Sirius Devops
d079d1239f
- Add Helm chart with 19 templates (Deployments, Services, Ingress, ConfigMaps, Secrets, NetworkPolicy, cert-manager) - Add Dockerfiles for 4 microservices (dashboard, data-service, execute-service, news-service) - Add CI/CD workflows (build-test, build-push, deploy) - Add raw K8s manifests, per-service Helm charts, and deploy scripts - Add SOPS-encrypted secrets template and config - Configure deployment to customer1 namespace - Include infrastructure components: PostgreSQL, Redis, Kafka
141 lines
4.4 KiB
Bash
Executable file
141 lines
4.4 KiB
Bash
Executable file
#!/bin/bash
|
|
# =============================================================================
|
|
# Deploy Trading Platform to Kubernetes
|
|
# =============================================================================
|
|
#
|
|
# Usage:
|
|
# ./deploy/scripts/deploy.sh [staging|production] [tag]
|
|
#
|
|
# Examples:
|
|
# ./deploy/scripts/deploy.sh staging latest
|
|
# ./deploy/scripts/deploy.sh production v1.2.3
|
|
#
|
|
# Prerequisites:
|
|
# - kubectl configured with cluster access
|
|
# - Helm 3.x installed
|
|
# - Docker images pushed to registry
|
|
# - cert-manager installed in cluster (for TLS)
|
|
# =============================================================================
|
|
|
|
set -euo pipefail
|
|
|
|
ENVIRONMENT="${1:-staging}"
|
|
IMAGE_TAG="${2:-latest}"
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
|
|
# Validate environment
|
|
if [[ ! "$ENVIRONMENT" =~ ^(staging|production)$ ]]; then
|
|
echo "ERROR: Environment must be 'staging' or 'production', got '$ENVIRONMENT'"
|
|
exit 1
|
|
fi
|
|
|
|
# Set namespace and values file based on environment
|
|
if [[ "$ENVIRONMENT" == "staging" ]]; then
|
|
NAMESPACE="customer1-staging"
|
|
VALUES_FILE="$PROJECT_ROOT/deploy/k8s/overlays/staging/kustomization.yaml"
|
|
else
|
|
NAMESPACE="customer1"
|
|
VALUES_FILE="$PROJECT_ROOT/deploy/k8s/overlays/production/kustomization.yaml"
|
|
fi
|
|
|
|
echo "========================================================"
|
|
echo " Deploying Trading Platform to $ENVIRONMENT"
|
|
echo " Image tag: $IMAGE_TAG"
|
|
echo " Namespace: $NAMESPACE"
|
|
echo "========================================================"
|
|
|
|
# Confirm cluster context
|
|
CURRENT_CONTEXT=$(kubectl config current-context 2>/dev/null || echo "unknown")
|
|
echo "Current kubectl context: $CURRENT_CONTEXT"
|
|
read -r -p "Continue? (y/N) " -n 1
|
|
echo
|
|
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
|
echo "Deployment cancelled."
|
|
exit 1
|
|
fi
|
|
|
|
# Install dependencies (optional)
|
|
echo ""
|
|
echo "Step 1/5: Checking prerequisites..."
|
|
|
|
# Check for Helm
|
|
if ! command -v helm &>/dev/null; then
|
|
echo "ERROR: helm is not installed"
|
|
exit 1
|
|
fi
|
|
|
|
# Check for kubectl
|
|
if ! command -v kubectl &>/dev/null; then
|
|
echo "ERROR: kubectl is not installed"
|
|
exit 1
|
|
fi
|
|
|
|
# Check cluster connectivity
|
|
if ! kubectl cluster-info &>/dev/null; then
|
|
echo "ERROR: Cannot connect to Kubernetes cluster"
|
|
exit 1
|
|
fi
|
|
echo " ✓ Kubernetes cluster is accessible"
|
|
|
|
# Create namespace if it doesn't exist
|
|
kubectl create namespace "$NAMESPACE" --dry-run=client -o yaml | kubectl apply -f -
|
|
echo " ✓ Namespace $NAMESPACE exists"
|
|
|
|
# Step 2: Deploy infrastructure (PostgreSQL, Redis, Kafka)
|
|
echo ""
|
|
echo "Step 2/5: Deploying infrastructure..."
|
|
kubectl apply -f "$PROJECT_ROOT/deploy/k8s/base/namespace.yaml"
|
|
kubectl apply -f "$PROJECT_ROOT/deploy/k8s/base/configmap.yaml"
|
|
echo " ✓ ConfigMap applied"
|
|
|
|
# Step 3: Deploy services
|
|
echo ""
|
|
echo "Step 3/5: Deploying microservices..."
|
|
|
|
SERVICES=("execute-service" "data-service" "news-service" "api-gateway" "dashboard")
|
|
|
|
for service in "${SERVICES[@]}"; do
|
|
echo " Deploying $service..."
|
|
kubectl apply -f "$PROJECT_ROOT/deploy/k8s/base/${service}-deployment.yaml"
|
|
kubectl apply -f "$PROJECT_ROOT/deploy/k8s/base/${service}-service.yaml"
|
|
done
|
|
|
|
echo " ✓ All services deployed"
|
|
|
|
# Step 4: Deploy ingress and networking
|
|
echo ""
|
|
echo "Step 4/5: Configuring ingress and networking..."
|
|
kubectl apply -f "$PROJECT_ROOT/deploy/k8s/base/ingress.yaml"
|
|
echo " ✓ Ingress configured"
|
|
|
|
# Apply NetworkPolicies from security review
|
|
if [[ -d "$PROJECT_ROOT/trading-platform/security/network-policies" ]]; then
|
|
kubectl apply -f "$PROJECT_ROOT/trading-platform/security/network-policies/"
|
|
echo " ✓ NetworkPolicies applied"
|
|
fi
|
|
|
|
# Step 5: Wait for rollouts
|
|
echo ""
|
|
echo "Step 5/5: Waiting for deployments to stabilize..."
|
|
|
|
for service in "${SERVICES[@]}"; do
|
|
echo " Waiting for $service..."
|
|
if ! kubectl rollout status "deployment/${service}" -n "$NAMESPACE" --timeout=5m; then
|
|
echo "WARNING: $service rollout timed out"
|
|
echo " Check pods: kubectl get pods -n $NAMESPACE -l app=$service"
|
|
echo " Check logs: kubectl logs -n $NAMESPACE -l app=$service --tail=100"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
echo ""
|
|
echo "========================================================"
|
|
echo " Deployment complete! All services running."
|
|
echo "========================================================"
|
|
echo ""
|
|
echo "Useful commands:"
|
|
echo " kubectl get pods -n $NAMESPACE"
|
|
echo " kubectl get svc -n $NAMESPACE"
|
|
echo " kubectl get ingress -n $NAMESPACE"
|
|
echo " kubectl logs -n $NAMESPACE -l app=$service -f"
|