGKEyj93P4hd} +quarkus.oidc.application-type=web-app +# Docker build properties +quarkus.container-image.registry=ghcr.io \ No newline at end of file diff --git a/server/config/alertmanager/alertmanager.yml b/cloud/config/alertmanager/alertmanager.yml similarity index 91% rename from server/config/alertmanager/alertmanager.yml rename to cloud/config/alertmanager/alertmanager.yml index 2d86ceb..0d688c7 100644 --- a/server/config/alertmanager/alertmanager.yml +++ b/cloud/config/alertmanager/alertmanager.yml @@ -15,4 +15,4 @@ receivers: from: 'alert@example.com' smarthost: 'smtp.example.com:587' auth_username: 'username' - auth_password: 'password' + auth_password: 'password' \ No newline at end of file diff --git a/docker-compose.yaml b/docker-compose.yaml index 67c9547..18711de 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -21,7 +21,7 @@ services: ports: - 9093:9093 volumes: - - ./server/config/alertmanager:/etc/alertmanager + - ./cloud/config/alertmanager:/etc/alertmanager command: - --config.file=/etc/alertmanager/alertmanager.yml grafana: diff --git a/gateway/AlerteDetector/Dockerfile b/gateway/AlerteDetector/Dockerfile new file mode 100644 index 0000000..36713a7 --- /dev/null +++ b/gateway/AlerteDetector/Dockerfile @@ -0,0 +1,47 @@ +# Stage 1: Build Stage +# Use a specific version of the official Golang image as the base image +FROM golang:1.23-bullseye AS build + +# Create a non-root user for running the application +RUN useradd -u 1001 nonroot + +# Set the working directory inside the container +WORKDIR /app + +# Copy only the go.mod file to install dependencies efficiently and leverage layer caching +COPY go.mod ./ + +# Set the GIN_MODE environment variable to release +ENV GIN_MODE=release + + +# Use cache mounts to speed up the installation of existing dependencies +RUN --mount=type=cache,target=/go/pkg/mod \ + --mount=type=cache,target=/root/.cache/go-build \ + go mod download + +# Copy the entire application source code +COPY . . + +# Compile the application during build and statically link the binary +RUN go build \ + -ldflags="-linkmode external -extldflags -static" \ + -tags netgo \ + -o go-app + +# Stage 2: Deployable Image +# Use a minimal scratch image as the base image for the final image +FROM scratch + +# Copy the /etc/passwd file from the build stage to provide non-root user information +COPY --from=build /etc/passwd /etc/passwd + +# Copy the compiled application binary from the build stage to the final image +COPY --from=build /app/go-app /go-app + +# Use the non-root user created in the build stage +USER nonroot + + +# Define the command to run the application when the container starts +CMD ["./go-app"] \ No newline at end of file diff --git a/gateway/adapter/Dockerfile b/gateway/adapter/Dockerfile new file mode 100644 index 0000000..d2d43f0 --- /dev/null +++ b/gateway/adapter/Dockerfile @@ -0,0 +1,47 @@ +# Stage 1: Build Stage +# Use a specific version of the official Golang image as the base image +FROM golang:1.22-bullseye AS build + +# Create a non-root user for running the application +RUN useradd -u 1001 nonroot + +# Set the working directory inside the container +WORKDIR /app + +# Copy only the go.mod file to install dependencies efficiently and leverage layer caching +COPY go.mod ./ + +# Set the GIN_MODE environment variable to release +ENV GIN_MODE=release + + +# Use cache mounts to speed up the installation of existing dependencies +RUN --mount=type=cache,target=/go/pkg/mod \ + --mount=type=cache,target=/root/.cache/go-build \ + go mod download + +# Copy the entire application source code +COPY . . + +# Compile the application during build and statically link the binary +RUN go build \ + -ldflags="-linkmode external -extldflags -static" \ + -tags netgo \ + -o go-app + +# Stage 2: Deployable Image +# Use a minimal scratch image as the base image for the final image +FROM scratch + +# Copy the /etc/passwd file from the build stage to provide non-root user information +COPY --from=build /etc/passwd /etc/passwd + +# Copy the compiled application binary from the build stage to the final image +COPY --from=build /app/go-app /go-app + +# Use the non-root user created in the build stage +USER nonroot + + +# Define the command to run the application when the container starts +CMD ["./go-app"] \ No newline at end of file diff --git a/gateway/adapter/mqttClient.go b/gateway/adapter/mqttClient.go index 38e7669..7a9b6c9 100644 --- a/gateway/adapter/mqttClient.go +++ b/gateway/adapter/mqttClient.go @@ -4,6 +4,7 @@ import ( "context" "log" "time" + "os" amqp "github.com/rabbitmq/amqp091-go" ) @@ -18,8 +19,14 @@ func failOnError(err error, msg string) { } func (client *RabbitMQClient) init() { + if os.Getenv("RABBITMQ_SERVER") == "" { + log.Fatal("RABBITMQ_SERVER environment variable is not set") + return + } + + endpoint := os.Getenv("RABBITMQ_SERVER") var err error - client.conn, err = amqp.Dial("amqp://guest:guest@localhost:5672/") + client.conn, err = amqp.Dial("amqp://guest:guest@"+endpoint) failOnError(err, "Failed to connect to RabbitMQ") } diff --git a/gateway/dataManager/Dockerfile b/gateway/dataManager/Dockerfile new file mode 100644 index 0000000..d2d43f0 --- /dev/null +++ b/gateway/dataManager/Dockerfile @@ -0,0 +1,47 @@ +# Stage 1: Build Stage +# Use a specific version of the official Golang image as the base image +FROM golang:1.22-bullseye AS build + +# Create a non-root user for running the application +RUN useradd -u 1001 nonroot + +# Set the working directory inside the container +WORKDIR /app + +# Copy only the go.mod file to install dependencies efficiently and leverage layer caching +COPY go.mod ./ + +# Set the GIN_MODE environment variable to release +ENV GIN_MODE=release + + +# Use cache mounts to speed up the installation of existing dependencies +RUN --mount=type=cache,target=/go/pkg/mod \ + --mount=type=cache,target=/root/.cache/go-build \ + go mod download + +# Copy the entire application source code +COPY . . + +# Compile the application during build and statically link the binary +RUN go build \ + -ldflags="-linkmode external -extldflags -static" \ + -tags netgo \ + -o go-app + +# Stage 2: Deployable Image +# Use a minimal scratch image as the base image for the final image +FROM scratch + +# Copy the /etc/passwd file from the build stage to provide non-root user information +COPY --from=build /etc/passwd /etc/passwd + +# Copy the compiled application binary from the build stage to the final image +COPY --from=build /app/go-app /go-app + +# Use the non-root user created in the build stage +USER nonroot + + +# Define the command to run the application when the container starts +CMD ["./go-app"] \ No newline at end of file diff --git a/gateway/dataManager/mqttClient.go b/gateway/dataManager/mqttClient.go index af7bd34..b782726 100644 --- a/gateway/dataManager/mqttClient.go +++ b/gateway/dataManager/mqttClient.go @@ -5,6 +5,7 @@ import ( "log" "time" "strings" + "os" "strconv" amqp "github.com/rabbitmq/amqp091-go" @@ -21,8 +22,14 @@ func failOnError(err error, msg string) { } func (rabbitMQClient *RabbitMQClient) init(alerter *Alerter) { - var err error - rabbitMQClient.conn, err = amqp.Dial("amqp://guest:guest@localhost:5672/") + if os.Getenv("RABBITMQ_SERVER") == "" { + log.Fatal("RABBITMQ_SERVER environment variable is not set") + return + } + + endpoint := os.Getenv("RABBITMQ_SERVER") + var err error + rabbitMQClient.conn, err = amqp.Dial("amqp://guest:guest@"+endpoint) failOnError(err, "Failed to connect to RabbitMQ") rabbitMQClient.alerter = alerter } diff --git a/gateway/docker-compose.yml b/gateway/docker-compose.yml index b2c0c23..8991fb0 100644 --- a/gateway/docker-compose.yml +++ b/gateway/docker-compose.yml @@ -1,11 +1,33 @@ services: - broker: + + adapter: + build: + context: ./adapter + environment: + - RABBITMQ_SERVER=rabbitmq:5672 + depends_on: + - rabbitmq + networks: + - internal + + data-manager: + build: + context: ./dataManager + environment: + - PROMETHEUS_SERVER=http://read:9090/api/v1/write + - RABBITMQ_SERVER=rabbitmq:5672 + depends_on: + - rabbitmq + networks: + - internal + + rabbitmq: image: rabbitmq:management ports: - 127.0.0.1:5672:5672 - 127.0.0.1:8080:15672 networks: - internal - + networks: internal: diff --git a/kind/apps/al/kustomization.yml b/kind/apps/al/kustomization.yml new file mode 100644 index 0000000..01a49e3 --- /dev/null +++ b/kind/apps/al/kustomization.yml @@ -0,0 +1,2 @@ +resources: + - ../../../manifests/base \ No newline at end of file diff --git a/kind/kustomization.yml b/kind/kustomization.yml index 978dd9f..7c7bd03 100644 --- a/kind/kustomization.yml +++ b/kind/kustomization.yml @@ -4,4 +4,4 @@ kind: Kustomization resources: - infrastructure/flux-cd - infrastructure/traefik - - ../manifests/base \ No newline at end of file + - apps/al diff --git a/manifests/base/keycloak/helm-repository.yaml b/manifests/base/bitnami-helm-repository.yaml similarity index 100% rename from manifests/base/keycloak/helm-repository.yaml rename to manifests/base/bitnami-helm-repository.yaml diff --git a/manifests/base/keycloak/kustomization.yaml b/manifests/base/keycloak/kustomization.yaml index 0e7d2e9..8570ebe 100644 --- a/manifests/base/keycloak/kustomization.yaml +++ b/manifests/base/keycloak/kustomization.yaml @@ -1,6 +1,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - helm-repository.yaml - helm-release.yaml - ingress.yaml \ No newline at end of file diff --git a/manifests/base/kustomization.yaml b/manifests/base/kustomization.yaml index b8bdff9..8d12ebc 100644 --- a/manifests/base/kustomization.yaml +++ b/manifests/base/kustomization.yaml @@ -1,4 +1,8 @@ resources: + - bitnami-helm-repository.yaml + - mongodb - prometheus - grafana - - keycloak \ No newline at end of file + - keycloak + - ../../cloud/backend/alert-management/manifests/base + - ../../cloud/backend/patient-management/manifests/base \ No newline at end of file diff --git a/manifests/base/mongodb/helm-release.yaml b/manifests/base/mongodb/helm-release.yaml new file mode 100644 index 0000000..080335f --- /dev/null +++ b/manifests/base/mongodb/helm-release.yaml @@ -0,0 +1,15 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: mongodb +spec: + interval: 60m + chart: + spec: + chart: mongodb + version: "16.0.3" + sourceRef: + kind: HelmRepository + name: bitnami + interval: 12h + values: {} diff --git a/manifests/base/mongodb/kustomization.yaml b/manifests/base/mongodb/kustomization.yaml new file mode 100644 index 0000000..10ade13 --- /dev/null +++ b/manifests/base/mongodb/kustomization.yaml @@ -0,0 +1,2 @@ +resources: + - helm-release.yaml \ No newline at end of file