Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DM-49491: Update Ook with Links API and Cloud SQL #4410

Draft
wants to merge 7 commits into
base: main
Choose a base branch
from

Conversation

jonathansick
Copy link
Member

  • The main ook deployment uses the cloud sql proxy sidecar container as an init container
  • The ook jobs (audit and ingest-updated) instead use the cloud sql service (because a sidecar container would prevent these jobs from finishing on job exit)
  • Dropped the templating of the Kubernetes service account name and instead hard-coded it to "ook" to avoid confusion.

@jonathansick jonathansick force-pushed the tickets/DM-49491 branch 4 times, most recently from a3d84f7 to 9f80e2f Compare March 26, 2025 19:23
- The main ook deployment along with the jobs (audit and ingest-updated)
  uses the cloud sql proxy sidecar container as an init container.
- Dropped the templating of the Kubernetes service account name and
  instead hard-coded it to "ook" to avoid confusion.
Simplify the ook chart by hardcoding the name rather than using the
fullname template variable. This is something we've been doing in our
charts for simplicity given the Phalanx context.
This DRYs out the env var definitions that are mostly needed for mapping
secrets and mounted directory paths to environment variables. These are
the same for the main deployment and any cron jobs.
- The ingress for /ook/docs should redirect the user to login
- The ingress for /ook/ingest requires an admin scope
- Other endpoints can be anonymous. Perhaps we'll want a "project
  member" scope?
This job can be toggled on to run an Alembic schema migration.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant