Merge pull request #13 from joagonzalez/rc-v0.1.0

Rc v0.1.0

Author: joagonzalez

.github/workflows/pipeline.yml

@@ -72,6 +72,13 @@ jobs:
         run: |
           make test
 
+      - name: Log in to Docker Hub (rc-* only)
+        if: startsWith(github.ref_name, 'rc-')
+        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+        env:
+          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+
       - name: Build and push Docker image (rc-* only)
         if: startsWith(github.ref_name, 'rc-')
         run: |
@@ -87,10 +94,11 @@ jobs:
           echo "$KUBECONFIG_B64" | base64 -d > kubeconfig.yaml
           export KUBECONFIG=$PWD/kubeconfig.yaml
 
+          export IMAGE_TAG=${{ steps.gitinfo.outputs.version }}
           kubectl version --client
           kubectl config get-contexts
-          echo "Deploying version ${{ steps.gitinfo.outputs.version }}"
-          kubectl apply -f build/calculator/k8s/
+          echo "Deploying version $IMAGE_TAG"
+          envsubst < build/k8s/calculator.yaml | kubectl apply -f -
 
       - name: Publish coverage to Coveralls (master only)
         if: github.ref_name == 'master'

.gitignore

@@ -8,7 +8,7 @@ __pycache__/
 
 # Distribution / packaging
 .Python
-build/
+# build/
 develop-eggs/
 dist/
 downloads/

Makefile

@@ -39,6 +39,6 @@ checklist: typehint lint test clean
 code-quality: typehint lint clean
 
 coverage-publish:
-	COVERALLS_REPO_TOKEN=$(COVERALLS_REPO_TOKEN) coveralls
+	uv run COVERALLS_REPO_TOKEN=$(COVERALLS_REPO_TOKEN) coveralls
 
 .PHONY: checklist

build/calculator/Dockerfile

@@ -0,0 +1,31 @@
+FROM python:3.11-alpine
+
+# Set build directory
+WORKDIR /tmp
+
+# Perform build and cleanup artifacts
+RUN apk add --no-cache \
+    git curl \
+    && apk add --no-cache --virtual .build gcc musl-dev make\
+    && apk del .build gcc musl-dev \
+    && rm -rf /tmp/*
+
+# Install uv
+RUN pip install --user uv
+
+ENV PATH=$PATH:/root/.local/bin
+
+# Set working directory
+RUN mkdir /app
+WORKDIR /app
+COPY ./ ./
+
+# Install dependencies using uv
+RUN uv sync
+
+# Expose FastAPI development server port
+EXPOSE 5000
+
+# Start development server by default
+ENTRYPOINT ["uv", "run", "python", "run.py"]
+CMD ["uv", "run", "python", "run.py"]

build/documentation/Dockerfile

@@ -0,0 +1,31 @@
+FROM python:3.11-alpine
+
+# Set build directory
+WORKDIR /tmp
+
+# Copy files necessary for build
+COPY requirements.txt requirements.txt
+
+# COPY setup.py setup.py
+
+# Perform build and cleanup artifacts
+RUN apk add --no-cache \
+    git curl \
+    && apk add --no-cache --virtual .build gcc musl-dev \
+    && pip install --user -r requirements.txt \
+    && apk del .build gcc musl-dev \
+    && rm -rf /tmp/*
+
+ENV PATH=$PATH:/root/.local/bin
+# Set working directory
+
+RUN mkdir /app
+WORKDIR /app
+COPY ./ ./
+
+# Expose MkDocs development server port
+EXPOSE 8000
+
+# Start development server by default
+ENTRYPOINT ["mkdocs"]
+CMD ["serve", "--dev-addr=0.0.0.0:8000"]

build/k8s/calculator.yaml

@@ -0,0 +1,83 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: calculator-deployment
+  labels:
+    app: calculator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: calculator
+  template:
+    metadata:
+      labels:
+        app: calculator
+    spec:
+      containers:
+        - name: calculator
+          image: joagonzalez/python-seed-api:${IMAGE_TAG}
+          ports:
+            - containerPort: 5000
+          env:
+            - name: ENVIRONMENT
+              value: "production"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: calculator-service
+spec:
+  selector:
+    app: calculator
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 5000
+  type: ClusterIP
+---
+# Traefik Middleware for HTTPS redirect
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: https-redirect
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+---
+# HTTP IngressRoute for redirect
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: calculator-http
+spec:
+  entryPoints:
+    - web
+  routes:
+    - match: Host(`calculator.qwerty.com.ar`)
+      kind: Rule
+      middlewares:
+        - name: https-redirect
+      services:
+        - name: calculator-service
+          port: 80
+---
+# HTTPS IngressRoute
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: calculator-https
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`calculator.qwerty.com.ar`)
+      kind: Rule
+      services:
+        - name: calculator-service
+          port: 80
+      middlewares:
+        - name: secure-headers
+  tls:
+    certResolver: letsencrypt