fix(aws-eks-tutorial): use alb ingress instead

aws-eks-tutorial/components/certificate/main.tf

@@ -4,5 +4,6 @@ module "certificate" {
 
   domain_name         = var.domain_name
   zone_id             = var.zone_id
+  validation_method   = "DNS"
   wait_for_validation = false
 }

aws-eks-tutorial/components/helm-chart/templates/api_alb.tpl

@@ -0,0 +1,47 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "common.fullname" . }}-api
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "common.apiLabels" . | nindent 4 }}
+  annotations:
+    alb.ingress.kubernetes.io/scheme: internet-facing
+    alb.ingress.kubernetes.io/target-type: ip
+    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP":80}]'
+    {{- /*
+    alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
+    alb.ingress.kubernetes.io/certificate-arn: {{ .Values.api.nlbs.public_domain_certificate }}
+    alb.ingress.kubernetes.io/aws-load-balancer-ssl-ports: https
+    */}}
+    alb.ingress.kubernetes.io/healthcheck-path: /livez
+    external-dns.alpha.kubernetes.io/hostname: {{ .Values.api.nlbs.public_domain }}
+spec:
+  ingressClassName: alb
+  rules:
+    - http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "common.fullname" . }}-api
+                port:
+                  name: http
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "common.fullname" . }}-api
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "common.apiLabels" . | nindent 4 }}
+spec:
+  selector:
+    {{- include "common.apiSelectorLabels" . | nindent 4 }}
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 8080
+      targetPort: http

aws-eks-tutorial/components/helm-chart/templates/api_deployment.tpl

@@ -22,10 +22,16 @@ spec:
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           ports:
             - name: http
-              containerPort: 8080
-              hostPort: 8080
-          readinessProbe: null
-          livenessProbe: null
+              containerPort: {{ .Values.api.port }}
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: {{ .Values.api.readiness_probe}}
+              port: http
+          livenessProbe:
+            httpGet:
+              path: {{ .Values.api.liveness_probe}}
+              port: http
           resources:
             limits:
               cpu: 100m

aws-eks-tutorial/components/helm-chart/values.yaml

@@ -1,9 +1,5 @@
 ---
 env:
-  DATABASE_URL: ""
-  AUTH_MODE: ""
-  LOGICAL_PUBLISHER_HOST: ""
-  PG_PROXY_PASSWORD: ""
 
 image:
   repository: ""
@@ -15,13 +11,12 @@ serviceAccount:
 
 api:
   port: 8080
-
-  ingresses:
-    public_domain: api.INSTALL_PUBLIC_DOMAIN
+  readinessProbe: /readyz
+  livenessProbe: /livez
 
   nlbs:
-    public_domain: nlb.INSTALL_PUBLIC_DOMAIN
-    public_domain_certificate: nbl.PUBLIC_DOMAIN_CERTIFICATE
+    public_domain: ""
+    public_domain_certificate: ""
 
   autoscaling:
     minReplicas: 1