ci: use gigaglobal cert for prod

.env.example

@@ -3,7 +3,7 @@ DEPLOY_ENV=local
 DELTA_BEARER_TOKEN="$ openssl rand -base64 32"
 DELTA_SHARING_HOST="delta:8890"
 SECRET_KEY="$ tr -dc A-Za-z0-9 < /dev/urandom | head -c 64"
-APP_DOMAIN="localhost:5000"
+INGRESS_HOST="localhost:5000"
 SENTRY_DSN=
 
 STORAGE_ACCESS_KEY="get from Azure portal"

azure/azure-pipelines-dev.yaml

@@ -13,6 +13,8 @@ pool:
   vmImage: ubuntu-latest
 
 variables:
+  - name: environment
+    value: dev
   - template: templates/variables.yaml
 
 stages:

azure/azure-pipelines-prd.yaml

@@ -13,6 +13,8 @@ pool:
   vmImage: ubuntu-latest
 
 variables:
+  - name: environment
+    value: prd
   - template: templates/variables.yaml
 
 stages:

azure/azure-pipelines-stg.yaml

@@ -13,6 +13,8 @@ pool:
   vmImage: ubuntu-latest
 
 variables:
+  - name: environment
+    value: stg
   - template: templates/variables.yaml
 
 stages:

azure/templates/create-config.yaml

@@ -43,7 +43,7 @@ jobs:
                     ADMIN_API_KEY: "$(adminApiKey)"
                     ADMIN_API_SECRET: "$(adminApiSecret)"
                     SECRET_KEY: "$(secretKey)"
-                    APP_DOMAIN: "$(ingressHost)"
+                    INGRESS_HOST: "$(ingressHost)"
                     SENTRY_DSN: "$(sentryDsn)"
                     COMMIT_SHA: "$(Build.SourceVersion)"
                     DEPLOY_ENV: "$(deployEnv)"

azure/templates/helm-deploy.yaml

@@ -22,6 +22,7 @@ jobs:
 
             - task: HelmDeploy@0
               displayName: Helm deploy Data Sharing proxy
+              condition: or(eq(variables.environment, 'dev'), eq(variables.environment, 'stg'))
               inputs:
                 command: upgrade
                 chartType: FilePath
@@ -34,4 +35,22 @@ jobs:
                   --set ingress.enabled=true
                   --set ingress.hosts[0].host="$(ingressHost)"
                   --set ingress.hosts[0].paths[0].path="/"
-                  --set ingress.hosts[0].paths[0].pathType=Exact
+                  --set ingress.hosts[0].paths[0].pathType=Prefix
+
+            - task: HelmDeploy@0
+              displayName: Helm deploy production-config Data Sharing proxy
+              condition: eq(variables.environment, 'prd')
+              inputs:
+                command: upgrade
+                chartType: FilePath
+                chartPath: infra/helm/data-sharing-proxy
+                releaseName: data-sharing-proxy
+                namespace: $(kubernetesNamespace)
+                arguments: >
+                  --set image.repository="$(containerRegistryName).azurecr.io/giga-data-sharing-proxy"
+                  --set image.tag="$(Build.SourceVersion)"
+                  --set ingress.enabled=true
+                  --set ingress.hosts[0].host="$(ingressHost)"
+                  --set ingress.hosts[0].paths[0].path="/"
+                  --set ingress.hosts[0].paths[0].pathType=Prefix
+                  --set ingress.annotations."appgw\.ingress\.kubernetes\.io/appgw-ssl-certificate"=kv-cert-gigaglobal

data_sharing/schemas/delta_sharing.py

@@ -50,7 +50,7 @@ class ProfileFile(BaseModel):
         1, description=ProfileFileDescriptions.share_credentials_version
     )
     endpoint: AnyHttpUrl = Field(
-        f"https://{settings.APP_DOMAIN}", description=ProfileFileDescriptions.endpoint
+        f"https://{settings.INGRESS_HOST}", description=ProfileFileDescriptions.endpoint
     )
     bearerToken: str = Field(description=ProfileFileDescriptions.bearer_token)
     expirationTime: datetime | None = Field(

data_sharing/settings.py

@@ -26,7 +26,7 @@ class Config:
     POSTGRESQL_PASSWORD: str
     POSTGRESQL_DATABASE: str
     DB_HOST: str
-    APP_DOMAIN: str
+    INGRESS_HOST: str
     ADMIN_API_KEY: UUID4
     SENTRY_DSN: str = ""
     COMMIT_SHA: str = ""