Implements OAuth2 and Github Actions

* [v0.0.2] Adds Google and Github OAuth2 Authentication

Adds to the API the feature of OAuth2 Authentication via two providers: Google and Github, and implements better handling of secrets

* Create deploy.yml

* Update deploy.yml

* Update deploy.yml

* Update deploy.yml

* Fixes k3s

* Update deploy.yml

* Update deploy.yml

Update deploy.yml

update deploy.yml

* Reemplements Frontend and Backend Connection

* Final Configurations

.github/workflows/deploy.yml

@@ -0,0 +1,66 @@
+name: remote ssh command
+
+on:
+    push:
+        branches:
+            - "main"
+
+env:
+    FRONTEND_PATH: ${{ secrets.FRONTEND_PATH }}
+    TOKEN_SECRET: ${{ secrets.TOKEN_SECRET }}
+    ACCESS_TOKEN_DURATION: ${{ secrets.ACCESS_TOKEN_DURATION }}
+    REFRESH_TOKEN_DURATION: ${{ secrets.REFRESH_TOKEN_DURATION }}
+    DEFAULT_USER_FULLNAME: ${{ secrets.DEFAULT_USER_FULLNAME }}
+    DEFAULT_USER_EMAIL: ${{ secrets.DEFAULT_USER_EMAIL }}
+    DEFAULT_USER_USERNAME: ${{ secrets.DEFAULT_USER_USERNAME }}
+    DEFAULT_USER_PASSWORD: ${{ secrets.DEFAULT_USER_PASSWORD }}
+    GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
+    GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
+    GOOGLE_REDIRECT_URL: ${{ secrets.GOOGLE_REDIRECT_URL }}
+    OAUTH_GITHUB_CLIENT_ID: ${{ secrets.OAUTH_GITHUB_CLIENT_ID }}
+    OAUTH_GITHUB_CLIENT_SECRET: ${{ secrets.OAUTH_GITHUB_CLIENT_SECRET }}
+    OAUTH_GITHUB_REDIRECT_URL: ${{ secrets.OAUTH_GITHUB_REDIRECT_URL }}
+    POSTGRES_USER: ${{ secrets.POSTGRES_USER }}
+    POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
+    POSTGRES_DB: ${{ secrets.POSTGRES_DB }}
+    REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
+
+jobs:
+    build:
+        name: Build
+        runs-on: ubuntu-latest
+        steps:
+            - name: checkout
+              uses: actions/checkout@v2
+
+            - name: Inserts Prod Enviromental Variables
+              run: |
+                  envsubst < $GITHUB_WORKSPACE/frontend/frontend-secret.template.yaml > $GITHUB_WORKSPACE/frontend/frontend-secret.yaml;
+                  envsubst < $GITHUB_WORKSPACE/backend/backend-secret.template.yaml > $GITHUB_WORKSPACE/backend/backend-secret.yaml;
+                  envsubst < $GITHUB_WORKSPACE/postgres/postgres-secret.template.yaml > $GITHUB_WORKSPACE/postgres/postgres-secret.yaml;
+                  envsubst < $GITHUB_WORKSPACE/redis/redis-secret.template.yaml > $GITHUB_WORKSPACE/redis/redis-secret.yaml;
+                  rm $GITHUB_WORKSPACE/frontend/frontend-secret.template.yaml; 
+                  rm $GITHUB_WORKSPACE/redis/redis-secret.template.yaml; 
+                  rm $GITHUB_WORKSPACE/postgres/postgres-secret.template.yaml; 
+                  rm $GITHUB_WORKSPACE/backend/backend-secret.template.yaml;
+
+            - name: copy file via ssh
+              uses: appleboy/scp-action@master
+              with:
+                  host: ${{ secrets.HOST }}
+                  username: ${{ secrets.USERNAME }}
+                  key: ${{ secrets.SSH_KEY }}
+                  port: ${{ secrets.PORT }}
+                  source: "."
+                  target: "infra-hideyoshi.com"
+
+            - name: executing remote ssh commands using password
+              uses: appleboy/ssh-action@master
+              with:
+                  host: ${{ secrets.HOST }}
+                  username: ${{ secrets.USERNAME }}
+                  key: ${{ secrets.SSH_KEY }}
+                  port: ${{ secrets.PORT }}
+                  script: |
+                      cd infra-hideyoshi.com;
+                      ./deploy.sh

.gitignore

@@ -0,0 +1,6 @@
+
+backend/backend-secret.yaml
+
+postgres/postgres-secret.yaml
+
+redis/redis-secret.yaml

backend/backend-config.yaml

@@ -4,5 +4,6 @@ metadata:
     namespace: portfolio
     name: backend-config
 data:
-    backend-url: backend-service
+    backend_url: backend-service
-    backend-port: "8070"
+    backend_port: "8070"
+

backend/backend-secret.template.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    namespace: portfolio
+    name: backend-secret
+type: Opaque
+data:
+    token_secret: $TOKEN_SECRET
+    access_token_duration: $ACCESS_TOKEN_DURATION
+    refresh_token_duration: $REFRESH_TOKEN_DURATION
+    default_user_fullname: $DEFAULT_USER_FULLNAME
+    default_user_email: $DEFAULT_USER_EMAIL
+    default_user_username: $DEFAULT_USER_USERNAME
+    default_user_password: $DEFAULT_USER_PASSWORD
+    google_client_id: $GOOGLE_CLIENT_ID
+    google_client_secret: $GOOGLE_CLIENT_SECRET
+    google_redirect_url: $GOOGLE_REDIRECT_URL
+    github_client_id: $OAUTH_GITHUB_CLIENT_ID
+    github_client_secret: $OAUTH_GITHUB_CLIENT_SECRET
+    github_redirect_url: $OAUTH_GITHUB_REDIRECT_URL

backend/backend-secret.yaml

@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    namespace: portfolio
-    name: backend-secret
-type: Opaque
-data:
-    tokenSecret: c2VjcmV0
-    accessTokenDuration: MTgwMDAwMA==
-    refreshTokenDuration: MTMxNDkwMDAwMA==
-    defaultUserFullname: Vml0b3IgSGlkZXlvc2hp
-    defaultUserEmail: dml0b3IuaC5uLmJhdGlzdGFAZ21haWwuY29t
-    defaultUserUsername: WW9zaGlVbmZyaWVuZGx5
-    defaultUserPassword: cGFzc3dk

backend/backend.yaml

@@ -13,7 +13,6 @@ spec:
             labels:
                 app: backend
         spec:
-            limits:
             containers:
                 - name: backend
                   image: yoshiunfriendly/backend-hideyoshi.com
@@ -23,69 +22,99 @@ spec:
                   env:
                       - name: FRONTEND_PATH
                         valueFrom:
-                            configMapKeyRef:
+                            secretKeyRef:
-                                name: frontend-config
+                                name: frontend-secret
-                                key: frontend-url
+                                key: frontend_path
-
-                      - name: FRONTEND_CONNECTION_TYPE
-                        valueFrom:
-                            configMapKeyRef:
-                                name: frontend-config
-                                key: frontend-type
 
                       - name: TOKEN_SECRET
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: tokenSecret
+                                key: token_secret
 
                       - name: ACCESS_TOKEN_DURATION
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: accessTokenDuration
+                                key: access_token_duration
 
                       - name: REFRESH_TOKEN_DURATION
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: refreshTokenDuration
+                                key: refresh_token_duration
 
                       - name: DEFAULT_USER_FULLNAME
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: defaultUserFullname
+                                key: default_user_fullname
 
                       - name: DEFAULT_USER_EMAIL
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: defaultUserEmail
+                                key: default_user_email
 
                       - name: DEFAULT_USER_USERNAME
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: defaultUserUsername
+                                key: default_user_username
 
                       - name: DEFAULT_USER_PASSWORD
                         valueFrom:
                             secretKeyRef:
                                 name: backend-secret
-                                key: defaultUserPassword
+                                key: default_user_password
 
                       - name: PORT
                         valueFrom:
                             configMapKeyRef:
                                 name: backend-config
-                                key: backend-port
+                                key: backend_port
+
+                      - name: GOOGLE_CLIENT_ID
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: google_client_id
+
+                      - name: GOOGLE_CLIENT_SECRET
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: google_client_secret
+
+                      - name: GOOGLE_REDIRECT_URL
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: google_redirect_url
+
+                      - name: GITHUB_CLIENT_ID
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: github_client_id
+
+                      - name: GITHUB_CLIENT_SECRET
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: github_client_secret
+
+                      - name: GITHUB_REDIRECT_URL
+                        valueFrom:
+                            secretKeyRef:
+                                name: backend-secret
+                                key: github_redirect_url
 
                       - name: POSTGRES_URL
                         valueFrom:
                             configMapKeyRef:
                                 name: postgres-config
-                                key: postgres-url
+                                key: postgres_url
 
                       - name: POSTGRES_DB
                         valueFrom:

deploy.sh

@@ -3,7 +3,7 @@
 function check_k3s_installation() {
     if [ ! -f /usr/local/bin/k3s ]; then
         export INSTALL_K3S_EXEC="--no-deploy traefik";
-        curl -sfL https://get.k3s.io | sh -s -;
+        curl -sfL https://get.k3s.io | sh - ;
         sudo chmod 644 /etc/rancher/k3s/k3s.yaml;
     fi
 }
@@ -66,7 +66,7 @@ function main {
             minikube kubectl -- $@
         }
 
-        minikube start --driver docker;
+        minikube start --driver kvm2;
         minikube addons enable ingress;
         
         start_cert_manager

frontend/frontend-config.yaml

@@ -4,5 +4,4 @@ metadata:
     namespace: portfolio
     name: frontend-config
 data:
-    frontend-url: frontend-service
+    frontend_url: frontend-service
-    frontend-type: unsecure

frontend/frontend-secret.template.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    namespace: portfolio
+    name: frontend-secret
+type: Opaque
+data:
+    frontend_path: $FRONTEND_PATH

frontend/frontend.yaml

@@ -19,7 +19,6 @@ spec:
                 - name: frontend
                   image: yoshiunfriendly/frontend-hideyoshi.com:latest
                   imagePullPolicy: "Always"
-                  limits:
                   ports:
                       - containerPort: 5000
                   env:

postgres/postgres-config.yaml

@@ -4,4 +4,4 @@ metadata:
     namespace: portfolio
     name: postgres-config
 data:
-    postgres-url: postgres-service
+    postgres_url: postgres-service

postgres/postgres-secret.template.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    namespace: portfolio
+    name: postgres-secret
+type: Opaque
+data:
+    POSTGRES_USER: $POSTGRES_USER
+    POSTGRES_PASSWORD: $POSTGRES_PASSWORD
+    POSTGRES_DB: $POSTGRES_DB

postgres/postgres-secret.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    namespace: portfolio 
-    name: postgres-secret
-type: Opaque
-data:
-    POSTGRES_USER: cG9zdGdyZXM=
-    POSTGRES_PASSWORD: cG9zdGdyZXM=
-    POSTGRES_DB: cG9ydGZvbGlv

postgres/postgres.yaml

@@ -13,10 +13,9 @@ spec:
             labels:
                 app: postgres
         spec:
-            limits:
             containers:
                 - name: postgres
-                  image: postgres
+                  image: postgres:14-bullseye
                   imagePullPolicy: "IfNotPresent"
                   ports:
                       - containerPort: 5432

redis/redis-secret.template.yaml

@@ -5,4 +5,4 @@ metadata:
     name: redis-secret
 type: Opaque
 data:
-    redis-password: cGFzc3dk
+    redis-password: $REDIS_PASSWORD

redis/redis.yaml

@@ -13,7 +13,6 @@ spec:
             labels:
                 app: redis
         spec:
-            limits:
             containers:
                 - name: redis
                   image: bitnami/redis