Fix sync wave ordering - dbinit wave 0, deployment wave 1
- Removed hook: Sync annotation from dbinit (was causing it to run before MySQL) - dbinit Job: wave 0 (same as MySQL, wait-for-db handles timing) - Deployment: wave 1 (starts after dbinit completes) - Fixes: db init job starting before mysql pod
This commit is contained in:
Vaibhav Pathak
commit
911f8d28a1
42
.gitignore
vendored
Normal file
42
.gitignore
vendored
Normal file
@ -0,0 +1,42 @@
|
||||
# Build outputs
|
||||
build/
|
||||
target/
|
||||
*.class
|
||||
*.jar
|
||||
*.war
|
||||
*.ear
|
||||
|
||||
# IDE
|
||||
.idea/
|
||||
*.iml
|
||||
.vscode/
|
||||
.settings/
|
||||
.project
|
||||
.classpath
|
||||
|
||||
# OS
|
||||
.DS_Store
|
||||
Thumbs.db
|
||||
|
||||
# Logs
|
||||
*.log
|
||||
|
||||
# Temporary files
|
||||
*.tmp
|
||||
*.bak
|
||||
*.swp
|
||||
*~
|
||||
|
||||
# Helm
|
||||
*.tgz
|
||||
charts/*.tgz
|
||||
|
||||
# Environment
|
||||
.env
|
||||
.env.local
|
||||
|
||||
# Secrets (never commit)
|
||||
secrets/
|
||||
*.pem
|
||||
*.key
|
||||
*-credentials.json
|
||||
288
README.md
Normal file
288
README.md
Normal file
@ -0,0 +1,288 @@
|
||||
# Hades V2 - Authentication & Authorization Service
|
||||
|
||||
Hades is a Java-based authentication and authorization service providing:
|
||||
- User authentication (username/password, OAuth, SAML)
|
||||
- Token-based authorization with ACL
|
||||
- User and entity management
|
||||
- Multi-tenant context management
|
||||
- Integration with external identity providers
|
||||
|
||||
## Quick Start
|
||||
|
||||
### Deploy with Backstage
|
||||
|
||||
1. **Create Test Environment:**
|
||||
- Navigate to Backstage → Environments (`/environment`)
|
||||
- Click "Create Environment"
|
||||
- Select `hades-service`
|
||||
- Choose resource size and TTL
|
||||
- Click "Create Environment"
|
||||
|
||||
2. **Access the Service:**
|
||||
```bash
|
||||
# Get the service URL
|
||||
kubectl get service -n <your-namespace>
|
||||
|
||||
# Health check
|
||||
curl http://<service-url>/schedulerService/jobTrigger?jsonQuery=%7B%22application%22%3A%22nagios%22%2C%22jobName%22%3A%22monitoring_scheduler_svc%22%7D
|
||||
```
|
||||
|
||||
### Deploy with Helm
|
||||
|
||||
```bash
|
||||
# Add Helm repository (if using a chart repository)
|
||||
helm repo add hades https://charts.company.com
|
||||
|
||||
# Install Hades
|
||||
helm install hades ./helm/hades \
|
||||
--namespace hades \
|
||||
--create-namespace \
|
||||
--set image.tag=1764243003606
|
||||
|
||||
# Upgrade
|
||||
helm upgrade hades ./helm/hades \
|
||||
--namespace hades \
|
||||
--set image.tag=latest
|
||||
|
||||
# Uninstall
|
||||
helm uninstall hades --namespace hades
|
||||
```
|
||||
|
||||
### Deploy with ArgoCD
|
||||
|
||||
```bash
|
||||
# Create ArgoCD Application
|
||||
kubectl apply -f - <<EOF
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: hades
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://cnoe.localtest.me:8443/gitea/giteaAdmin/hades-service
|
||||
path: helm/hades
|
||||
targetRevision: HEAD
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: hades
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
EOF
|
||||
```
|
||||
|
||||
## Configuration
|
||||
|
||||
### Helm Values
|
||||
|
||||
Key configuration options in `helm/hades/values.yaml`:
|
||||
|
||||
```yaml
|
||||
# Docker image
|
||||
image:
|
||||
repository: localhost:5001/europe-west1-docker.pkg.dev/os-docker-images/onlinesales/prod/services/java/hadesv2
|
||||
tag: "1764243003606"
|
||||
|
||||
# Resources
|
||||
resources:
|
||||
limits:
|
||||
cpu: 2000m
|
||||
memory: 2Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
# Database connection
|
||||
database:
|
||||
host: "mysql.default.svc.cluster.local"
|
||||
port: "3306"
|
||||
name: "hades"
|
||||
username: "hades_user"
|
||||
password: "changeme"
|
||||
|
||||
# Custom configuration files
|
||||
config:
|
||||
enabled: true
|
||||
files:
|
||||
hades.cfg: |
|
||||
# Your Hades configuration
|
||||
hibernate.cfg.xml: |
|
||||
<!-- Hibernate configuration -->
|
||||
```
|
||||
|
||||
### Environment Variables
|
||||
|
||||
The service supports the following environment variables:
|
||||
|
||||
- `JAVA_OPTS`: JVM options (default: `-Xms512m -Xmx2048m`)
|
||||
- `CATALINA_OPTS`: Tomcat options (default: `-Dconfig.path=/app/config`)
|
||||
- `DB_HOST`: Database host
|
||||
- `DB_PORT`: Database port
|
||||
- `DB_NAME`: Database name
|
||||
- `DB_USERNAME`: Database username
|
||||
- `DB_PASSWORD`: Database password
|
||||
|
||||
## API Endpoints
|
||||
|
||||
### Authentication
|
||||
|
||||
```bash
|
||||
# Authenticate user
|
||||
POST /authenticate
|
||||
Content-Type: application/json
|
||||
|
||||
{
|
||||
"username": "user@example.com",
|
||||
"password": "password123"
|
||||
}
|
||||
```
|
||||
|
||||
### Authorization
|
||||
|
||||
```bash
|
||||
# Authorize token
|
||||
POST /authorize
|
||||
Content-Type: application/json
|
||||
|
||||
{
|
||||
"token": "your-auth-token"
|
||||
}
|
||||
```
|
||||
|
||||
### Health Check
|
||||
|
||||
```bash
|
||||
# Health check
|
||||
GET /schedulerService/jobTrigger?jsonQuery=%7B%22application%22%3A%22nagios%22%2C%22jobName%22%3A%22monitoring_scheduler_svc%22%7D
|
||||
```
|
||||
|
||||
## Development
|
||||
|
||||
### Local Development
|
||||
|
||||
```bash
|
||||
# Build the application
|
||||
cd /path/to/hades/source
|
||||
ant setup
|
||||
|
||||
# Build Docker image
|
||||
docker build -t hades:local .
|
||||
|
||||
# Run locally
|
||||
docker run -p 8080:8080 hades:local
|
||||
```
|
||||
|
||||
### Testing
|
||||
|
||||
```bash
|
||||
# Run unit tests
|
||||
ant unittest
|
||||
|
||||
# Test deployment
|
||||
helm lint helm/hades
|
||||
|
||||
# Dry run
|
||||
helm install hades ./helm/hades --dry-run --debug
|
||||
```
|
||||
|
||||
## Monitoring
|
||||
|
||||
### Metrics
|
||||
|
||||
The service exposes metrics at:
|
||||
- Health: `/schedulerService/jobTrigger`
|
||||
- Application logs: Container stdout/stderr
|
||||
|
||||
### Grafana Dashboards
|
||||
|
||||
View metrics in Grafana:
|
||||
- [Hades Service Dashboard](https://grafana.company.com/d/hades)
|
||||
|
||||
### Alerts
|
||||
|
||||
Key alerts configured:
|
||||
- Service unavailable (5xx errors)
|
||||
- High response time (> 2s)
|
||||
- Database connection failures
|
||||
- Memory usage > 80%
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Pod not starting
|
||||
|
||||
```bash
|
||||
# Check pod status
|
||||
kubectl get pods -n <namespace>
|
||||
|
||||
# Check logs
|
||||
kubectl logs -f <pod-name> -n <namespace>
|
||||
|
||||
# Describe pod
|
||||
kubectl describe pod <pod-name> -n <namespace>
|
||||
```
|
||||
|
||||
### Database connection issues
|
||||
|
||||
```bash
|
||||
# Check database connectivity
|
||||
kubectl exec -it <pod-name> -n <namespace> -- curl mysql:3306
|
||||
|
||||
# Check database credentials
|
||||
kubectl get secret <secret-name> -n <namespace> -o yaml
|
||||
```
|
||||
|
||||
### Health check failing
|
||||
|
||||
```bash
|
||||
# Test health endpoint
|
||||
kubectl exec -it <pod-name> -n <namespace> -- curl localhost:8080/schedulerService/jobTrigger?jsonQuery=%7B%22application%22%3A%22nagios%22%2C%22jobName%22%3A%22monitoring_scheduler_svc%22%7D
|
||||
```
|
||||
|
||||
## Architecture
|
||||
|
||||
```
|
||||
┌─────────────────┐
|
||||
│ Load Balancer │
|
||||
└────────┬────────┘
|
||||
│
|
||||
▼
|
||||
┌─────────────────┐
|
||||
│ Ingress/Service│
|
||||
└────────┬────────┘
|
||||
│
|
||||
▼
|
||||
┌─────────────────┐
|
||||
│ Hades Pods │
|
||||
│ (Tomcat 9) │
|
||||
└────────┬────────┘
|
||||
│
|
||||
▼
|
||||
┌─────────────────┐
|
||||
│ MySQL Database │
|
||||
└─────────────────┘
|
||||
```
|
||||
|
||||
## Security
|
||||
|
||||
- Passwords hashed with BCrypt
|
||||
- Token-based authentication
|
||||
- ACL-based authorization
|
||||
- CAPTCHA support for brute-force protection
|
||||
- IP-based access control
|
||||
- SAML/OAuth integration
|
||||
|
||||
## Support
|
||||
|
||||
- **Documentation**: https://wiki.company.com/hades
|
||||
- **Issues**: https://github.com/yourorg/hades-service/issues
|
||||
- **Slack**: #hades-support
|
||||
- **Email**: platform-team@company.com
|
||||
|
||||
## License
|
||||
|
||||
Proprietary - © Your Company
|
||||
123
catalog-info.yaml
Normal file
123
catalog-info.yaml
Normal file
@ -0,0 +1,123 @@
|
||||
apiVersion: backstage.io/v1alpha1
|
||||
kind: Component
|
||||
metadata:
|
||||
name: hades-service
|
||||
title: Hades V2 Authentication Service
|
||||
description: Authentication and Authorization Service providing user management, OAuth/SAML integration, ACL-based access control, and multi-tenant context management
|
||||
annotations:
|
||||
backstage.io/techdocs-ref: dir:.
|
||||
github.com/project-slug: yourorg/hades-service
|
||||
# Argo Workflows annotation for environment provisioning
|
||||
argo-workflows.cnoe.io/label-selector: "service=hades-service"
|
||||
# ArgoCD annotations
|
||||
argocd/app-name: hades-service
|
||||
# Kubernetes annotations - Using kubernetes-id with commonLabels
|
||||
backstage.io/kubernetes-id: hades-service
|
||||
# Helm chart annotations for environment provisioning
|
||||
helm.cnoe.io/git-repo: https://gitea.cnoe.localtest.me:8443/giteaAdmin/hades-chart.git
|
||||
helm.cnoe.io/chart-path: hades
|
||||
helm.cnoe.io/values-file: values-dev.yaml
|
||||
helm.cnoe.io/available-values-files: '["values.yaml", "values-dev.yaml", "values-local.yaml"]'
|
||||
helm.cnoe.io/dependencies: '{"mysql": {"name": "MySQL Database", "required": false, "default": true}}'
|
||||
tags:
|
||||
- java
|
||||
- authentication
|
||||
- authorization
|
||||
- servlet
|
||||
- tomcat
|
||||
- oauth
|
||||
- saml
|
||||
- acl
|
||||
links:
|
||||
- url: https://wiki.company.com/hades
|
||||
title: Documentation
|
||||
icon: docs
|
||||
- url: https://grafana.company.com/d/hades
|
||||
title: Grafana Dashboard
|
||||
icon: dashboard
|
||||
- url: https://sentry.io/hades
|
||||
title: Error Tracking
|
||||
icon: alert
|
||||
spec:
|
||||
type: service
|
||||
lifecycle: experimental
|
||||
owner: user1
|
||||
dependsOn:
|
||||
- resource:default/hades-database
|
||||
providesApis:
|
||||
- hades-api
|
||||
consumesApis: []
|
||||
|
||||
---
|
||||
apiVersion: backstage.io/v1alpha1
|
||||
kind: API
|
||||
metadata:
|
||||
name: hades-api
|
||||
title: Hades Authentication API
|
||||
description: REST API for authentication and authorization operations
|
||||
tags:
|
||||
- rest
|
||||
- authentication
|
||||
links:
|
||||
- url: https://api-docs.company.com/hades
|
||||
title: API Documentation
|
||||
spec:
|
||||
type: openapi
|
||||
lifecycle: experimental
|
||||
owner: user1
|
||||
definition: |
|
||||
openapi: 3.0.0
|
||||
info:
|
||||
title: Hades V2 API
|
||||
version: 3.0.0
|
||||
description: Authentication and Authorization Service
|
||||
paths:
|
||||
/authenticate:
|
||||
post:
|
||||
summary: Authenticate user
|
||||
description: Authenticate a user with username/password
|
||||
operationId: authenticate
|
||||
tags:
|
||||
- Authentication
|
||||
/authorize:
|
||||
post:
|
||||
summary: Authorize token
|
||||
description: Validate and authorize an authentication token
|
||||
operationId: authorize
|
||||
tags:
|
||||
- Authorization
|
||||
/users:
|
||||
get:
|
||||
summary: List users
|
||||
description: Get list of users
|
||||
operationId: listUsers
|
||||
tags:
|
||||
- Users
|
||||
post:
|
||||
summary: Create user
|
||||
description: Create a new user
|
||||
operationId: createUser
|
||||
tags:
|
||||
- Users
|
||||
/schedulerService/jobTrigger:
|
||||
get:
|
||||
summary: Health check
|
||||
description: Service health check endpoint
|
||||
operationId: healthCheck
|
||||
tags:
|
||||
- Monitoring
|
||||
|
||||
---
|
||||
apiVersion: backstage.io/v1alpha1
|
||||
kind: Resource
|
||||
metadata:
|
||||
name: hades-database
|
||||
title: Hades Database
|
||||
description: MySQL database for Hades service
|
||||
tags:
|
||||
- database
|
||||
- mysql
|
||||
spec:
|
||||
type: database
|
||||
owner: user1
|
||||
dependsOn: []
|
||||
1
helm
Submodule
1
helm
Submodule
@ -0,0 +1 @@
|
||||
Subproject commit f52bd12a9af6b44277d1277b505691511e92eca6
|
||||
4
mkdocs.yml
Normal file
4
mkdocs.yml
Normal file
@ -0,0 +1,4 @@
|
||||
site_name: Hades V2 Authentication Service
|
||||
docs_dir: docs
|
||||
plugins:
|
||||
- techdocs-core
|
||||
Loading…
x
Reference in New Issue
Block a user