124 Commits

Author SHA1 Message Date
dandds
485f578c78 Apply config changes for CSP file uploads.
This applies configuration changes for the Flask app and adds changes to
the Dockerfile so that the build can make a CSP-specific JS bundle. It
adds `write_dotenv` script that creates the appropriate `.env` file for
the `parcel` bundler depending on how the `CSP` environment variable is
set.

- Configure K8s environment variables for Flask CSP usage
- Supply default CSP config setting to Flask app
- Declare the CSP arg in the Dockerfile
- Supply extra Docker build args to CD
- Fix top-level reference to boto3 in file_upload module
- Add back missing sample NGINX config for docker-compose build
2019-08-09 08:05:20 -04:00
dandds
6593b7eda1 Create README for Kubernetes config. 2019-08-08 09:33:09 -04:00
dandds
c100cc8d1f Move k8s config dir to deploy dir 2019-08-08 08:30:14 -04:00
dandds
52829a1236 Add additional k8s config for AWS and Azure.
- remove unused k8s environment config
- experimental config for azure and aws
- use nginx for proxy and add rq worker pod
2019-07-31 11:57:24 -04:00
dandds
ef8fd2fa41 Put Dockerfile in repo root for ease of use.
Most build tools (i.e., the CircleCI Orbs) expect a Dockerfile in the
repo root. Rather than have to configure an exception everywhere, put it
where most people/tools expect it to be.
2019-07-14 16:00:09 -04:00
dandds
03a445e759 Copy USWDS fonts to static directory in Docker build.
This step was missing from the initial Docker build and causing errors
in fresh repositories.
2019-07-14 15:57:34 -04:00
dandds
6f8ef27bf1 Single Dockerfile for building ATAT.
Dockerfile is now a single multi-stage build that relies on a Python 3.7
base image.

Notes:
- This builds uWSGI with a `pip install` because the Alpine vendored
  uWSGI is built against Python 3.6.
- Adds a docker-compose file that can be used for testing that the build
  works. It is not usable for development purposes because it creates a
  static copy of the application.
2019-07-11 11:27:33 -04:00
dandds
0bde431a70 extend soft delete functionality to app and env roles 2019-04-15 15:58:38 -04:00
dandds
a5d285c840 update k8s config with new docker registry url 2019-04-15 12:31:32 -04:00
dandds
09f58dc6cb set flask app instances to log json in k8s clusters 2019-04-03 06:26:39 -04:00
dandds
f72ec839a9 configure json logging for uwsgi in k8s environments 2019-04-03 06:09:47 -04:00
dandds
cb91003675 configure json logging for nginx in k8s cluster 2019-03-29 10:04:57 -04:00
dandds
410b0fc112 add missing crl sync config option to k8s clusters 2019-03-15 13:33:23 -04:00
dandds
2ef200a2b7 specify timezone in an environment variable for app containers 2019-03-11 20:59:42 -04:00
dandds
51aff4578e update k8s config so auth traffic is only directed to web pods 2019-02-01 11:16:56 -05:00
dandds
4bd41950c6 remove REQUIRE_CRLS setting in favor of DISABLE_CRL_CHECK 2019-01-18 09:48:43 -05:00
dandds
f3c294659a refine test environment sample data script, add k8s role and role binding for updating sample data 2018-12-04 16:12:23 -05:00
dandds
bd0b7b9dcd script for rotating sample data on test env 2018-12-04 09:42:47 -05:00
dandds
bbeef23c45 test testing build 2018-12-03 16:34:39 -05:00
dandds
b54e3147c3 try scheduling nightly deploys for test env with CircleCI config 2018-12-03 09:11:25 -05:00
dandds
23294b2e2b note nodePort must match auth load balancer 2018-12-03 09:11:25 -05:00
dandds
689f7723dc add readme for creating new site 2018-12-03 09:11:25 -05:00
dandds
5272226725 update image for test env, remove unused secret 2018-12-03 09:11:25 -05:00
dandds
1cea2b63ac update auth port for test environment 2018-12-03 09:11:25 -05:00
dandds
80124e8925 basic test config 2018-12-03 09:11:25 -05:00
Patrick Smith
2a48a78561 Add worker envvars for UAT env 2018-10-31 16:42:10 -04:00
Patrick Smith
6f10ef4a19 Update UAT image 2018-10-31 16:41:59 -04:00
Patrick Smith
67b14921d6 Update UAT deployment with RQ worker and latest code
Specify a different RQ_QUEUE so that the worker does not attempt to run
jobs for the staging environment (since they share the same redis
connection).
2018-10-31 16:12:00 -04:00
dandds
0aecae1d9a more post-travis tweaks 2018-10-31 15:14:56 -04:00
dandds
13eefc781b remove more travis references in deploy scripts 2018-10-31 14:13:04 -04:00
Patrick Smith
f5a1d94061 Update deployed worker image in deployment script 2018-10-25 16:27:05 -04:00
Patrick Smith
3b2ed4f0a2 Update deployed image, again 2018-10-25 16:27:05 -04:00
Patrick Smith
3d26303221 Update deployed image 2018-10-25 16:27:05 -04:00
Patrick Smith
414e3cf001 Lower memory requirement for worker pod 2018-10-25 16:27:05 -04:00
Patrick Smith
73d8df8fe6 Add REQUIRE_CRLS env variable to allow skipping loading CRLs 2018-10-25 16:27:05 -04:00
Patrick Smith
403d6cd790 Add deployment for worker to k8s config 2018-10-25 16:00:12 -04:00
patricksmithdds
38610d0e0a
Merge pull request #276 from dod-ccpo/circleci-cd
CircleCI CD
2018-10-16 11:37:09 -04:00
Devon Mackay
c9bd3a4328 Only generat IMAGE_NAME if it is undefined 2018-10-15 14:48:03 -04:00
Devon Mackay
7dc87e5fe8 Adjust timeout flags for Alpine specific version 2018-10-15 14:48:02 -04:00
Devon Mackay
2ba9745c2e Add time limit for successfully deploying
- Add config var for max wait time for a deployment
- Move exit function and trap to the beginning of the script
- Execute the rollout status command using timeout
-- Use signal 2 (SIGINT; same pressing CTRL+C)
-- Abort the command if it is still running when max time is reached
-- If the command was aborted, rollback this deployment
2018-10-15 14:48:02 -04:00
Devon Mackay
1c5c75a0ac Fix resource names 2018-10-15 14:48:02 -04:00
Devon Mackay
3ebf047e70 Sync debugger config with app config 2018-10-15 14:48:02 -04:00
Devon Mackay
4a99889a67 Add script that checks the k8s deployment without changing anything 2018-10-15 14:48:02 -04:00
Devon Mackay
7e0b3ce520 Adjust base64 params to be more portable (alpine compatible) 2018-10-15 14:48:02 -04:00
Patrick Smith
6faf4070ad Update atat.codes to atat.code.mil 2018-10-11 13:40:42 -04:00
Patrick Smith
59d8baa74a Update UAT env to new domain 2018-10-11 09:48:58 -04:00
Patrick Smith
71f525ba6c Fix secret name for auth-uat tls 2018-10-10 15:25:22 -04:00
Patrick Smith
d924f355a2 Update image name 2018-10-09 17:16:41 -04:00
Patrick Smith
8f24c9bf1e Add atat-uat namespace to kubernetes
Mostly duplicates the staging environment. In the future I hope to use
some sort of templating to reduce the duplication.
2018-10-09 17:16:06 -04:00
Patrick Smith
c3461c5a91 Update container image in yml 2018-10-09 17:16:06 -04:00