---
# System prepended metadata

title: Sprint 2020-08-10

---

# Sprint 2020-08-10

## Create cluster for staging

 
Card https://trello.com/c/JZWLbZDW/1910-infra-split-kubernetes-cluters-into-tvbs-stage-prodetc



1. Create the cluster
    - bucket imgproxy-storage-staging.fdvr.co
    - module "fulldive-environment" "staging"
        - node pool and cluster
        - namespaces
        - secrets 
            - mongo (new provider)
            - redis
            - neo4j
            - clickhouse
            - auth secrets

2. Staging API hostname
    - Decide what to do with buckets and domains
      - api-staging.fdvr.co
      - api-tvbs.fdvr.co
      - api.tvbs.co
      - img-staging.fdvr.co
    - Change in staging deployment values
 
3. Parallel
    - Install deployments due to Kubernetes 1.16
        Possibly update with helm3
        - Descheduler
        - Nginx
        - Cert Manager
        - Rabbit
        - Elasticsearch
        - Curator (Elasticsearch)
        - Consul
        - OpenVPN
        - Jaeger

    - Fill consul config

    - CI
        - Deployments ENV
        - Refactor pipelines to reuse code
        - Fill deployment envs with...
            - Scripting https://developer.atlassian.com/bitbucket/api/2/reference/resource/repositories/%7Bworkspace%7D/%7Brepo_slug%7D/deployments_config 
        - Change

4. Install Fulldive apps



## Create cluster for TVBS

### Deploy infra apps

#### VMs with databases

#### Create mongo cluster 


### Fill consul config

#### Kubernetes apps

#### Cloudflare

Billing must be separated. Or not.

Their domain, their cloudlfare account

- api.tvbs.co

OR

- api-tvbs.fdvr.co

#### Auth providers and secrets 

- Firebase
- Google
- Facebook
- Apple 

### Deploy our apps

We need a service account for images pulling from us.gcr.io/spair-api

### Dashboards

easier to add by hand

# What we need

- Domain decision or cloudflare account API key
- Mongo Atlas API key
- Google
    - Editor account for evgenii.shevchenko@fulldive.com
    - Credentials for auth
- Firebase
    - Credentials for pushes
    - Credentials for auth
- Facebook
    - Credentials for auth
    - Allowed websites
    - OR Access to dev app
- Apple 
    - Credentials for auth