Add SSL

Author: Mikhail Khomenko

.github/workflows/workflow.yaml

@@ -114,6 +114,8 @@ jobs:
       run: |
         gcloud container clusters get-credentials ${GKE_CLUSTER} --zone ${GKE_ZONE} --project ${PROJECT_ID}
         kubectl apply -f namespace.yaml
+        kubectl apply -f managed-certificate.yaml
         kubectl apply -f service.yaml
+        kubectl apply -f ingress.yaml
         kubectl apply -f statefulset.yaml
         kubectl -n ${K8S_NAMESPACE} rollout status statefulset/${STATEFULSET_NAME}

k8s/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: gce
+    networking.gke.io/managed-certificates: dc-analytics-certificate
+    kubernetes.io/ingress.global-static-ip-name: dc-analytics
+  name: dc-analytics
+  namespace: iris
+spec:
+  rules:
+  - host: dc-analytics.myardyas.online
+    http:
+      paths:
+      - backend:
+          serviceName: dc-analytics
+          servicePort: 52773
+        path: /*

k8s/managed-certificate.yaml

@@ -0,0 +1,8 @@
+apiVersion: networking.gke.io/v1beta1
+kind: ManagedCertificate
+metadata:
+  name: dc-analytics-certificate
+  namespace: iris
+spec:
+  domains:
+  - dc-analytics.myardyas.online

k8s/service.yaml

@@ -15,4 +15,4 @@ spec:
     protocol: TCP
     port: 51773
     targetPort: 51773
-  type: LoadBalancer
+  type: NodePort

k8s/statefulset.tpl

@@ -50,6 +50,17 @@ spec:
         ports:
         - containerPort: 52773
           name: web
+        readinessProbe:
+          httpGet:
+            path: /csp/sys/UtilHome.csp
+            port: 52773
+          initialDelaySeconds: 10
+          periodSeconds: 10
+        livenessProbe:
+          httpGet:
+            path: /csp/sys/UtilHome.csp
+            port: 52773
+          periodSeconds: 10
         volumeMounts:
         - mountPath: /opt/dcanalytics/DCANALYTICS-DATA
           name: dc-volume