Merge pull request #41 from AET-DevOps25/feature/add-db-deployment

Add mongodb deployment

Author: esadakcam

.github/workflows/ci-cd.yml

@@ -237,4 +237,4 @@ jobs:
           chmod 600 ~/.kube/config
 
       - name: Deploy with Helm
-        run: helm -n team-continuous-disappointment upgrade recip-ai ./recipai-chart --set secrets.gitlabClientSecret="${{ secrets.PROD_CLIENT_SECRET }}"
+        run: helm -n team-continuous-disappointment upgrade recip-ai ./recipai-chart --set secrets.gitlabClientSecret="${{ secrets.PROD_CLIENT_SECRET }}" --set secrets.mongodbAdminPassword="${{ secrets.MONGODB_ADMIN_PASSWORD }}"

recipai-chart/templates/mongodb-deployment.yml

@@ -0,0 +1,41 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mongodb
+spec:
+  selector:
+    matchLabels:
+      app: mongodb
+  template:
+    metadata:
+      labels:
+        app: mongodb
+    spec:
+      containers:
+        - name: mongodb
+          image: mongo:6.0
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 27017
+          volumeMounts:
+            - name: mongo-storage
+              mountPath: /data/db
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          env:
+            - name: MONGO_INITDB_ROOT_USERNAME
+              value: {{ .Values.db.adminUsername }}
+            - name: MONGO_INITDB_ROOT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: admin-password 
+      volumes:
+        - name: mongo-storage
+          persistentVolumeClaim:
+            claimName: mongodb-pvc

recipai-chart/templates/mongodb-pvc.yml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mongodb-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: {{ .Values.db.storage }} 

recipai-chart/templates/mongodb-secret.yml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mongodb-secret
+  annotations:
+    checksum/redeploy: "{{ randAlphaNum 8 }}"
+type: Opaque
+stringData:
+  admin-password: {{ .Values.secrets.mongodbAdminPassword }}

recipai-chart/templates/mongodb-service.yml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Values.services.mongodb }} 
+spec:
+  selector:
+    app: mongodb
+  ports:
+    - protocol: TCP
+      port: 27017
+      targetPort: 27017

recipai-chart/templates/server-deployment.yml

@@ -22,6 +22,13 @@ spec:
           - containerPort:  {{ .Values.ports.server }}
             name: server-api
         env:
+          - name: MONGODB_USERNAME
+            value: {{ .Values.db.adminUsername }}
+          - name: MONGODB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: server-secret
+                key: mongodb-password
           - name: GITLAB_CLIENT_SECRET
             valueFrom:
               secretKeyRef:

recipai-chart/templates/server-sercret.yml

@@ -6,4 +6,5 @@ metadata:
     checksum/redeploy: "{{ randAlphaNum 8 }}"
 type: Opaque
 stringData:
-  gitlab-client-secret: {{ .Values.secrets.gitlabClientSecret }}
+  gitlab-client-secret: {{ .Values.secrets.gitlabClientSecret }}
+  mongodb-password: {{ .Values.secrets.mongodbAdminPassword }}

recipai-chart/values.yaml

@@ -29,6 +29,13 @@ services:
   client: client-service
   server: server-service
   genai: genai-service
+  mongodb: mongodb-service
 
+db:
+  adminUsername: admin
+  storage: 4Gi
+
+# will be overridden
 secrets:
-  gitlabClientSecret: "set in CI pipeline"  # will be overridden
+  gitlabClientSecret: "set in CI pipeline"
+  mongodbAdminPassword: "set in CI pipeline"