ci: migrate to application suite

Author: idoshamun

.circleci/config.yml

@@ -51,7 +51,7 @@ jobs:
           tag: $CIRCLE_SHA1
   pulumi_preview:
     docker:
-      - image: cimg/node:14.19
+      - image: cimg/node:16.14
     steps:
       - checkout
       - pulumi/login
@@ -64,8 +64,9 @@ jobs:
           command: pulumi preview --suppress-outputs --stack dailydotdev/prod -c tag=$CIRCLE_SHA1
           working_directory: infra
   pulumi_up:
+    circleci_ip_ranges: true
     docker:
-      - image: cimg/node:14.19
+      - image: cimg/node:16.14
     environment:
       USE_GKE_GCLOUD_AUTH_PLUGIN: 'True'
     steps:

infra/.gitignore renamed to .infra/.gitignore

@@ -0,0 +1,56 @@
+import {Input} from '@pulumi/pulumi';
+import {
+  config,
+  createServiceAccountAndGrantRoles, deployApplicationSuite,
+  getImageTag,
+  nodeOptions,
+} from '@dailydotdev/pulumi-common';
+
+const imageTag = getImageTag();
+const name = 'scraper';
+const image = `gcr.io/daily-ops/daily-${name}:${imageTag}`;
+
+const {serviceAccount} = createServiceAccountAndGrantRoles(
+  `${name}-sa`,
+  name,
+  `daily-${name}`,
+  [
+    {name: 'profiler', role: 'roles/cloudprofiler.agent'},
+    {name: 'trace', role: 'roles/cloudtrace.agent'},
+    {name: 'secret', role: 'roles/secretmanager.secretAccessor'},
+  ],
+);
+
+const memory = 2048
+const limits: Input<{
+  [key: string]: Input<string>;
+}> = {
+  cpu: '1',
+  memory: `${memory}Mi`,
+};
+
+const namespace = 'daily';
+
+const envVars = config.requireObject<Record<string, string>>('env');
+
+deployApplicationSuite({
+  name,
+  namespace,
+  image,
+  imageTag,
+  serviceAccount,
+  secrets: envVars,
+  apps: [{
+    port: 3000,
+    env: [nodeOptions(memory)],
+    minReplicas: 3,
+    maxReplicas: 10,
+    limits,
+    readinessProbe: {
+      httpGet: {path: '/ready', port: 'http'},
+      initialDelaySeconds: 10,
+    },
+    metric: {type: 'memory_cpu', cpu: 60},
+    createService: true,
+  }],
+})