Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/crcsmnky/movieweb
Hello and welcome to MovieWeb
https://github.com/crcsmnky/movieweb
Last synced: 9 days ago
JSON representation
Hello and welcome to MovieWeb
- Host: GitHub
- URL: https://github.com/crcsmnky/movieweb
- Owner: crcsmnky
- License: apache-2.0
- Created: 2014-06-18T21:53:45.000Z (over 10 years ago)
- Default Branch: master
- Last Pushed: 2022-12-08T01:23:07.000Z (almost 2 years ago)
- Last Synced: 2024-10-08T13:27:57.514Z (28 days ago)
- Language: Python
- Homepage:
- Size: 265 KB
- Stars: 4
- Watchers: 3
- Forks: 1
- Open Issues: 22
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Hello and Welcome to MovieWeb
MovieWeb is a project meant to demonstrate some of the particulars of [Istio](http://istio.io).
## Data
This sample uses data from [MovieLens](https://grouplens.org/datasets/movielens/), specifically the ["latest small"](http://files.grouplens.org/datasets/movielens/ml-latest-small.zip) dataset. The dataset is available as exports for Cloud SQL/MySQL, Cloud Firestore, and MongoDB. For more information check out [dataset/README](dataset/README.md).
## Prerequisites
* [`gcloud`](https://cloud.google.com/sdk)
* [`skaffold`](https://skaffold.dev)
## Setup
### Kubernetes Engine and Istio Add-On
```bash
gcloud beta container clusters create [CLUSTER-NAME] \
--addons=Istio --istio-config=auth=MTLS_PERMISSIVE \
--cluster-version=latest \
--machine-type=n1-standard-2 \
--num-nodes=4
gcloud container clusters get-credentials [CLUSTER-NAME]
kubectl create namespace movieweb
kubectl label namespace movieweb istio-injection=enabled
```
### Service accounts
Cloud SQL
```bash
gcloud iam service-accounts create cloudsql-client --display-name "cloudsql-client"
gcloud projects add-iam-policy-binding [PROJECT-ID] \
--member serviceAccount:cloudsql-client@[PROJET-ID].iam.gserviceaccount.com \
--role roles/cloudsql.client
gcloud iam service-accounts keys create backend/cloudsql/cloudsql-credentials.json \
--iam-account cloudsql-client@[PROJECT-ID].iam.gserviceaccount.com
```
Cloud Firestore
```bash
gcloud iam service-accounts create cloudfirestore-user --display-name "cloudfirestore-user"
gcloud projects add-iam-policy-binding [PROJECT-ID] \
--member serviceAccount:cloudfirestore-user@[PROJET-ID].iam.gserviceaccount.com \
--role roles/datastore.user
gcloud iam service-accounts keys create backend/firestore/cloudfirestore-credentials.json \
--iam-account cloudfirestore-user@[PROJECT-ID].iam.gserviceaccount.com
```
### Secrets
Cloud SQL
```bash
kubectl create secret generic cloudsql-credentials \
--from-file=backend/cloudsql/cloudsql-credentials.json \
-n movieweb
```
Cloud Firestore
```bash
kubectl create secret generic cloudfirestore-credentials \
--from-file=backend/firestore/cloudfirestore-credentials.json \
-n movieweb
```
### MongoDB
Use Deployment Manager to deploy the MongoDB instance:
```
gcloud deployment-manager deployments create mongodb-instance \
--config=dataset/mongodb-instance.yaml \
--template=dataset/mongodb-instance.jinja
```
By default, the instance allows traffic from other GCE instances, but the GKE Pod IP range isn't included. So create a new rule that allows traffic from the GKE Pod's IP range:
```bash
export PODIP_RANGE=$(gcloud container clusters describe [CLUSTER_NAME] --format="value(clusterIpv4Cidr")
gcloud compute firewall-rules create default-allow-podip \
--allow=tcp,udp,icmp \
--source-ranges=$PODIP_RANGE
```
### Deploy Istio rules
First create the Istio routing rules for external databases:
```
kubectl create -f manifests/database-services.yaml
```
Then create the `movieweb` routing rules:
```
kubectl create -f manifests/movieweb-services.yaml
```
### Build container images
```
VERSION=1.0 skaffold build
```
### Deploy microservices
```
skaffold deploy
```
Or
```
kubectl create -f manifests/deployments.yaml
```
### Monitoring, tracing, logging
Prometheus:
Tracing:
Logging:
## Cleanup
* Delete GKE cluster
* Delete MongoDB instance
* Delete service accounts