.transpire.py

from pathlib import Path

from transpire.resources import Deployment, Ingress, Secret, Service
from transpire.types import Image
from transpire.utils import get_image_tag, get_revision

name = "ocfweb"
auto_sync = True


def images():
    yield Image(name="web", path=Path("/"), target="web")
    yield Image(name="worker", path=Path("/"), target="worker")
    yield Image(name="static", path=Path("/"), target="static")


def add_ocfweb_common(dep):
    dep.obj.spec.template.spec.dns_policy = "ClusterFirst"
    dep.obj.spec.template.spec.dns_config = {"searches": ["ocf.berkeley.edu"]}

    dep.obj.spec.template.spec.volumes = [
        {"name": "etc", "emptyDir": {}},
        {"name": "secrets", "secret": {"secretName": "ocfweb"}},
    ]

    dep.obj.spec.template.spec.containers.append(
        {
            "name": "sync-etc",
            "image": "harbor.ocf.berkeley.edu/ocf/etc/sync:4c3eb1f6ba456ec30a2fbf21423364eaf0ae40bd",
            "args": ["/etc/ocf", "--repeat-delay", "60"],
            "volumeMounts": [{"name": "etc", "mountPath": "/etc/ocf"}],
        }
    )

    dep.obj.spec.template.spec.containers[0].volume_mounts = [
        {"name": "etc", "mountPath": "/etc/ocf"},
        {"name": "secrets", "mountPath": "/etc/ocfweb"},
    ]

    dep.obj.spec.template.spec.containers[0].env = [
        {"name": "PUPPET_CERT_DIR", "value": "/etc/ocfweb"},
        {"name": "OCFWEB_TESTING", "value": "0"},
        {"name": "OCFWEB_PROD_VERSION", "value": get_revision()},
    ]


def add_probes(dep, path="/"):
    dep.obj.spec.template.spec.containers[0].readiness_probe = {
        "httpGet": {
            "path": path,
            "port": 8000,
            "httpHeaders": [{"name": "Host", "value": "www.ocf.berkeley.edu"}],
        },
        "initialDelaySeconds": 5,
        "periodSeconds": 5,
    }

    dep.obj.spec.template.spec.containers[0].liveness_probe = {
        "httpGet": {
            "path": path,
            "port": 8000,
            "httpHeaders": [{"name": "Host", "value": "www.ocf.berkeley.edu"}],
        },
        "initialDelaySeconds": 10,
        "timeoutSeconds": 3,
        "failureThreshold": 6,
    }


def objects():
    yield Secret(
        name="ocfweb",
        string_data={
            "metrics.htpasswd": "",
            "ocfweb.conf": "",
            "puppet-ca.pem": "",
            "puppet-cert.pem": "",
            "puppet-private.pem": "",
            "puppet-public.pem": "",
            "puppet-signed.pem": "",
        },
    ).build()

    dep_web = Deployment(
        name="ocfweb",
        image=get_image_tag("web"),
        ports=[8000],
    )
    add_ocfweb_common(dep_web)
    add_probes(dep_web)
    yield dep_web.build()

    dep_worker = Deployment(
        name="ocfweb-worker",
        image=get_image_tag("worker"),
        ports=[8000],
    )
    add_ocfweb_common(dep_worker)
    yield dep_worker.build()

    dep_static = Deployment(
        name="ocfweb-static",
        image=get_image_tag("static"),
        ports=[8000],
    )
    add_ocfweb_common(dep_static)
    add_probes(dep_static, path="/js/site.js")
    yield dep_static.build()

    svc_web = Service(
        name="ocfweb",
        selector=dep_web.get_selector(),
        port_on_pod=8000,
        port_on_svc=80,
    )
    yield svc_web.build()

    svc_static = Service(
        name="ocfweb-static",
        selector=dep_static.get_selector(),
        port_on_pod=8000,
        port_on_svc=80,
    )
    yield svc_static.build()

    ing_web = Ingress.from_svc(
        svc=svc_web,
        host="www.ocf.berkeley.edu",
        path_prefix="/",
    )
    ing_web.obj.metadata.annotations[
        "ingress.kubernetes.io/force-ssl-redirect"
    ] = "false"
    yield ing_web.build()

    ing_static = Ingress.from_svc(
        svc=svc_static,
        host="static.ocf.berkeley.edu",
        path_prefix="/",
    )
    yield ing_static.build()