DEV Community: rmayore

05: Setup Email Microservice

rmayore — Tue, 14 Feb 2023 03:00:51 +0000

This felt like a natural starting point, with this being the most independent out of all the microservices. It can be built and deployed without other services running.

I'm intending to use Spring Batch for this service paired with a Redis db.

For sending emails, I'll make use of Amazon Simple Email Service (SES). Later on, I'll also hook this up with our messaging solution of choice (Kafka, RabbitMQ).

I'll be adding more info to this as I build the service.

04: Set Up Test Docker Registry

rmayore — Sat, 11 Feb 2023 15:46:28 +0000

The aim of this step is to set up a test container registry, so that when I start the dev work I have little to worry on the IAC side.

✅ Create IAM Roles for ECR Access - PR 2

A Read Access role to be used by any application that will be pulling the images, with the below permissions:

- ecr:GetAuthorizationToken,
- ecr:BatchCheckLayerAvailability,
- ecr:GetDownloadUrlForLayer,
- ecr:GetRepositoryPolicy,
- ecr:DescribeRepositories,
- ecr:ListImages,
- ecr:DescribeImages,
- ecr:BatchGetImage,
- ecr:GetLifecyclePolicy,
- ecr:GetLifecyclePolicyPreview,
- ecr:ListTagsForResource,
- ecr:DescribeImageScanFindings

A Read & Write role to be used by whatever agent that will be building the images, with the permissions:

- ecr:GetAuthorizationToken,
- ecr:BatchCheckLayerAvailability,
- ecr:GetDownloadUrlForLayer,
- ecr:GetRepositoryPolicy,
- ecr:DescribeRepositories,
- ecr:ListImages,
- ecr:DescribeImages,
- ecr:BatchGetImage,
- ecr:GetLifecyclePolicy,
- ecr:GetLifecyclePolicyPreview,
- ecr:ListTagsForResource,
- ecr:DescribeImageScanFindings,
- ecr:PutImage,
- ecr:InitiateLayerUpload,
- ecr:UploadLayerPart,
- ecr:CompleteLayerUpload,
- ecr:DeleteRepository,
- ecr:BatchDeleteImage,
- ecr:SetRepositoryPolicy,
- ecr:DeleteRepositoryPolicy

I set these 2 roles with Pricipals as a wildcard (*) to be as permissive as possible, then later I'll figure out further restrictions.

✅ Create a Test ECR Repo - PR 3

This proved a challenge as it's my first time working with Terragrunt, but I was able to get the dependencies (on the above roles) working for this module.

I also checked on S3 and confirmed that out terragrunt remote state is working fine!

03: Setup...

rmayore — Tue, 24 Jan 2023 03:38:10 +0000

✅ Setup project on Clickup - link

No trouble here.

✅ Create AWS IAM account For project

For this I created 2 Users;

An Admin account with AdministratorAccess permission, who will manage everything else (didn't wanna use the root account).
A Terragrunt user that will provision all the resources, with the following permissions (for a start):
1. AmazonS3FullAccess
2. AmazonEC2FullAccess
3. IAMFullAccess

✅ Register Route53 domain for project

No trouble here, though for this I had to message AWS customer care to enable my account to register a domain.

✅ Set up Terragrunt for managing terraform remote state

For now, we'll just add the remote_state setting in our terragrunt.hcl file: Link: PR

remote_state {
  backend = "s3"
  config = {
    bucket  = "fake-st-terraform-state"
    key     = "${path_relative_to_include()}.tfstate"
    region  = "af-south-1"
    encrypt = true
  }
}

02: The Product...

rmayore — Sun, 22 Jan 2023 12:46:47 +0000

We'll build an eShop for startup 'FakeST' that sells T-shirts with bespoke designs. So we are looking at a couple of services.

Client mobile app (android)
Client web app (react, time permitting)
API gateway (spring boot; web)
Identity microservice (postgres, spring boot)
Catalog microservice (postgres, spring boot)
Ordering microservice(postgres, spring boot)
Cart microservice(redis, spring boot)
Payment microservice(postgres, spring boot)
Email microservice (redis, spring boot; batch)
Design Service (postgres, spring boot, S3)
Event bus (RabbitMQ)

And on the OPs side,

Gitops
Image Registry
Kubernetes
Helm
Istio
Grafana
Prometheus
Loki
Zipkin
Backups

01: Build Tech For A Startup

rmayore — Sun, 22 Jan 2023 11:20:01 +0000

Not a real one though. For my first project of 2023, I will imagine a fake startup that builds a certain product, and build their whole infra from the ground up.

I'll start with a micro-service backend and deploy everything to K8S clusters, in addition to supporting services such as build systems, databases, security, metrics, logging, tracing and alerting.

My primary tools will be Github, Spring and AWS. I'll update with more as I progress.