189 Commits

Author SHA1 Message Date
Muawia Khan
2cbf6b6a5c [WIP]: Move the bigchaindb/nginx_3scale repo under bigchaindb/bigchaindb
- All files moved to k8s/nginx-3scale with directory structure consistent
with k8s/nginx-http(s)
- Top level LICENCES.md updated
- Renaming entry point script to nginx_openresty_entrypoint.bash
2017-09-25 16:20:47 +02:00
krish7919 (Krish)
ac0dcd090e Bugfix in Deployment config 2017-09-11 11:57:58 +02:00
krish7919 (Krish)
1307f43306 Add livenessProbe 2017-09-11 11:57:58 +02:00
krish7919 (Krish)
f07df50041 BigchainDB Web Proxy to add headers to requests
Currently, the requests from public websites (like
`bigchaindb.com/getstarted` and tutorials.bigchaindb.com/crab) cannot have the
app_id and app_key required to access IPDB in the web page.

We pass such requests through a web proxy that adds the required headers
to any POST requests from `*.bigchaindb.com`.
2017-09-11 11:57:58 +02:00
krish7919 (Krish)
9445647be5 MongoDB data dir config change 2017-09-07 11:00:03 +02:00
Krish
2e40ad96f2 Minor fixes to k8s setup (#1735)
* Fix typo in docs

* Minor documentation fixes.

* Update mongodb monitoring agent to latest version.

* Update mongodb backup agent to latest version.

* Bugfix in mongodb backup agent.
2017-08-31 16:57:41 +02:00
Ahmed Muawia Khan
e41a378df4 Merge pull request #1720 from bigchaindb/remove-reclaim-policy-k8s-pvc
Remove persistentVolumeReclaimPolicy from the pvc request
2017-08-17 15:12:40 +02:00
Ahmed Muawia Khan
a05cdb4413 Merge pull request #1723 from bigchaindb/run-mma-mba-non-root
Run mongodb monitoring and backup agents as non-root user
2017-08-17 15:12:19 +02:00
Ahmed Muawia Khan
a3de849820 Merge pull request #1724 from bigchaindb/imporve-error-message-entrypoint
Improve error message for all bdb docker entrypoint scripts
2017-08-17 11:27:20 +02:00
Ahmed Muawia Khan
559b8ef7cf Merge branch 'master' into run-mma-mba-non-root 2017-08-17 11:26:57 +02:00
Ahmed Muawia Khan
ea32694435 Merge pull request #1721 from bigchaindb/common-secret-for-ca
Common secret for CA in secret.yaml
2017-08-17 11:07:35 +02:00
Muawia Khan
7658097221 Use env variables names for error messages
- Address comments
2017-08-17 10:46:19 +02:00
Muawia Khan
7ba6334bfc Fix volumeMounts for monitoring and backup agents 2017-08-17 10:31:03 +02:00
Muawia Khan
8df38ff31c Fix typo in nginx-http-svc name 2017-08-16 16:35:46 +02:00
Muawia Khan
e446c31a41 More changes to multi-node deployment guide
- Integrating changes suggested by Krish.
- Addressing comments on initial commit.
2017-08-16 13:22:09 +02:00
Muawia Khan
d11c100ab5 Improve error message for all bdb docker entrypoint scripts
- If a mandatory variable is not specified, it will exit with the relevant
code and error message.
- For more verbosity, we will also echo the values for all the mandatory
variables.
2017-08-16 13:15:24 +02:00
Muawia Khan
0cf46b331f Verify and fix BDB multi node deployment guide
- Documentation support to add a new BDB node to an existing
  replica set, using x.509 certificates and SSL/TSL connections, across
  geographically dispersed clusters.
- Fix some documentation issues and add more references i.e.
  specifically about signing of MongoDB member certificates.
- Minor fixes for nginx-https-dep.yaml(invalid configMap var)
- Reconfigure nginx keep_alive between MongoDB front and backend ports.
- Editor removed whitespaces
2017-08-16 10:27:17 +02:00
Muawia Khan
650177c50e Run mongodb monitoring and backup agents as non-root user
- We need to modify the read permissions on the secrets and allow
the mongodb-mms-agent to read the credentials.
2017-08-15 15:59:08 +02:00
Muawia Khan
fbee5db40f Common secret for CA in secret.yaml
- Creating a common secret for CA, since all the members of the replica set
and the clients need to have a common CA, moving all the relevant configuration
to a common secret.
- Modifying Dockerfiles for some components, once changes are approved
we will publish the new images.
- No documentation changes required.
2017-08-15 14:26:47 +02:00
Muawia Khan
04b84f6ab4 Remove persistentVolumeReclaimPolicy from the pvc request
- Reclaim policy can only be specified when we explicitly create
a persistent Volume. Removing this from a persistent volume claim
request yaml.
2017-08-15 10:07:50 +02:00
Krish
26f43c15eb Update MongoDB Backup Agent to v5.7.0.641 (#1718) 2017-08-09 17:03:35 +02:00
Krish
3ce4a3d0c3 User service token instead of provider key in threescale-credentials kubernetes secret (#1717) 2017-08-09 10:41:51 +02:00
Krish
c2d726d584 Support proper Websocket host and port settings in root API endpoint (#1715)
* Support proper Websocket host and port settings in root API endpoint

* Documentation change
2017-08-09 09:40:41 +02:00
Sylvain Bellemare
6f1ad664fd Update image for k8s 2017-08-02 16:15:00 +02:00
Ahmed Muawia Khan
84ff0ad4a5 Merge pull request #1690 from bigchaindb/update-azure-kubernetes-docs
Update guide to setup bdb+kubernetes+azure setup
2017-07-21 15:38:16 +02:00
Muawia Khan
b56f8a6213 Update guide to setup bdb+kubernetes+azure setup
-- Fixed typos in the guide
-- Fixed some syntax errors in commandline instructions
-- Fixed strucuture of sample jsons
-- Fixed bugs in nginx-https-dep file, it was trying to access
an invalid variable in the configmap.
-- Improved some docs to give more clarity for the user.
Atleast all the issues I faced. :)
2017-07-21 15:01:20 +02:00
Krish
a27cfdd89c Updating dependencies (#1692) 2017-07-21 13:36:29 +02:00
Krish
8e6a94e158 Change imagePullPolicy in k8s configs (#1680) 2017-07-19 20:14:56 +02:00
Krish
4c8b0fc828 Healthchecks for NGINX in nginx-http-dep.yaml and dev-setup/nginx-http.yaml (#1679) 2017-07-17 18:59:11 +02:00
Krish
e0efc2286a Simpler MongoDB Instance Configuration in K8s (#1678)
* Simpler configuration of MongoDB instance in a node

* Update docs for MDB configuration
2017-07-17 17:57:13 +02:00
Krish
9116836e4c Simpler BigchainDB Instance Configuration in K8s (#1677)
* Simpler configuration of BigchainDB instance in a node

* Update docs for BDB configuration

* Changes as per @ttmc's comments
2017-07-17 17:29:51 +02:00
Krish
c640313003 Remove 3scale port number from configs (#1676)
* Remove 'threescale-api-port' from all configs in node setup

* Update docs - remove references to threescale-api-port

* Fix typo
2017-07-17 14:46:06 +02:00
Krish
b7e13fd087 Secure WebSocket Support (#1619)
* Remove support for whitelist

* Rename nginx to nginx-api

* Remove websocket support from nginx-api

* Change nginx to nginx-api service
The nginx-api service will proxy requests to the BigchainDB HTTP API.

* Rename ngx-instance-0 to ngx-api-instance-0 in nginx_3scale

* Update nginx-api service base docker image and README

* Add nginx-ws service to support Websocket

* Add config files for simple dev setup

* WS support with split NGINX

* NGINX module as single entrypoint into the cluster.

* Tested HTTP and WS with latest configs

* Openresty as separate service

* Remove upstream api port as configuration parameter

* Changes while testing

* Adding READMEs for nginx-http and nginx-https modules

* Documentation update

* Change 'Openresty' to 'OpenResty'.
2017-07-17 13:46:05 +02:00
Krish
6bd6e7fddb Update MongoDB Backup Agent to v5.6.0.624 (#1674) 2017-07-14 10:02:38 +02:00
muawiakh
b0106c0203 Fix for MongoDB hitting memory limit on k8s
- MongoDB StatefulSet hitting memory limit, so k8s restarts it.
We have had multiple instances of restarts lately.
-  Changing it to 3.5 GB, data and reasoning to back it up
is mentioned in the ticket #1655
2017-07-12 16:17:50 +02:00
Troy McConaghy
923df8f64f Updated BDB Docker tag from 1.0.0rc1 to 1.0.0 in k8s deployment 2017-07-05 10:52:31 +02:00
Krish
ece195ff8d Deployment changes: (#1623)
Update MongoDB container tag to `3.0`.

Doc change to reflect bdb-config.bdb-user parameter usage.

Fix typo in configuration.md.

Add BIGCHAINDB_DATABASE_SSL parameter to bigchaindb-dep.yaml for
Kubernetes deployments.

Refer the the `bdb-user` parameter from ConfigMap in
bigchaindb-dep.yaml.

Consolidate all BigchainDB parameter values under the
`bdb-config` ConfigMap.

Remove `bdb-user` from secrets.yaml.
2017-07-03 15:55:43 +02:00
Troy McConaghy
ca394bbb93 Fixed indent of ConfigMap ref to BDB public key 2017-06-30 15:11:48 +02:00
Krish
b33f718097 Use ConfigMap values in bigchaindb-dep.yaml (#1618)
* Use ConfigMap values in bigchaindb-dep.yaml

* Removed comments from top of bigchaindb-dep.yaml

Because they didn't add much information and they also contained a dated Docker Hub version tag.
2017-06-30 14:59:14 +02:00
Troy McConaghy
c7a6544070 Updated Docker image tag in MongoDB agent Deployment YAML files 2017-06-30 11:09:19 +02:00
Troy McConaghy
3dd30365ee Merge pull request #1614 from bigchaindb/editing-node-on-k8s-page
Editing node on k8s page
2017-06-30 10:12:48 +02:00
Troy McConaghy
1034db1ce5 Fixed name of https-certs volume mount in nginx-3scale-dep.yaml 2017-06-29 15:32:08 +02:00
Troy McConaghy
54e0fc4f57 Clarify the required SSL cert order in cert chain 2017-06-29 11:28:51 +02:00
Troy McConaghy
0feaafef2b entire HTTPS cert chain is needed in secret.yaml 2017-06-28 16:40:52 +02:00
Troy McConaghy
1d6a7624f4 Removed un-needed trailing comma in secret.yaml 2017-06-28 15:44:39 +02:00
Krish
d92f5f2024 Documentation changes (#1595)
* Add documentation for `bdb-user` parameter

* Remove the bdb-keyfile-passphrase parameter

* Formatting changes in bdb-certs.bdb-user subsection
2017-06-28 15:35:26 +02:00
Sylvain Bellemare
190a623226 Update kubernetes docker image version 2017-06-23 10:50:49 +02:00
Krish
9ceea89537 Enable Auth over TLS connections (#1552)
* Changes to support auth on the infrastructure
* Auth over TLS/SSL support in BigchainDB, MongoDB, Monitoring Agent, Backup Agent
* Update certificates: Different OUs specified now
* Code formatting
- Make flake happy!
* Raise proper authentication failed error
* Documentation changes for auth
* Support auth in k8s deployment
* Commit certs for monitoring and backup agents
* Configuration to allow Cloud Manager Backup Agent to backup data
* Update docs and remove authentication error
2017-06-22 16:32:04 +02:00
Krish
a175f371b0 Bump up nginx-3scale version number (#1575) 2017-06-22 14:05:37 +02:00
Krish
bca835fed7 Cloud manager GroupID update (#1551)
* Update docker image for mongodb monitoring agent

* Update docker image for mongodb backup agent

* Update secret.yaml and documentation with GroupID requirement

* Delete redundant lines from config file from entrypoint script

* Rename secret and keys
2017-06-16 14:10:21 +02:00