feat(SYS-6223): add serviceAccount creation

.circleci/config.yml

@@ -0,0 +1,112 @@
+version: 2.1
+orbs:
+  aws-cli: circleci/aws-cli@5.4.1
+  aws-ecr: circleci/aws-ecr@7.3.0
+  aws-eks: circleci/aws-eks@3.0.1
+  helm: circleci/helm@3.2.0
+defaults: &defaults
+  working_directory: ~/fontless
+  resource_class: medium
+  environment:
+    CHART_NAME: single-container
+parameters:
+  dyn:
+    type: boolean
+    default: false
+jobs:
+  deploy:
+    <<: *defaults
+    docker:
+      - image: cimg/python:3.13.8
+    steps:
+      - checkout
+      - helm/install_helm_client
+      - when:
+          condition: << pipeline.parameters.dyn >>
+          steps:
+            - run:
+                name: Setup environment variable for URL
+                command: |
+                  echo 'export NORMALIZED_BRANCH=`echo ${CIRCLE_BRANCH} | tr -cd '[:alnum:]' | tr '[:upper:]' '[:lower:]' | cut -c 1-37`' >> "$BASH_ENV" && \
+                  echo 'export URL=`grep "^  host:" helm/values-${ENV}.yaml | tr -s "[:blank:]\"" ":" | cut -d: -f3`' >> "$BASH_ENV" && \
+                  echo 'export URL=`echo ${NORMALIZED_BRANCH}-${URL}`' >> "$BASH_ENV"
+      - unless:
+          condition: << pipeline.parameters.dyn >>
+          steps:
+          - run:
+              name: Setup environment variable for URL
+              command: |
+                echo 'export URL=`grep "^  host:" helm/values-${ENV}.yaml | tr -s "[:blank:]\"" ":" | cut -d: -f3`' >> "$BASH_ENV"
+      - aws-cli/setup:
+          aws_access_key_id: AWS_ACCESS_KEY_ID
+          aws_secret_access_key: AWS_SECRET_ACCESS_KEY
+      - aws-eks/update_kubeconfig_with_authenticator:
+          aws_region: ${AWS_REGION}
+          cluster_name: ${CLUSTER_NAME}
+      - aws-ecr/build-and-push-image:
+          account-url: AWS_ECR_ACCOUNT
+          dockerfile: ./docker/Dockerfile
+          region: AWS_REGION
+          repo: ${ECR_REPOSITORY}
+          remote-docker-layer-caching: true
+          remote-docker-version: docker24
+          setup-remote-docker: true
+          skip-when-tags-exist: true
+          tag: '${CIRCLE_SHA1},${CIRCLE_TAG}'
+          extra-build-args: '--build-arg CIRCLE_BRANCH=${CIRCLE_BRANCH} --build-arg CIRCLE_TAG=${CIRCLE_TAG}'
+      - run:
+          name: Render Helm templates
+          command: |
+            helm template ${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH} \
+              oci://${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${COMPANY_PREFIX}-${HELM_CHARTS_REPOSITORY}/${CHART_NAME} \
+              --debug \
+              --disable-openapi-validation \
+              --namespace ${CIRCLE_PROJECT_REPONAME} \
+              --set applicationName="${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH}" \
+              --set applicationVersion=`if [ -z ${CIRCLE_TAG} ]; then echo ${CIRCLE_SHA1}; else echo ${CIRCLE_TAG}; fi` \
+              --set deployment.container.image="${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPOSITORY}:`if [ -z ${CIRCLE_TAG} ]; then echo ${CIRCLE_SHA1}; else echo ${CIRCLE_TAG}; fi`" \
+              --values helm/values-${ENV}.yaml \
+              --version ${GLOBAL_SINGLE_CONTAINER_VERSION}
+      - run:
+          name: Install Helm chart
+          command: |
+            helm upgrade -i ${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH} \
+              oci://${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${COMPANY_PREFIX}-${HELM_CHARTS_REPOSITORY}/${CHART_NAME} \
+              --namespace ${CIRCLE_PROJECT_REPONAME} \
+              --set applicationName="${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH}" \
+              --set applicationVersion=`if [ -z ${CIRCLE_TAG} ]; then echo ${CIRCLE_SHA1}; else echo ${CIRCLE_TAG}; fi` \
+              --set deployment.container.image="${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPOSITORY}:`if [ -z ${CIRCLE_TAG} ]; then echo ${CIRCLE_SHA1}; else echo ${CIRCLE_TAG}; fi`" \
+              --values helm/values-${ENV}.yaml \
+              --version ${GLOBAL_SINGLE_CONTAINER_VERSION} \
+              --wait
+      - run:
+          name: Test Helm release
+          command: |
+            helm test ${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH} \
+              --namespace ${CIRCLE_PROJECT_REPONAME} && \
+            echo "${CIRCLE_PROJECT_REPONAME}${NORMALIZED_BRANCH} Helm release created successfully." && \
+            echo "Your ${ENV} environment is ready to use at $URL."
+
+workflows:
+  staging:
+    jobs:
+      - deploy:
+          context:
+            - global
+            - staging
+          filters:
+            tags:
+              only: /^\d+\.\d+\.\d+-stg$/
+            branches:
+              ignore: /.*/
+  production:
+    jobs:
+      - deploy:
+          context:
+            - global
+            - production
+          filters:
+            tags:
+              only: /^\d+\.\d+\.\d+$/
+            branches:
+              ignore: /.*/

.github/pull_request_template.md

@@ -0,0 +1,13 @@
+### Pull Request Context 🍏 
+Enter the PR context. Why is this new development necessary? What new feature, chore or bug are we addressing here?
+
+--- 
+### Solution provided 🍎 
+Briefly explain the approach taken through this Pull Request to address the requirements or expectations above.
+
+--- 
+
+🔗 **Helpful links** (If any - remove block otherwise):
+
+--- 
+:tickets: closes JIRA_PROJECT-XXXX

.github/workflows/test-hooks.yml

@@ -5,9 +5,9 @@ name: Test Hooks
 
 on:
   push:
-    branches: [ master ]
+    branches: [ main ]
   pull_request:
-    branches: [ master ]
+    branches: [ main ]
 
 jobs:
   build:

.gitignore

@@ -106,4 +106,5 @@ dist
 fontless.config.json
 service/public/
 .DS_Store
-.env.local
+.env.local
+*.zip

CODEOWNERS

@@ -0,0 +1,14 @@
+# These owners will be the default owners for everything in
+# the target repo. The following users will be requested for
+# review when someone opens a pull request.
+
+* @the-hotels-network/frontend @the-hotels-network/agent 
+
+# The /.circleci folder contains all Circle CI workflow pipelines. When updating
+# its content we will want the Infra team to sign off on the changes. Having one
+# approval from their team is enough to move on.
+.circleci @the-hotels-network/infra @the-hotels-network/frontend @the-hotels-network/agent
+
+# *********************************************************************
+# (c) The Hotels Network
+# *********************************************************************

docker/Dockerfile

@@ -0,0 +1,24 @@
+FROM node:16-alpine3.16 as builder
+
+ARG CIRCLE_BRANCH
+ARG CIRCLE_TAG
+
+ENV CIRCLE_BRANCH=$CIRCLE_BRANCH
+ENV CIRCLE_TAG=$CIRCLE_TAG
+
+COPY . /src
+
+WORKDIR /src
+
+RUN npm install
+
+RUN cd setup && npm run build && npm run do-setup
+
+FROM node:16-alpine3.16
+
+WORKDIR /app
+
+COPY --from=builder /src/setup/deployment.zip ./
+
+RUN unzip deployment.zip -o && npm install && npm run build
+

helm/values-prd.yaml

@@ -0,0 +1,72 @@
+# Chart-wide values.
+env: "prd"
+# Where to install ALL objects of the chart.
+namespace: "fontless"
+
+pdb:
+  minAvailable: 1
+
+serviceAccount:
+  create: true
+
+# Select the port to expose to the cluster. 80 is the default unless otherwise specified.
+service:
+  port: 80
+
+deployment:
+  # Settings for the main deployment object.
+  rollingUpdateMaxSurge: "20%"
+  rollingUpdateMaxUnavailable: "0"
+  # Settings for the deployment's pods.
+  datadogAnnotations: '[{"source": "fontless", "service": "fontless-prd"}]'
+  nodeSelector:
+    ng: prd-hp
+  terminationGracePeriodSeconds: 60
+  # Settings for the deployment's container.
+  container:
+    apm: true
+    command:
+      - /bin/sh
+      - -c
+      - cd /app/ && npm run start
+    # Set which port to expose from the container to the pod. Not to be confused with the service one.
+    port: 3000
+    resources:
+      limits:
+        cpu: 100m
+        memory: 512Mi
+        ephemeral-storage: 1500Mi
+      requests:
+        cpu: 100m
+        memory: 512Mi
+        ephemeral-storage: 1500Mi
+    # Check if the container has started properly.
+    startupProbe:
+      httpGet:
+        path: "/api/health"
+      initialDelaySeconds: 45
+    # If the container has started properly, periodically check if its service is still active.
+    livenessProbe:
+      periodSeconds: 300
+    # If the container has started properly, periodically check if its service is still ready to serve traffic.
+    readinessProbe:
+      httpGet:
+        path: "/api/health"
+      failureThreshold: 3
+      initialDelaySeconds: 10
+      periodSeconds: 300
+
+# Autoscaling settings.
+hpa:
+  maxReplicas: 20
+  minReplicas: 2
+  memoryAverageUtilization: 90
+  cpuAverageUtilization: 90
+
+# Set a URL to expose to the Internet.
+ingress:
+  # If set to "external", the URL will be exposed in *.thehotelsnetwork.com (public). Otherwise, it'll be exposed in *.thn.app (only accessible via VPN).
+  class: "internal"
+  host: "fontless.thn.app"
+  extraConfigurationSnippet: |
+    rewrite ^/gfonts(.*) $1 break;

helm/values-stg.yaml

@@ -0,0 +1,58 @@
+# Chart-wide values.
+env: "stg"
+applicationName: "fontless"
+# Where to install ALL objects of the chart.
+namespace: "fontless"
+
+serviceAccount:
+  create: true
+
+# Select the port to expose to the cluster. 80 is the default unless otherwise specified.
+service:
+  port: 80
+
+deployment:
+  # Settings for the deployment's pods.
+  datadogAnnotations: '[{"source": "fontless", "service": "fontless-stg"}]'
+  terminationGracePeriodSeconds: 60
+  # Settings for the deployment's container.
+  container:
+    apm: true
+    command:
+      - /bin/sh
+      - -c
+      - cd /app/ && npm run start
+    # Set which port to expose from the container to the pod. Not to be confused with the service one.
+    port: 3000
+    resources:
+      limits:
+        cpu: 100m
+        memory: 512Mi
+        ephemeral-storage: 1500Mi
+      requests:
+        cpu: 50m
+        memory: 256Mi
+        ephemeral-storage: 1500Mi
+    # Check if the container has started properly.
+    startupProbe:
+      httpGet:
+        path: "/api/health"
+      initialDelaySeconds: 45
+    # If the container has started properly, periodically check if its service is still active.
+    livenessProbe:
+      periodSeconds: 300
+    # If the container has started properly, periodically check if its service is still ready to serve traffic.
+    readinessProbe:
+      httpGet:
+        path: "/api/health"
+      failureThreshold: 3
+      initialDelaySeconds: 10
+      periodSeconds: 300
+
+# Set a URL to expose to the Internet.
+ingress:
+  # If set to "external", the URL will be exposed in *.thehotelsnetwork.com (public). Otherwise, it'll be exposed in *.thn.app (only accessible via VPN).
+  class: "internal"
+  host: "fontless.stg.thn.app"
+  extraConfigurationSnippet: |
+    rewrite ^/gfonts(.*) $1 break;