fix

.kontinuous/config.yaml

@@ -1,12 +1,13 @@
 projectName: fabrique
 isLocal: true
-gitBranch: main
+gitBranch: local
+deployTimeout: 30m
 
 dependencies:
   fabrique:
     import: SocialGouv/kontinuous/plugins/fabrique
-
-    # contrib:
-    #   validators:
-    #     noPlainSecrets: # should be enable for lebal environment
-    #       enabled: false
+    dependencies:
+      contrib:
+        validators:
+          noPlainSecrets: # should be enable for lebal environment
+            enabled: false

.kontinuous/env/local/templates/kubeconfig.yaml

@@ -9,19 +9,19 @@ stringData:
     apiVersion: v1
     clusters:
       - cluster:
-          certificate-authority-data: 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
-          server: https://kubernetes.docker.internal:6443
-        name: docker-desktop
+          certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMvakNDQWVhZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJeU1UQXlNVEV6TXpnd00xb1hEVE15TVRBeE9ERXpNemd3TTFvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTFdDCmF0Q25tSXczS1BEQmhOVDNuVG9UV2xjT0wrTWQvWjBxazdRa0FTdk83UkhhZDdBYUMyeExmclpaYWFOUFhxQmEKNW1FQ3pkL1N0aUowYkpxUCt2M05RTzkyVlM0YXJwZFZxL1l3bTduTnFkSFpyUUVIUCtjWHEwbEs5ZDhXL2J3NQpHa0lGclhYNUorOU1zTFNvWDRjazFGaExxM0lWWHZWOEdYQ1hBRW1YV1pGanBoSUs2VlJiTGx2Mkg1ejNZMytTCjN2U1F5cGd2WXhEMTZ4ZmI5VkhvN1AxNGtSQlRDaVZYNVVqQ0hQK3A2Slg3Z3hjUnZzZWlKWlo5bUgzamZIeWMKdkFscXRhWEFHclVXc29uMm9xWU9MZGxpM0E2M05oTXFFUlp1bkcwbFk2bi9PaGJVY0U3ODlsbFZmNkQ3RW1uMgpJM3BiQ1hIM1QxWWcrQXVoQzNjQ0F3RUFBYU5aTUZjd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZCbitKOGxCSkozRWpydnI1dXkxRE5ndGtXL1dNQlVHQTFVZEVRUU8KTUF5Q0NtdDFZbVZ5Ym1WMFpYTXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSTRnaVZhZjNab0FFelhVSitqSQpMd0VGdytmSWFTdTFzWTN2S0lEQTZ4ZUtUSXNPQVRXZ1VrQW1ubUhkcVRYU2lncUhoRWxaeUdpbkN0YmZJbUcrCjM1SlU1K0k1NURCeUtNWmdNbXcrMjkxQkdiMWsrRlFTZGI1cXdTR25LcFJXMWsrcWxiVU9TNWxJSDJ1Mk10VE8KamZ3VS9FTC9jQS9YNkpCdWEwRmorbFZVQmpLM1RlZGowekJKekFoU0p5citBT2FZK0pZa251dmFvb1I1K2lGTwpnY0xPS2k5Z2J0N0Jxc2V1SDJYWHBlRlV2SFBSNkEwK3dVSlBUdXJ6YjlaZEdhUkVNMjUxZzhic0xydlhON0R6CktmTFlab2haNzZDNGREZFJ3NS9lUFNVYnZFVXlaVXV5YVdmRHpWZmViUEwyWmVCOHhwc2JMUmpRYnFVeS9XcjQKajZnPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
+          server: https://10.96.0.1:443
+        name: kind-template
     contexts:
       - context:
-          cluster: docker-desktop
-          user: docker-desktop
-        name: docker-desktop
-    current-context: docker-desktop
+          cluster: kind-template
+          user: kind-template
+        name: kind-template
+    current-context: kind-template
     kind: Config
     preferences: {}
     users:
-      - name: docker-desktop
+      - name: kind-template
         user:
-          client-certificate-data: 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
-          client-key-data: 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
+          client-certificate-data: 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
+          client-key-data: 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

.kontinuous/env/local/templates/pg.yaml

@@ -7,7 +7,7 @@ type: Opaque
 stringData:
   PGUSER: user
   PGPASSWORD: password
-  PGHOST: postgres
+  PGHOST: app-postgres.template-local.svc.cluster.local # todo: resolve dynamically
   PGPORT: "5432"
   PGSSLMODE: disable
   PGDATABASE: postgres

.kontinuous/env/local/templates/registry.yaml

@@ -5,6 +5,6 @@ metadata:
   namespace: ci
 type: Opaque
 stringData:
-  CI_REGISTRY: 10.103.1.205
+  CI_REGISTRY: kind-registry:5000
   CI_REGISTRY_PASSWORD: ""
   CI_REGISTRY_USER: ""

.kontinuous/env/local/values.yaml

@@ -1,18 +1,20 @@
 global:
-  registry: 10.103.1.205
+  registry: kind-registry:5000
+  ciNamespace: ci
+  host: "template-demo.test"
 
 jobs:
   runs:
     db-keycloak:
-      use: SocialGouv/kontinuous/plugins/contrib/jobs/create-db@v1
+      use: create-db
       ~needs: [app-postgres]
       with:
         pgAdminSecretRefName: pg
         pgSecretName: "keycloak-db-{{ .Values.global.branchSlug32 }}"
         database: "keycloak_{{ .Values.global.branchSlug32 }}"
         pgUser: "keycloak_{{ .Values.global.branchSlug32 }}"
     db-hasura:
-      use: SocialGouv/kontinuous/plugins/contrib/jobs/create-db@v1
+      use: create-db
       ~needs: [app-postgres]
       with:
         pgAdminSecretRefName: pg
@@ -21,14 +23,11 @@ jobs:
         pgUser: "hasura_{{ .Values.global.branchSlug32 }}"
     seed-hasura:
       ~needs: [hasura, app-postgres]
-      use: SocialGouv/kontinuous/plugins/contrib/jobs/seed-db@v1
+      use: seed-db
       with:
         seedPath: hasura/seeds/default/books.sql
         pgSecretName: "hasura-db-{{ .Values.global.branchSlug32 }}"
 
-app:
-  host: "demo.local"
-
 hasura:
   ~needs: [build-hasura, db-hasura, keycloakx]
   envFrom:

.kontinuous/kind/config.yaml

@@ -2,7 +2,7 @@ kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
 containerdConfigPatches:
   - |-
-    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."localhost:5001"]
+    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."kind-registry:5000"]
       endpoint = ["http://kind-registry:5000"]
 nodes:
   - role: control-plane

.kontinuous/kind/setup-cluster.sh

@@ -18,11 +18,18 @@ if [ "$(docker inspect -f='{{json .NetworkSettings.Networks.kind}}' "${reg_name}
   docker network connect "kind" "${reg_name}"
 fi
 
+# create the kind cluster
 kind delete clusters "${cluster_name}" || true
-kind create cluster --wait 5m --name "${cluster_name}" --config=./config.yaml
+kind create cluster --wait 5m --name "${cluster_name}" --config=./config.yaml --kubeconfig=./kubeconfig.yaml
 
 # add ingress-nginx
-kubectl --context "kind-${cluster_name}" apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+kubectl --kubeconfig=./kubeconfig.yaml apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
 
 # add local registry
-kubectl --context "kind-${cluster_name}" apply -f ./local-registry.yaml
+kubectl --kubeconfig=./kubeconfig.yaml apply -f ./local-registry.yaml
+
+# create CI namespace
+kubectl --kubeconfig=./kubeconfig.yaml create ns ci
+
+# create kubeconfig in env/local/templates/kubeconfig.yaml
+kubectl create secret kubeconfig --namespace=ci --dry-run --from-file=KUBECONFIG=./kubeconfig.yaml > ../env/local/kubeconfig.yaml

.kontinuous/values.yaml

@@ -7,8 +7,6 @@ global:
 app:
   ~needs: [build-app, keycloakx, hasura]
   host: "{{.Values.global.host}}"
-  #imageProject: fabrique
-  #imageRepository: template
   imagePackage: app
   containerPort: 3000
   probesPath: "/healthz"
@@ -24,31 +22,26 @@ app:
 jobs:
   runs:
     build-app:
-      use: SocialGouv/kontinuous/plugins/contrib/jobs/build@local
+      use: build
       memoryLimit: 10Gi
       memoryRequest: 4Gi
       with:
-        #imageProject: fabrique
-        #imageRepository: template
         imagePackage: app
-        #registrySecretRefName: "{{ $.Values.global.registrySecretRefName }}"
+        skipExisting: true
         buildArgs:
           NEXT_PUBLIC_APP_VERSION_COMMIT: "{{ $.Values.global.sha }}"
           NEXT_PUBLIC_HASURA_GRAPHQL_ENDPOINT_URL: "https://hasura-{{.Values.global.host}}/v1/graphql"
-
+        buildOptions: --insecure --single-snapshot --ignore-path=/product_uuid --compressed-caching=false # optim for local builds
     build-hasura:
-      use: SocialGouv/kontinuous/plugins/contrib/jobs/build@local
+      use: build
       with:
-        #imageProject: fabrique
-        #imageRepository: template
+        skipExisting: true
         imagePackage: hasura
-        #registrySecretRefName: "{{ $.Values.global.registrySecretRefName }}"
         context: ./hasura
+        buildOptions: --insecure --single-snapshot --ignore-path=/product_uuid --compressed-caching=false # optim for local builds
 
 hasura:
   ~needs: [build-hasura, keycloakx]
-  # imageProject: fabrique
-  # imageRepository: template
   imagePackage: hasura
   env:
     - name: HASURA_GRAPHQL_ENABLE_CONSOLE
@@ -66,18 +59,24 @@ hasura:
         name: hasura
 
 app-postgres:
-  image: postgres:13
+  image: mdillon/postgis:11
   containerPort: 5432
-  # readinessProbe:
-  #   exec:
-  #     command: ["psql", "-w", "-U", "user", "-d", "postgres", "-c", "SELECT 1"]
-  #   initialDelaySeconds: 15
-  #   timeoutSeconds: 2
-  # livenessProbe:
-  #   exec:
-  #     command: ["psql", "-w", "-U", "user", "-d", "postgres", "-c", "SELECT 1"]
-  #   initialDelaySeconds: 45
-  #   timeoutSeconds: 2
+  servicePort: 5432
+  readinessProbe:
+    exec:
+      command: ["psql", "-w", "-U", "user", "-d", "postgres", "-c", "SELECT 1"]
+    initialDelaySeconds: 5
+    timeoutSeconds: 2
+  livenessProbe:
+    exec:
+      command: ["psql", "-w", "-U", "user", "-d", "postgres", "-c", "SELECT 1"]
+    initialDelaySeconds: 5
+    timeoutSeconds: 2
+  startupProbe:
+    exec:
+      command: ["psql", "-w", "-U", "user", "-d", "postgres", "-c", "SELECT 1"]
+    initialDelaySeconds: 5
+    timeoutSeconds: 2
   ingress:
     enabled: false
   env:
@@ -110,7 +109,7 @@ keycloakx:
     - "--http-port=8080"
     - "--hostname-strict=true"
     - "--hostname-strict-https=true"
-    - "--log-level=debug"
+    # - "--log-level=debug"
     - "--import-realm"
     #- "--features=admin2"
     #- "--spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true" # allow redirect_uri on logout see https://www.keycloak.org/2022/04/keycloak-1800-released.html

.talismanrc

@@ -6,13 +6,15 @@ fileignoreconfig:
 - filename: .env.staging
   checksum: f7e70bc08ec6658b8c622acba19325314d6b8d03aa428dd7615ff4ce5a9eae98
 - filename: .kontinuous/config.yaml
-  checksum: 3186199bb12918a1abadd8892e1033b243a8e6c941eeac3129681da315a8bdc1
+  checksum: cc98e1166ca4a0b4ff2eb12e978eed35dc1a3ec2876debdc71bb37b7482017c5
 - filename: .kontinuous/env/dev/templates/app.sealed.secret.yaml
   checksum: fcbdb3df446d45096551093aefa6989d48546580171201984d1207b593704597
 - filename: .kontinuous/env/dev/templates/hasura.sealed.secret.yaml
   checksum: 7a775d6a31628685ac20af5e17ab13725fd69927a0a20eb7c54985b8aa0723a5
 - filename: .kontinuous/env/dev/values.yaml
   checksum: 641ce0c76153a7e6454ca38d427735ba589035a0d6ae18173bd986cea6e913db
+- filename: .kontinuous/env/local/templates/kubeconfig.yaml
+  checksum: 8ebaa0c743f3cb132a5d7d51c87cc914abf3589e4f19f35d9db3d52c85a2acbf
 - filename: .kontinuous/env/preprod/templates/app.sealed.secret.yaml
   checksum: 6d0bdcef816f00308d8bfdbdb9aeca94dfaee5b54f29f2b868a9085fd6428829
 - filename: .kontinuous/env/preprod/templates/hasura.sealed.secret.yaml
@@ -27,6 +29,8 @@ fileignoreconfig:
   checksum: 7f2dcf9c19bfb1f6ae6ce4002ce2c86c8f46ef230b6eec066f3051b10acbd6a6
 - filename: .kontinuous/files/realm-export.json
   checksum: 5d1c6ce3754d1f5f04559ff311e86d3d4b9eb35d234af9c99f2f8815dc1a13ff
+- filename: .kontinuous/kind/setup-cluster.sh
+  checksum: bb8db43fb6c5340db2415cdfe2c2c2468b2f2b7f4247b8abddec4508a56fe9a7
 - filename: .kontinuous/values.yaml
   checksum: 4684a75ec08f2e5fe8bb77b4011cbb6a990fa71ad97bef71c63f4777689caf6b
 - filename: docker-compose.yaml