console/deployment/services/rate-limit.ts
2024-04-07 11:57:03 +03:00

69 lines
2.3 KiB
TypeScript

import { serviceLocalEndpoint } from '../utils/local-endpoint';
import { ServiceDeployment } from '../utils/service-deployment';
import { DbMigrations } from './db-migrations';
import { Docker } from './docker';
import { Emails } from './emails';
import { Environment } from './environment';
import { Observability } from './observability';
import { Postgres } from './postgres';
import { Sentry } from './sentry';
import { UsageEstimator } from './usage-estimation';
export type RateLimitService = ReturnType<typeof deployRateLimit>;
export function deployRateLimit({
environment,
dbMigrations,
usageEstimator,
emails,
image,
docker,
postgres,
sentry,
observability,
}: {
observability: Observability;
usageEstimator: UsageEstimator;
environment: Environment;
dbMigrations: DbMigrations;
emails: Emails;
image: string;
docker: Docker;
postgres: Postgres;
sentry: Sentry;
}) {
return new ServiceDeployment(
'rate-limiter',
{
imagePullSecret: docker.secret,
replicas: environment.isProduction ? 3 : 1,
readinessProbe: '/_readiness',
livenessProbe: '/_health',
startupProbe: '/_health',
env: {
...environment.envVars,
SENTRY: sentry.enabled ? '1' : '0',
LIMIT_CACHE_UPDATE_INTERVAL_MS: environment.isProduction ? '60000' : '86400000',
USAGE_ESTIMATOR_ENDPOINT: serviceLocalEndpoint(usageEstimator.service),
EMAILS_ENDPOINT: serviceLocalEndpoint(emails.service),
WEB_APP_URL: `https://${environment.appDns}/`,
OPENTELEMETRY_COLLECTOR_ENDPOINT:
observability.enabled && observability.tracingEndpoint
? observability.tracingEndpoint
: '',
},
exposesMetrics: true,
port: 4000,
image,
},
[dbMigrations, usageEstimator.service, usageEstimator.deployment],
)
.withSecret('POSTGRES_HOST', postgres.pgBouncerSecret, 'host')
.withSecret('POSTGRES_PORT', postgres.pgBouncerSecret, 'port')
.withSecret('POSTGRES_USER', postgres.pgBouncerSecret, 'user')
.withSecret('POSTGRES_PASSWORD', postgres.pgBouncerSecret, 'password')
.withSecret('POSTGRES_DB', postgres.pgBouncerSecret, 'database')
.withSecret('POSTGRES_SSL', postgres.pgBouncerSecret, 'ssl')
.withConditionalSecret(sentry.enabled, 'SENTRY_DSN', sentry.secret, 'dsn')
.deploy();
}