chore: add ws-server deployment

Author: iccicci

nix/cardano-services/deployments/backend-ingress.nix

@@ -104,6 +104,16 @@
                 };
               }
             ]
+            ++ lib.optionals values.ws-server.enabled [
+              {
+                pathType = "Exact";
+                path = "/ws";
+                backend.service = {
+                  name = "${chart.name}-ws-server";
+                  port.name = "http";
+                };
+              }
+            ]
             ++ values.cardano-services.additionalRoutes;
         })
         values.backend.hostnames;

nix/cardano-services/deployments/default.nix

@@ -135,6 +135,12 @@ in
           resources.requests = mkPodResources "150Mi" "200m";
         };
 
+        ws-server = {
+          enabled = false;
+          resources.limits = mkPodResources "300Mi" "300m";
+          resources.requests = mkPodResources "150Mi" "200m";
+        };
+
         backend = {
           allowedOrigins = lib.concatStringsSep "," allowedOrigins;
           passHandleDBArgs = true;
@@ -169,6 +175,7 @@ in
       };
       imports = [
         ./options.nix
+        ./ws-server.deployment.nix
         ./provider.resource.nix
         ./projector.resource.nix
         ./backend.provider.nix
@@ -209,6 +216,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             stakepool.databaseName = "stakepoolv2";
             cardano-services = {
               ingresOrder = 99;
@@ -255,6 +263,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             blockfrost-worker.enabled = false;
             pg-boss-worker.enabled = true;
 
@@ -322,6 +331,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             ingress.enabled = false;
             pg-boss-worker.enabled = true;
             stakepool.databaseName = "stakepoolv2";
@@ -358,6 +368,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             cardano-services = {
               ingresOrder = 99;
               additionalRoutes = [
@@ -406,6 +417,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             stakepool.databaseName = "stakepoolv2";
             backend.allowedOrigins = lib.concatStringsSep "," allowedOriginsDev;
 
@@ -445,6 +457,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             stakepool.databaseName = "stakepoolv2";
             blockfrost-worker.enabled = true;
             pg-boss-worker.enabled = true;
@@ -870,6 +883,7 @@ in
           };
 
           values = {
+            ws-server.enabled = true;
             cardano-services = {
               ingresOrder = 99;
             };

nix/cardano-services/deployments/ws-server.deployment.nix

@@ -0,0 +1,110 @@
+{
+  lib,
+  utils,
+  values,
+  chart,
+  config,
+  ...
+}: {
+  templates.ws-server-service = lib.mkIf values.ws-server.enabled {
+    apiVersion = "v1";
+    kind = "Service";
+    metadata = {
+      name = "${chart.name}-ws-server";
+      labels = utils.appLabels "ws-server";
+    };
+    spec = {
+      ports = [
+        {
+          name = "http";
+          protocol = "TCP";
+          port = 3000;
+          targetPort = 3000;
+        }
+      ];
+      selector = utils.appLabels "ws-server";
+    };
+  };
+
+  templates.ws-server-deployment = lib.mkIf values.ws-server.enabled {
+    apiVersion = "apps/v1";
+    kind = "Deployment";
+    metadata = {
+      name = "${chart.name}-ws-server";
+      labels = utils.appLabels "ws-server";
+    };
+    spec = {
+      selector.matchLabels = utils.appLabels "ws-server";
+      template = {
+        metadata.labels = utils.appLabels "ws-server";
+        spec = {
+          imagePullSecrets = [
+            {
+              name = "dockerconfigjson";
+            }
+          ];
+          containers = [
+            {
+              inherit (values.cardano-services) image;
+              inherit (values.ws-server) resources;
+              name = "ws-server";
+              ports = [
+                {
+                  containerPort = 3000;
+                  name = "http";
+                }
+              ];
+              livenessProbe = {
+                httpGet = {
+                  path = "/health";
+                  port = 3000;
+                };
+              };
+              securityContext = {
+                runAsUser = 0;
+                runAsGroup = 0;
+              };
+              args = ["start-ws-server"];
+              env = utils.mkPodEnv ({
+                NETWORK = config.network;
+                DB_CACHE_TTL = "7200";
+                OGMIOS_URL =  "ws://${config.namespace}-cardano-core.${config.namespace}.svc.cluster.local:1337";
+
+                POSTGRES_POOL_MAX_DB_SYNC = "2";
+                POSTGRES_HOST_DB_SYNC = values.postgresName;
+                POSTGRES_PORT_DB_SYNC = "5432";
+                POSTGRES_DB_DB_SYNC = "cardano";
+                POSTGRES_PASSWORD_DB_SYNC = {
+                  valueFrom.secretKeyRef = {
+                    name = "cardano-owner-user.${values.postgresName}.credentials.postgresql.acid.zalan.do";
+                    key = "password";
+                  };
+                };
+                POSTGRES_USER_DB_SYNC = {
+                  valueFrom.secretKeyRef = {
+                    name = "cardano-owner-user.${values.postgresName}.credentials.postgresql.acid.zalan.do";
+                    key = "username";
+                  };
+                };
+                POSTGRES_SSL_DB_SYNC = "true";
+                POSTGRES_SSL_CA_FILE_DB_SYNC = "/tls/ca.crt";
+                });
+              volumeMounts = [
+                {
+                  mountPath = "/tls";
+                  name = "tls";
+                }
+              ];
+            }
+          ];
+          volumes = [
+            {
+              name = "tls";
+              secret.secretName = "postgresql-server-cert";
+            }
+          ];
+        };
+      };
+    };
+  };
+}