https://github.com/financial-times/delivery-varnish

UPP Varnish Layer
https://github.com/financial-times/delivery-varnish

universal-publishing

Last synced: about 1 month ago
JSON representation

UPP Varnish Layer

• Host: GitHub
• URL: https://github.com/financial-times/delivery-varnish
• Owner: Financial-Times
• Created: 2016-10-04T11:16:38.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2024-09-16T09:25:40.000Z (4 months ago)
• Last Synced: 2024-09-17T07:54:05.659Z (4 months ago)
• Topics: universal-publishing
• Language: Shell
• Homepage:
• Size: 676 KB
• Stars: 1
• Watchers: 33
• Forks: 2
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Codeowners: .github/CODEOWNERS

Awesome Lists containing this project

README

        
## UPP Delivery Varnish

This is the main entry point in the delivery cluster. It performs authentication when needed, caching, and routes traffic to the cluster's applications.

See [default.vcl](/default.vcl) for the Varnish routing policies.

## Kubernetes details

It uses a service of type `LoadBalancer` that will provision an ElasticLoadBalancer in AWS.

Every time this service is recreated, a new ELB will be created. 

This does `NOT` happen in normal deploy situations, but only on extreme situations like helm chart delete.

#### ELB DNS registration

Since this is the entry point in the cluster, the ELB needs to be registered at the DNS name of the cluster.

This is done by a Kubernetes job, set to run at `helm install` and `helm  update`, to make sure that the DNS 

name is updated even if the ELB is recreated. See [k8s job file](/helm/delivery-varnish/templates/elb-registrator-job.yaml) for details.

#### Config map keys used

- global-config:

    - dns_subdomain : the DNS name where the cluster should be reachable

    - k8s.app_namespace : the k8s namespace where the app lives

    - aws.region: the aws region of the cluster

#### Secret keys used

- global_secrets:

    - aws.access_key_id: AWS access key id

    - aws.secret_access_key : AWS secret access key

    - kon.dns_api.key: The API key for Konstructor used for setting up the DNS record