Self host part 2 #702
Open
Self host part 2 #702
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
* add status page for nginx * fix delta
* fix cron by using bash and adding datadog vars * split out prod crons, add dd to reporter * fix prod crons * update PR page to include message
Remove the bad lines so the deploy works.
RE-implemented starlord + vault
* build api once, update stack, make gamma files * add delta changes * fix swarm manager
anandkumarpatel
requested changes
Jul 5, 2017
| @@ -27,6 +27,8 @@ big_poppa_base_container_envs: | |||
| value: "{{ big_poppa_intercom_id | default('undefined') }}" | |||
| - name: NODE_ENV | |||
| value: "{{ node_env }}" | |||
| - name: ON_PREM | |||
| value: "{{ is_on_prem | lower }}" | |||
| container_run_args: npm run start-worker | ||
| advance_arg: true | ||
|
|
||
| container_run_args: npm run start-worker || sleep 999 |
| @@ -12,5 +12,7 @@ dockerfile_pre_install_commands: [ | |||
| "echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > .npmrc" | |||
| ] | |||
|
|
|||
| container_run_args: npm run start-worker | |||
| advance_arg: true | |||
| @@ -6,3 +6,6 @@ container_image: consul | |||
| container_tag: v0.6.4 | |||
|
|
|||
| container_run_args: consul agent -server -client=0.0.0.0 -bootstrap-expect=1 -data-dir=/tmp/db -ui | |||
|
|
|||
| service_type: "LoadBalancer" | |||
| # service_load_balancer_ranges: ["{{ docks_ip_range }}"] | |||
| @@ -6,6 +6,7 @@ container_image: runnable/swarm | |||
| container_tag: "v1.2.3-0" | |||
|
|
|||
| memory_hard_limit: 10G | |||
| memory_request: 2G | |||
There was a problem hiding this comment.
It wouldn't run any other way. We can probably lower it more.
|
|
||
| # Add Certs (Used for genereting Docker client keys + certs) | ||
| mkdir -p /etc/ssl/docker/ | ||
| echo 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 | base64 --decode > /etc/ssl/docker/ca.pem |
There was a problem hiding this comment.
umm where did you get these certs from??
There was a problem hiding this comment.
This comes from secrets/certs. I like the idea of leaving it here so that it wouldn't have to be generated, but that would mean our cert would be in base64 in our repo, which is not good. Will remove + ignore it.
add JMESPath requirement
* use multiport navi * update ports
* master: SAN-6473 Code review SAN-6473 use multiport navi (#704) fix prom vol Add DOCKER_IMAGE_BUILDER_HOST_CONFIG_PATH env var. Updated to use API_port http -> tcp http -> tcp Added readiness probe add .. and main.yml to commands fix numbering add JMESPath requirement
Add mongo-seed-db k8 job.
anandkumarpatel
force-pushed
the
master
branch
from
8d5ab8f
to
2527010
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
We should treat our k8 files as compiled files, since we don't actually (http://blog.andrewray.me/dealing-with-compiled-files-in-git/). We should probably wait some time until we actually have more confidence in our compilation.
Dependencies
Tests
Deployment (post-merge)