Add API preview endpoint

Author: janheinrichmerker

helm/templates/api-ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ $.Release.Name }}-api
+  annotations:
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: 100m
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+spec:
+  ingressClassName: {{ $.Values.api.ingressClassName }}
+  rules:
+    - host: {{ $.Values.api.host }}
+      http:
+        paths:
+          - path: /api(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: {{ $.Release.Name }}-api
+                port:
+                  name: http
+  tls:
+    - secretName: cert-webis-de
+      hosts:
+        - {{ $.Values.api.host }}

helm/templates/api-service.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ $.Release.Name }}-api
+  labels:
+    app: {{ $.Release.Name }}-api
+spec:
+  selector:
+    app: {{ $.Release.Name }}-api
+  ports:
+  - name: http
+    port: 4000
+    targetPort: http
+    protocol: TCP

helm/templates/api.yaml

@@ -0,0 +1,86 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ $.Release.Name }}-api
+  labels:
+    app: {{ $.Release.Name }}-api
+  annotations:
+    checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
+spec:
+  replicas: {{ .Values.api.replicas }}
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: {{ $.Release.Name }}-api
+  template:
+    metadata:
+      labels:
+        app: {{ $.Release.Name }}-api
+    spec:
+      restartPolicy: Always
+      containers:
+        - name: {{ $.Release.Name }}-api
+          image: "{{ .Values.image }}:{{ .Chart.AppVersion }}"
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          command:
+            - /venv/bin/uvicorn
+            - archive_query_log.api:app
+            - --host
+            - 0.0.0.0
+            - --port
+            - "5000"
+            - --root-path
+            - /api/
+          ports:
+            - name: http
+              containerPort: 5000
+          env:
+            - name: ELASTICSEARCH_HOST
+              value: {{ $.Values.elasticsearch.host | quote }}
+            - name: ELASTICSEARCH_PORT
+              value: {{ $.Values.elasticsearch.port | quote }}
+            - name: ELASTICSEARCH_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Release.Name }}-secret
+                  key: elasticsearchApiKey
+            - name: S3_ENDPOINT_URL
+              value: {{ $.Values.s3.endpointUrl | quote }}
+            - name: S3_BUCKET_NAME
+              value: {{ $.Values.s3.bucketName | quote }}
+            - name: S3_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Release.Name }}-secret
+                  key: s3AccessKey
+            - name: S3_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Release.Name }}-secret
+                  key: s3SecretKey
+            - name: WARC_CACHE_PATH_SERPS
+              value: {{ $.Values.warcCache.pathSerps | quote }}
+            - name: ENVIRONMENT
+              value: "production"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3

helm/values.yaml

@@ -87,12 +87,15 @@ browser:
     host: aql.webis.de
     secondaryHost: aql.web.webis.de
     replicas: 1
-    forceSslRedirect: true
     image: ghcr.io/webis-de/archive-query-log/browser
   backend:
     ingressClassName: nginx-external
     host: aql.webis.de
     secondaryHost: aql.web.webis.de
     replicas: 1
-    forceSslRedirect: true
     image: ghcr.io/webis-de/archive-query-log
+
+api:
+  ingressClassName: nginx-external
+  host: aql-api-preview.web.webis.de
+  replicas: 1