æternity SDK Kubernetes setup

This project contains Terraform and Kubernetes configuration files to reproduce the Kubernetes infrastructure of the æternity SDK from scratch.

The setup is directly derived from the upstream template for AWS EKS (AWS managed Kubernetes). Therefore, the [Heptio Authenticator for AWS] is also required.

Usage

It is assumed that Terraform has already been installed and the binary in $PATH. Same goes for the go binary and kubectl.

1. Install Heptio Autenticator

https://docs.aws.amazon.com/eks/latest/userguide/configure-kubectl.html

2. Deploy EKS

cp terraform.tfvars{.example,}
$EDITOR terraform.tfvars # check variables.tf for a description of the variables
terraform init
terraform apply

3. Deploy Kubernetes infrastructure

mkdir -p ~/.kube
terraform output config_map_aws_auth > aws-auth.yaml
terraform output kubeconfig > ~/.kube/config
kubectl create secret generic epoch-keys --from-file=keys
kubectl create configmap epoch-config --from-file=conf
kubectl apply -f aws-auth.yaml
kubectl apply -f k8s/gp2-storage-class.yaml
kubectl apply -f k8s/sdk-testnet.yaml
kubectl apply -f k8s/sdk-edgenet.yaml
kubectl apply -f k8s/aepp-contracts.yaml
kubectl apply -f k8s/aepp-faucet.yaml
kubectl apply -f k8s/traefik
kubectl apply -f k8s/ingress
# etc

4. Changes in terraform configuration

To be able to apply the changes on the infrastructure deployed with terraform you need to have access to the terraform state file (terraform.tfstate).

Add a new user

• create a new user on aws IAM
• install kubectl
• install aws-iam-authenticator
• create kubectl configuration
• add the new user to the k8s system

Deploy new applications

To deploy a new application:

• write the k8s configuration of the application
• add a ClusterIP service that exposes the application ports to the cluster
• add a ingress configuration to bind the dns name to the service.

License

Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.