Uploaded image for project: 'Request For Comments'
  1. Request For Comments
  2. RFC-760

Add Services deployment section to dev guide for k8s/ArgoCD/Vault

    XMLWordPrintable

    Details

    • Type: RFC
    • Status: Adopted
    • Resolution: Unresolved
    • Component/s: DM
    • Labels:
      None

      Description

      We have been discussing adding a section with guidelines on the deployment of services in the developer guide in order to inform practices in the area.
      The baseline will be the model developed by SQuaRE, now used by other teams like Telescope & Site and can be summarized as:

      1. Strong encouragement to develop Kubernetes-based services whenever possible; Kubernetes gives us portability across all our in-house and commodity infrastructure platforms by abstracting service code from details of underlying resources. (This is actually mandatory for all Science Platform related services).

      2. Encouragement to use ArgoCD (implies GitOps) as a deployment framework for Kubernetes services. This improves the ability to provide operational cover to services whose details one is not intimately familiar with.

      3. Recommend the practice of using Vault to store deployment secrets and credentials in order to support GitOps operations.

      ... and of course offer pointers to technical documentation.

      Like with other sections of the developer guide, the intent here is to promote certain toolchains and practices particularly to guide new developers in the right direction. Nobody is going to make anybody rewrite anything they don't want to

      Discussion welcome.

        Attachments

          Issue Links

            Activity

            frossie Frossie Economou created issue -
            tjenness Tim Jenness made changes -
            Field Original Value New Value
            Remote Link This issue links to "Page (Confluence)" [ 27744 ]
            rra Russ Allbery made changes -
            Watchers Frossie Economou, Joshua Hoblitt [ Frossie Economou, Joshua Hoblitt ] Frossie Economou, Joshua Hoblitt, Russ Allbery [ Frossie Economou, Joshua Hoblitt, Russ Allbery ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 27830 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 27904 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 27947 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28020 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28090 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28137 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28192 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28260 ]
            frossie Frossie Economou made changes -
            Status Proposed [ 10805 ] Adopted [ 10806 ]
            frossie Frossie Economou made changes -
            Link This issue is triggering DM-30078 [ DM-30078 ]
            tjenness Tim Jenness made changes -
            Remote Link This issue links to "Page (Confluence)" [ 28383 ]

              People

              Assignee:
              frossie Frossie Economou
              Reporter:
              frossie Frossie Economou
              Watchers:
              Frossie Economou, Joshua Hoblitt, Russ Allbery
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Planned End:

                  Jenkins

                  No builds found.