feat: hasura (#87)

* init * fix: upgrade builtin keycloak-theme for docker-compose * wip * wip * wip * fix * test * fix: demo realm * fix * fix * fix * fix(keycloak): better logout * more roles * clean * kontinuous * fix * fix: rename app * fix * fix * docs: update * docs: update * fix keycloak service name * fix: migration * fix NEXT_PUBLIC_HASURA_GRAPHQL_ENDPOINT_URL * fix NEXT_PUBLIC_HASURA_GRAPHQL_ENDPOINT_URL * fix * seeds * seeds * seeds * add statefulsetAnnotations * add statefulsetAnnotations * add statefulsetAnnotations * add statefulsetAnnotations * add statefulsetAnnotations * add statefulsetAnnotations * add statefulsetAnnotations * dummy * fix seed pgSecretName * fix * fix * fix * fix precommit * debug * fix-ingress * fix: fix DSFR and next/link issues * fixlock * fix: icons * fix * Update .env.production * Update .env.staging * Update hasura.ts * fix code orga * fix: remixicon remove cdn * upgrade * fix: better docker-compose * Update README.md * Update ks-review.yaml * Update ks-review.yaml * Update ks-review.yaml * Update ks-review.yaml * doc: add talisman note * Update README.md * fix: add projectName * fix: rename to workflow-webhook.yaml Co-authored-by: Jo <jo@surikat.pro>
SocialGouv · Aug 16, 2022 · e9a7090 · e9a7090
1 parent 5d4de7d
commit e9a7090
Show file tree

Hide file tree

Showing 70 changed files with 1,396 additions and 385 deletions.
diff --git a/.env.development b/.env.development
@@ -7,4 +7,5 @@ KEYCLOAK_URL="http://localhost:8080/realms/app-realm"
 KEYCLOAK_CLIENT_SECRET="**********"
 KEYCLOAK_CLIENT_ID="app-client"
 NEXTAUTH_URL="http://localhost:3000"
-NEXTAUTH_SECRET="A+EQqudlGhqTLDnBbCvohHBfbhUjTXAbZYy1NKsSsys="
+NEXTAUTH_SECRET="A+EQqudlGhqTLDnBbCvohHBfbhUjTXAbZYy1NKsSsys="
+NEXT_PUBLIC_HASURA_GRAPHQL_ENDPOINT_URL="http://localhost:8082/v1/graphql"
diff --git a/.env.production b/.env.production
@@ -2,4 +2,4 @@ NEXT_PUBLIC_SENTRY_DSN="https://67a92c8c0f70486d9f36f2352eff1d19@sentry.fabrique
 NEXT_PUBLIC_SENTRY_ENV="production"
 NEXT_PUBLIC_MATOMO_URL="https://matomo.fabrique.social.gouv.fr"
 NEXT_PUBLIC_MATOMO_SITE_ID=63
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
diff --git a/.github/workflows/ks-preproduction.yaml b/.github/workflows/ks-preproduction.yaml
@@ -13,5 +13,5 @@ concurrency:
 
 jobs:
   follow-deployment:
-    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
     secrets: inherit
diff --git a/.github/workflows/ks-production.yaml b/.github/workflows/ks-production.yaml
@@ -11,5 +11,5 @@ concurrency:
 
 jobs:
   follow-deployment:
-    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
     secrets: inherit
diff --git a/.github/workflows/ks-review-deactivate.yaml b/.github/workflows/ks-review-deactivate.yaml
@@ -9,5 +9,5 @@ concurrency:
 
 jobs:
   follow-deactivation:
-    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
     secrets: inherit
diff --git a/.github/workflows/ks-review.yaml b/.github/workflows/ks-review.yaml
@@ -5,13 +5,13 @@ on:
     branches-ignore:
       - main
     tags-ignore:
-      - v*
+      - "v*"
 
 concurrency:
   cancel-in-progress: true
-  group: review-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
 
 jobs:
-  follow-deployment:
-    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+  kontinuous:
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
     secrets: inherit
diff --git a/.husky/pre-commit b/.husky/pre-commit
@@ -1,5 +1,6 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
+
 yarn lint-staged
-yarn node-talisman --githook pre-commit
+exec < /dev/tty; yarn node-talisman --githook pre-commit -i
diff --git a/.kontinuous/config.yaml b/.kontinuous/config.yaml
@@ -1,3 +1,5 @@
+projectName: fabrique
+
 dependencies:
   fabrique:
     import: SocialGouv/kontinuous/plugins/fabrique
diff --git a/.kontinuous/env/dev/templates/app.sealed.secret.yaml b/.kontinuous/env/dev/templates/app.sealed.secret.yaml
@@ -8,7 +8,7 @@ spec:
   encryptedData:
     NEXTAUTH_SECRET: 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
     KEYCLOAK_CLIENT_ID: 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
-    KEYCLOAK_CLIENT_SECRET: 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
+    KEYCLOAK_CLIENT_SECRET: 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
   template:
     metadata:
       annotations:

diff --git a/.kontinuous/env/dev/templates/hasura.sealed.secret.yaml b/.kontinuous/env/dev/templates/hasura.sealed.secret.yaml
@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: hasura
+spec:
+  encryptedData:
+    HASURA_GRAPHQL_ADMIN_SECRET: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: hasura
+    type: Opaque
diff --git a/.kontinuous/env/dev/values.yaml b/.kontinuous/env/dev/values.yaml
@@ -1,26 +1,36 @@
 jobs:
   runs:
-    build-app:
-      use: SocialGouv/kontinuous/plugins/fabrique/jobs/build@v1
-      with:
-        imageProject: fabrique
-        imageRepository: template
-        imagePackage: app
-        registrySecretRefName: harbor
-        buildArgs:
-          NEXT_PUBLIC_APP_VERSION_COMMIT: "{{ $.Values.global.sha }}"
     db-keycloak:
       use: SocialGouv/kontinuous/plugins/fabrique/jobs/create-db@v1
       with:
         pgAdminSecretRefName: pg-scaleway
         pgSecretName: "keycloak-db-{{ .Values.global.branchSlug32 }}"
         database: "keycloak_{{ .Values.global.branchSlug32 }}"
         pgUser: "keycloak_{{ .Values.global.branchSlug32 }}"
+    db-hasura:
+      use: SocialGouv/kontinuous/plugins/fabrique/jobs/create-db@v1
+      with:
+        pgAdminSecretRefName: pg-scaleway
+        pgSecretName: "hasura-db-{{ .Values.global.branchSlug32 }}"
+        database: "hasura_{{ .Values.global.branchSlug32 }}"
+        pgUser: "hasura_{{ .Values.global.branchSlug32 }}"
+    seed-hasura:
+      needs: [hasura]
+      use: SocialGouv/kontinuous/plugins/fabrique/jobs/seed-db@v1
+      with:
+        seedPath: hasura/seeds/default/books.sql
+        pgSecretName: "hasura-db-{{ .Values.global.branchSlug32 }}"
+
+hasura:
+  needs: [build-hasura, db-hasura, keycloakx]
+  envFrom:
+    - secretRef:
+        name: "hasura-db-{{ .Values.global.branchSlug32 }}"
+    - secretRef:
+        name: hasura
 
 keycloakx:
-  needs: [build-app, db-keycloak]
-  #statefulsetAnnotations:
-  # kapp.k14s.io/change-rule: "upsert after upserting kube-workflow/db-keycloak.{{ .Values.global.namespace }}"
+  needs: [db-keycloak]
   extraEnvFrom: |
     - secretRef:
         name: "keycloak-db-{{ .Values.global.branchSlug32 }}"
@@ -39,3 +49,8 @@ jobs-deactivate:
       with:
         pgAdminSecretRefName: pg-scaleway
         database: "keycloak_{{ .Values.global.branchSlug32 }}"
+    drop-db2:
+      use: SocialGouv/kontinuous/plugins/fabrique/jobs/drop-db
+      with:
+        pgAdminSecretRefName: pg-scaleway
+        database: "hasura_{{ .Values.global.branchSlug32 }}"
diff --git a/.kontinuous/env/preprod/templates/app.sealed.secret.yaml b/.kontinuous/env/preprod/templates/app.sealed.secret.yaml
@@ -8,7 +8,7 @@ spec:
   encryptedData:
     NEXTAUTH_SECRET: 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
     KEYCLOAK_CLIENT_ID: AgB8KATkspkNplsty+H4bBjm7Ce4pxmy3/s0h0KFnO69dFj5Xwy36nJ5H7g4oTE8xQBDEPWX/YyF5/rqFGTeN5Btybk3yRRQoS+j5OyMruUOdvwthN2RQlma6IMeHp65UwIFuOrYn44w4kZBYbXM9teinH3qI/IvLs+8s5D3NxbD6TYTPcUVOxfiuI21atN35qgVCrMtWBy7w1VjcA9Trjwv3nc0fOUkKWZNNmc7S5zh/UneJJC0Wlf96x1OkYNbSm1GB6H5T80ayPDB1d5nT2598Hz1BFhsxbsqfoABQYcQIOULggMkQaAGHkgGk4lCF4U83b4m3lIb7il6W7UmANMW4ZdFUsftA3o37WUq2rfasIjHLrZuNka97SkU9ZJKm4axb5bNRz+xCxwv6FaWQTfvrI/qYUAsuFpgMPRphEyxngOoHLqyrBa2fN+ahNYyniIXBp2TmUhzfjybXt56QWwNUEDeMGesk9FTw3ssCAgu3PwrJv4REYpMKzdszuGlCd9v21XtWxnABDLIme9WxapM9AXZhWm+ftJTHbSSlHwDdJPHCulh05dLrJ63C3AtsnncyeMNl0nkMHqN51yB2cus6qeE4LL5zErK/f4fmp31HuzfAveR6zzZKJ+tXPvkg//mABaFhfMMHpvPo4oqU8wOyqKFZU6mDfA5DsYWgsMiU4kpePkaXbAUUxYw8N5CY/s7ic8+wT+lGWwO
-    KEYCLOAK_CLIENT_SECRET: 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
+    KEYCLOAK_CLIENT_SECRET: AgAiI7KGxjFjhjSY3hYrlQ30oQ7eNE2jkaEcO3gOAQhlWMFvSu1b51rhl3htkPO5YTkAsfbC7EIZkdSTEjjF6eFUKua5Z51jbKf8wmmW3VfWky26yzzyazUJ7Sv/rAPwr4ialLUivvoYLrJECE49GasHm9mosBEuvuqpFYYmiJlSOrG9kM8RdybaZmGLiUZBUIRN1bIrC9ix7kdndaCQ8ysRVH76xQ2wpXYJU4rVn2bOJgbvR4T4q/pe6TeT/H7yUZ9ritgVPH9tFCuGK0xZ3CXFnUFwQsdsB9c0aB2jwoi2YmsK0XRasRAmu7PxsqD34xGkwtopVTvLsuKhCcN/V1x81gB/8+pW1Ox6yhQKH06GNsIruamhVxeIOXP7vt0/B93+cnZQUuFL7xt7rxnZEKq/1Ja0av/2UkxAUNYNc+kdRvLJbm8TVkWUuoWbMLUrsg3S6fItRHMG1M1t9MvdeihVlTyBThadnIfKSS3RiBKi/7Maozpa2g/ATsYX15qbDeONMgRZmo6itKGtmm6RBJpluSsGmPjBBO30oSdIV8gNEzdQuboSB86XjrDgQbGPj4Mn2aeQSEoNlxS0pjXB8/jOzp68YIh7by0LVrTA8su60oNrQCA5SVXTrO/PQJpXsC998iuohL1CvWIbxkP+GxXptwoRbrNy4lYPtxYGSCFH/rdEgPElLlHy4EMpfnVr+1NWvTWsusg6fgJXtcovXz+2aYQ42yhYVg5dS26xeX6cAg==
   template:
     metadata:
       annotations:

diff --git a/.kontinuous/env/preprod/templates/hasura.sealed.secret.yaml b/.kontinuous/env/preprod/templates/hasura.sealed.secret.yaml
@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: hasura
+spec:
+  encryptedData:
+    HASURA_GRAPHQL_ADMIN_SECRET: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: hasura
+    type: Opaque
diff --git a/.kontinuous/env/prod/templates/app.sealed.secret.yaml b/.kontinuous/env/prod/templates/app.sealed.secret.yaml
@@ -8,7 +8,7 @@ spec:
   encryptedData:
     NEXTAUTH_SECRET: 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
     KEYCLOAK_CLIENT_ID: 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
-    KEYCLOAK_CLIENT_SECRET: AgBL1MiUBlFdcVdPay6PiBkHeW2aDSIynYbdOJ6uvTfKJg8G2JUSjvn8n/Q0Eq6DJJ5MyxjucExmSivX0TVwuaWCI8GyT1lNcsiKAALcwFD13jqFiRkFN5E+xHp5QoYLs8xOb7vTlBf/dsjnl6qkOMTAecPRGGpZBxVJ11Z+4y5NmohR8BFmqNKjPP3bydlfJpdPp45z/huJmfXOhafx3x+yu8LcOndAjMqwfYuKT8GgNOcJ/BIJHv3r7zuDmWcuSUWUYIfJSgJiDYbFvTGvJ7+HN9e4B7up9A/3CveCLR265AVvZ91c4anPuQNh0RZqHbxcPPUIRsk4z1c+ZJVJKE0xWGnMk7Vcy6KNYPv0oHguHFDtvqFM2ySpN3BE8FxhtYAuVX4ail0qCbU3RlHwG/nV+uVYRoHXskuQ0D/E1OWm4HUFccKvxfmL6mwD/x6p3ksNXGBCIsEDqxwQ5c2Rr2xDsozrFkS1Gd/9AJVTnoZLz0VsYue9UY5aDMGeywP6Pne9pNYcuZy7zbPVvqF1J5zDyPppw9ALuI/pIEGl+g79BaxdKEI/JbkpeEJBCdESytpVQKpnH0wiekKTEWuakZ8tgvqWnX+8/PPIzjCeZJ3CaziGy45C+14hicvLZBjsE/W/2sqasuFoUWKs1WduMs8G8RgRyhtrrj0RMokjvCSfoKFj6KVaR3jcgtCrH1aGO3wFZQkyBGq80k7SpLZmI3TVOKQvASNjOzFFC+iQcVPpRg==
+    KEYCLOAK_CLIENT_SECRET: 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
   template:
     metadata:
       annotations: {}

diff --git a/.kontinuous/env/prod/templates/hasura.sealed.secret.yaml b/.kontinuous/env/prod/templates/hasura.sealed.secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: hasura
+spec:
+  encryptedData:
+    HASURA_GRAPHQL_ADMIN_SECRET: AgBInmgYKgb6sJYVX3mqYcxyapCF+1S97uywoT/mi+yIPN2NfobfmqTievO9D7mJQgCWCSAwDdJrMgrLN81dMTDC0jitoLxdkzqhLIQxnWwHP9BZXhO9bYS93OutbcPZDPsW8wdpgaNERYVXycmvNJmdLBMDv6m0FJOa/hn7+tAZfsgIjnQGWWlIbD4JzXX9OZ6G3yXGr4qioJDakl+vByoeSExiSYDTl6QOSzxmAllKCT0xJ9hMiWpw/ExyWWQ4z+44SeNzHN8j68s88F3An2IUUYQlLgXPXRSe17fQ2xIXCr5jR8R2IpTH0G/8s+vMEtiOQtWyUCtV+3eZqNI6AJv0fUAdQfV9YD7CVwMUY0RzzDnh2QeZIQlaxQ4TJJiTjaKsCFBEP3RSSwLL+G7EpFPXGysYXrf5MJ4bTQduQuEZ8j64yGbM74DrBQ0jnDoL0Nd98JO33FZhBYE+W069QFlIVB3i9xD+Ei/7r8YADRHAHKkIvBG+4fC8maB3QgWAaQr+HKerB44XGfiOSGTRuU9tl2j4NXQJMQDaj5S3x84p/dkJPU0Nar5Hl+2HbZ6/OxHUL/ae1jVeOGkkjSVFF2L/yDr9V+yPLikmenQmQFSZbdUd65bM2AaLxOyz/5feIV7GwzxCn0xn0QOqQaNgaNAdYNT1ChPZBfZmqvEWt6jkG2PeQD47yrmisTjcOqOySGOAvbts9akmZcRrIt6rtY6N7mxoay7PijaX
+  template:
+    metadata:
+      name: hasura
+    type: Opaque