112 Commits

Author SHA1 Message Date
Krish
8e6a94e158 Change imagePullPolicy in k8s configs (#1680) 2017-07-19 20:14:56 +02:00
Krish
4c8b0fc828 Healthchecks for NGINX in nginx-http-dep.yaml and dev-setup/nginx-http.yaml (#1679) 2017-07-17 18:59:11 +02:00
Krish
e0efc2286a Simpler MongoDB Instance Configuration in K8s (#1678)
* Simpler configuration of MongoDB instance in a node

* Update docs for MDB configuration
2017-07-17 17:57:13 +02:00
Krish
9116836e4c Simpler BigchainDB Instance Configuration in K8s (#1677)
* Simpler configuration of BigchainDB instance in a node

* Update docs for BDB configuration

* Changes as per @ttmc's comments
2017-07-17 17:29:51 +02:00
Krish
c640313003 Remove 3scale port number from configs (#1676)
* Remove 'threescale-api-port' from all configs in node setup

* Update docs - remove references to threescale-api-port

* Fix typo
2017-07-17 14:46:06 +02:00
Krish
b7e13fd087 Secure WebSocket Support (#1619)
* Remove support for whitelist

* Rename nginx to nginx-api

* Remove websocket support from nginx-api

* Change nginx to nginx-api service
The nginx-api service will proxy requests to the BigchainDB HTTP API.

* Rename ngx-instance-0 to ngx-api-instance-0 in nginx_3scale

* Update nginx-api service base docker image and README

* Add nginx-ws service to support Websocket

* Add config files for simple dev setup

* WS support with split NGINX

* NGINX module as single entrypoint into the cluster.

* Tested HTTP and WS with latest configs

* Openresty as separate service

* Remove upstream api port as configuration parameter

* Changes while testing

* Adding READMEs for nginx-http and nginx-https modules

* Documentation update

* Change 'Openresty' to 'OpenResty'.
2017-07-17 13:46:05 +02:00
Krish
6bd6e7fddb Update MongoDB Backup Agent to v5.6.0.624 (#1674) 2017-07-14 10:02:38 +02:00
muawiakh
b0106c0203 Fix for MongoDB hitting memory limit on k8s
- MongoDB StatefulSet hitting memory limit, so k8s restarts it.
We have had multiple instances of restarts lately.
-  Changing it to 3.5 GB, data and reasoning to back it up
is mentioned in the ticket #1655
2017-07-12 16:17:50 +02:00
Troy McConaghy
923df8f64f Updated BDB Docker tag from 1.0.0rc1 to 1.0.0 in k8s deployment 2017-07-05 10:52:31 +02:00
Krish
ece195ff8d Deployment changes: (#1623)
Update MongoDB container tag to `3.0`.

Doc change to reflect bdb-config.bdb-user parameter usage.

Fix typo in configuration.md.

Add BIGCHAINDB_DATABASE_SSL parameter to bigchaindb-dep.yaml for
Kubernetes deployments.

Refer the the `bdb-user` parameter from ConfigMap in
bigchaindb-dep.yaml.

Consolidate all BigchainDB parameter values under the
`bdb-config` ConfigMap.

Remove `bdb-user` from secrets.yaml.
2017-07-03 15:55:43 +02:00
Troy McConaghy
ca394bbb93 Fixed indent of ConfigMap ref to BDB public key 2017-06-30 15:11:48 +02:00
Krish
b33f718097 Use ConfigMap values in bigchaindb-dep.yaml (#1618)
* Use ConfigMap values in bigchaindb-dep.yaml

* Removed comments from top of bigchaindb-dep.yaml

Because they didn't add much information and they also contained a dated Docker Hub version tag.
2017-06-30 14:59:14 +02:00
Troy McConaghy
c7a6544070 Updated Docker image tag in MongoDB agent Deployment YAML files 2017-06-30 11:09:19 +02:00
Troy McConaghy
3dd30365ee Merge pull request #1614 from bigchaindb/editing-node-on-k8s-page
Editing node on k8s page
2017-06-30 10:12:48 +02:00
Troy McConaghy
1034db1ce5 Fixed name of https-certs volume mount in nginx-3scale-dep.yaml 2017-06-29 15:32:08 +02:00
Troy McConaghy
54e0fc4f57 Clarify the required SSL cert order in cert chain 2017-06-29 11:28:51 +02:00
Troy McConaghy
0feaafef2b entire HTTPS cert chain is needed in secret.yaml 2017-06-28 16:40:52 +02:00
Troy McConaghy
1d6a7624f4 Removed un-needed trailing comma in secret.yaml 2017-06-28 15:44:39 +02:00
Krish
d92f5f2024 Documentation changes (#1595)
* Add documentation for `bdb-user` parameter

* Remove the bdb-keyfile-passphrase parameter

* Formatting changes in bdb-certs.bdb-user subsection
2017-06-28 15:35:26 +02:00
Sylvain Bellemare
190a623226 Update kubernetes docker image version 2017-06-23 10:50:49 +02:00
Krish
9ceea89537 Enable Auth over TLS connections (#1552)
* Changes to support auth on the infrastructure
* Auth over TLS/SSL support in BigchainDB, MongoDB, Monitoring Agent, Backup Agent
* Update certificates: Different OUs specified now
* Code formatting
- Make flake happy!
* Raise proper authentication failed error
* Documentation changes for auth
* Support auth in k8s deployment
* Commit certs for monitoring and backup agents
* Configuration to allow Cloud Manager Backup Agent to backup data
* Update docs and remove authentication error
2017-06-22 16:32:04 +02:00
Krish
a175f371b0 Bump up nginx-3scale version number (#1575) 2017-06-22 14:05:37 +02:00
Krish
bca835fed7 Cloud manager GroupID update (#1551)
* Update docker image for mongodb monitoring agent

* Update docker image for mongodb backup agent

* Update secret.yaml and documentation with GroupID requirement

* Delete redundant lines from config file from entrypoint script

* Rename secret and keys
2017-06-16 14:10:21 +02:00
Troy McConaghy
945ed81038 Responses to review comments from @krish7919 on #1526 2017-06-09 14:32:39 +02:00
Troy McConaghy
e1082af385 Added clarifying comments to secret.yaml 2017-06-08 17:42:30 +02:00
Troy McConaghy
03e9020909 Added helper comments to config-map.yaml 2017-06-08 17:41:38 +02:00
krish7919 (Krish)
2cde05a204 Remove redundant configs in nginx-dep.yaml 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
9f5bad6498 Changes as per @ttmc's comments
- Renumbered steps in documentation
- Clarification on DNS prefix name
- Removed redundant port mappint in nginx-svc.yaml file
2017-06-06 10:01:53 +02:00
krish7919 (Krish)
99fb96c9c6 Update description in documentation 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
75c33dbcf1 Remove base 64 encoding requirement from ConfigMap 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
8fb1c0be8b Update docs to reflect TLS setup 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
54189ba418 Credential management using Secrets in nginx
Support for websocket port in nginx
2017-06-06 10:01:53 +02:00
krish7919 (Krish)
af966f56df Credential management using Secret in nginx_3scale 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
cf10d3199e Support for TLS connections in MongoDB StatefulSet 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
06f0f8d95e Support for TLS connections in MongoDB Monitoring Agent 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
ff12d0aafc Support for TLS connections in MongoDB Backup Agent 2017-06-06 10:01:53 +02:00
krish7919 (Krish)
7208310111 Global ConfigMap and Secret 2017-06-06 10:01:53 +02:00
Troy McConaghy
818d44052e python cleanup of analyze.py 2017-05-24 15:15:12 +02:00
Troy McConaghy
8f6e7fc735 added little py script to do some nginx logs analysis 2017-05-24 15:02:06 +02:00
Krish
710fde686d Update bigchaindb default deployment version
Updated to the latest release, version 0.10.2.
2017-05-22 14:22:16 +02:00
Krish
b6ec3e5f5c Mongodb TLS (#1456)
* Support for secure TLS communication in MongoDB, MongoDB Monitoring
Agent and MongoDB Backup Agent
- Move from Golang to Bash for entrypoint program
- Update image tag to 2.0 for Backup and Monitoring Agents and to
3.4.4 for MongoDB
- Add documentation

* changed title & rewrote Step 1 of workflow.rst

* copy-edited ca-installation.rst

* copy-edited & modified structure of workflow.rst

* moved repeated Easy-RSA install & config docs to new page

* edited the sentences describing the Easy-RSA dirs

* copy-edited the page about generating server certificate

* copy-edited the page about generating client certificate

* renamed page to 'How to Set Up a Self-Signed Certificate Authority'

* copy-edited page about how to revoke a certificate

* Comments on how to uniquely name all instances in the cluster

* Added comments about the other questions when setting up a CA

* Added note about one Agent Api Key per Cloud Manager backup

* docs: clarified instructions for generating server CSR

* docs: added back 'from your PKI infrastructure'

* docs: fixed step & added step re/ FQDNs & certs in workflow.rst

* docs: added note re/ the Distinguished Name

* Update docs for env vars setup

* docs: added tip: how to get help with the easyrsa command
2017-05-19 11:18:44 +02:00
krish7919 (Krish)
b8407d603a Deploy events API on k8s over on HTTP 2017-05-16 10:38:40 +02:00
Krish
07a9e69933 WebSocket support in NGINX (#1439)
* Open port in Dockerfile
* Added the BIGCHAINDB_WS_FRONTEND_PORT and BIGCHAINDB_WS_BACKEND_PORT as parameters.
2017-05-02 12:20:27 +02:00
Krish
43f9f67867 Publish port 80 publicly in nginx-3scale. (#1446)
Upgrade docker image tag to `1.1` as the corresponding config changes for displaying error message are built in the `1.1` container image.
2017-04-28 10:14:14 +02:00
Krish
20270cdb9b Config settings for MongoDB Backup Agent (#1442) 2017-04-26 18:34:22 +02:00
Sylvain Bellemare
22f0e25c9a Correct JSON 2017-04-25 11:58:15 +02:00
Sylvain Bellemare
43ac369e45 Move oms related files under dedicated dir 2017-04-25 11:58:15 +02:00
Sylvain Bellemare
920d4aa181 Add log analytics oms deployment scripts 2017-04-25 11:58:15 +02:00
Krish
cc66d5aaa5 Single node setup (#1418)
* Add more tools to the toolbox container

* Add mongodb monitoring agent
* Add a bigchaindb/mongodb-monitoring-agent container that includes the
monitoring agent.
* It makes use of an api key provided by MongoDB Cloud Manager. This is
included in the configuration/config-map.yaml file.

* Changes to mongodb StatefulSet configuration
Changes to bump up mongodb version to v3.4.3.
Add configuration settings for mongodb instance name in ConfigMap.
Split the mongodb service to a new configuration file.

* Modify bigchaindb deployment config
* Bugfix to remove keyring field for the first node.
* Split the mongodb service to a new configuration file.

* Add mongodb backup agent
* Add a bigchaindb/mongodb-backup-agent container that includes the
backup agent.
* It makes use of an api key provided by MongoDB Cloud Manager. This is
included in the configuration/config-map.yaml file.

* Changes to nginx deployment config
* Allow 'all' by default for now. This is included in the
configuration/config-map.yaml file.
* Dynamically resolve DNS addresses of our backend services; cache DNS
resolution for 20s.
* Configure DNS based on user provided resolver. This helps in user
deciding to provide 8.8.8.8 or a custom DNS for name resolution. For k8s
deployments, we use the hardcoded k8s DNS IP of 10.0.0.10.

* Changes to nginx-3scale deployment config
* Use the common ConfigMap in configuration/config-map.yaml file.

* Removing prefix `v` from the docker tag for mongodb-monitoring-agent and mongodb containers

* Bumping up version for nginx-3scale container

* Add small helper scripts for docker build and push of mongodb monitoring
and backup agents

* Documentation for setting up the first node with monitoring and backup
agents
2017-04-21 14:41:12 +02:00
Krish
28042a7e83 Add NGINX integration with 3scale on Kubernetes (#1392)
* Add NGINX integration with 3scale on Kubernetes
2017-04-13 17:34:25 +02:00