Merge pull request #61 from jlewi/setup_prod

Setup a prod environment for the issue label bot.
machine-learning-apps · Jan 24, 2020 · 39cd01b · 39cd01b
2 parents 15a9b82 + 7a4ddb0
commit 39cd01b
Show file tree

Hide file tree

Showing 17 changed files with 77 additions and 328 deletions.
diff --git a/deployment/base/deployment.yaml b/deployment/base/deployment.yaml
@@ -35,7 +35,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: ml-app-inference-secret
-              key: WEBHOOK_SECRET
+              key: WEBHOOK_SECRET              
         # The values for the Kubeflow kf-label-bot-dev application
         # See kubeflow/code-intelligence#84. This is suitable
         # for development but shouldn't be used in production       

diff --git a/deployment/certificate.mlbot-net.yaml b/deployment/certificate.mlbot-net.yaml
diff --git a/deployment/certificate.yaml b/deployment/certificate.yaml
diff --git a/deployment/deployments-test.yaml b/deployment/deployments-test.yaml
diff --git a/deployment/deployments.yaml b/deployment/deployments.yaml
diff --git a/deployment/fake-secret.yaml b/deployment/fake-secret.yaml
diff --git a/deployment/ingress-test.yaml b/deployment/ingress-test.yaml
diff --git a/deployment/ingress.mlbot-net.yaml b/deployment/ingress.mlbot-net.yaml
diff --git a/deployment/ingress.yaml b/deployment/ingress.yaml
diff --git a/deployment/certificate.mlbot-net-gke.yaml → deployment/overlays/prod/certificate.yaml b/deployment/certificate.mlbot-net-gke.yaml → deployment/overlays/prod/certificate.yaml
@@ -1,8 +1,7 @@
 apiVersion: networking.gke.io/v1beta1
 kind: ManagedCertificate
 metadata:
-  name: mlbot-net-2
-  namespace: mlapp
+  name: certificate
 spec:
   domains:
-    - mlbot.net
+    - label-bot-prod.mlbot.net
diff --git a/deployment/overlays/prod/deployment.yaml b/deployment/overlays/prod/deployment.yaml
@@ -4,6 +4,7 @@ metadata:
   name: ml-github-app
 spec:
   replicas: 9
+  template:
     spec:
       containers:
       - name: frontend
@@ -24,9 +25,10 @@ spec:
           value: "27079"
         # Pato the GitHub app PEM key
         - name: GITHUB_APP_PEM_KEY
-          value: /var/secrets/github/kf-label-bot-dev.private-key.pem
+          value: /var/secrets/github/kf-label-bot-prod.private-key.pem
         # The GCP project and pubsub topic to publish to should
-        # correspond to the production backend
+        # correspond to the production backend. The project is unfortunately
+        # named issue-label-bot-dev.
         - name: GCP_PROJECT_ID
           value: issue-label-bot-dev
         - name: GCP_PUBSUB_TOPIC_NAME

diff --git a/deployment/overlays/prod/ingress.yaml b/deployment/overlays/prod/ingress.yaml
@@ -0,0 +1,7 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: frontend  
+  annotations:
+    kubernetes.io/ingress.global-static-ip-name: label-bot-prod
+    networking.gke.io/managed-certificates: certificate
diff --git a/deployment/overlays/prod/kustomization.yaml b/deployment/overlays/prod/kustomization.yaml
@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+commonLabels:
+  environment: prod
+namespace: label-bot-prod
+images:
+- name: gcr.io/github-probots/label-bot-frontend
+  newName: gcr.io/github-probots/label-bot-frontend
+  newTag: 2cb624e
+resources:
+- certificate.yaml
+- ../../base
+patchesStrategicMerge:
+- deployment.yaml
+- ingress.yaml
diff --git a/deployment/service-test.yaml b/deployment/service-test.yaml
diff --git a/deployment/service.yaml b/deployment/service.yaml