Merge pull request #50 from Financial-Times/eks-poc

Updates for EKS

README.md

@@ -228,3 +228,7 @@ At the moment the `/__health` and `/__gtg` check the availability of the UPP Pub
 * Logs are written to the standard output.
 * 
 * NOTE: `/__build-info` and `/__gtg` endpoints are not logged as they are called every second from varnish/vulcand and this information is not needed in logs/splunk.
+
+
+### Change/Rotate sealed secrets
+Please reffer to documentation in [pac-global-sealed-secrets-eks](https://github.com/Financial-Times/pac-global-sealed-secrets-eks/blob/master/README.md). Here are explained details how to create new and change existing sealed secrets

helm/draft-annotations-api/app-configs/draft-annotations-api_eks_stagingpac_eu.yaml

@@ -0,0 +1,10 @@
+# Values used for the deployed application.
+replicaCount: 2
+
+eksCluster: true
+
+service:
+  name: draft-annotations-api
+
+encryptedSecrets:
+  upp-api-key: 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

helm/draft-annotations-api/templates/deployment.yaml

@@ -18,6 +18,7 @@ spec:
         app: {{ .Values.service.name }}
         visualize: "true"
     spec:
+{{- if not .Values.eksCluster }}
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
@@ -28,6 +29,7 @@ spec:
                 values:
                 - {{ .Values.service.name }}
             topologyKey: "kubernetes.io/hostname"
+{{- end }}
       containers:
       - name: {{ .Values.service.name }}
         image: "{{ .Values.image.repository }}:{{ .Chart.Version }}"

helm/draft-annotations-api/templates/draft-annotations-api-sealed-secrets.yaml

@@ -0,0 +1,11 @@
+{{- if .Values.eksCluster }}
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: draft-annotations-api
+  namespace: default
+  type: Opaque
+spec:
+  encryptedData:
+{{ if .Values.encryptedSecrets }}{{ toYaml .Values.encryptedSecrets | indent 4 }}{{ end }}
+{{- end }}

helm/draft-annotations-api/values.yaml

@@ -1,15 +1,17 @@
-# Default values for draft-annotations-api.
-# This is a YAML-formatted file.
-# Declare variables to be passed into your templates.
-service:
-  name: "" # The name of the service, should be defined in the specific app-configs folder
-  hasHealthcheck: "true"
-replicaCount: 2
-image:
-  repository: coco/draft-annotations-api
-  pullPolicy: Always
-resources:
-  requests:
-    memory: 10Mi
-  limits:
-    memory: 128Mi
+# Default values for draft-annotations-api.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+service:
+  name: "" # The name of the service, should be defined in the specific app-configs folder
+  hasHealthcheck: "true"
+replicaCount: 2
+image:
+  repository: coco/draft-annotations-api
+  pullPolicy: Always
+resources:
+  requests:
+    memory: 10Mi
+  limits:
+    memory: 128Mi
+
+eksCluster: false