Merge pull request #70 from spotify/rugvip/deployment-fixes

deployment fixes

backend/Dockerfile

@@ -16,6 +16,8 @@ RUN go build .
 FROM debian:buster
 ARG service
 
+RUN apt-get update && apt-get install -y ca-certificates
+
 WORKDIR /app/
 
 COPY --from=build /build/$service/$service /app/service

backend/proxy/Dockerfile

@@ -1,4 +1,4 @@
-FROM envoyproxy/envoy:latest
+FROM envoyproxy/envoy:v1.13.0
 
 COPY ./envoy.yaml /etc/envoy/envoy.yaml
 

backend/proxy/envoy.yaml

@@ -28,6 +28,10 @@ static_resources:
                           route:
                             cluster: identity_service
                             max_grpc_timeout: 0s
+                        - match: { prefix: '/spotify.backstage.builds.v1.Builds/' }
+                          route:
+                            cluster: builds_service
+                            max_grpc_timeout: 0s
                         - match: { prefix: '/inventory' }
                           route:
                             cluster: inventory_service
@@ -58,6 +62,15 @@ static_resources:
         - socket_address:
             address: identity
             port_value: 50051
+    - name: builds_service
+      connect_timeout: 0.25s
+      type: logical_dns
+      http2_protocol_options: {}
+      lb_policy: round_robin
+      hosts:
+        - socket_address:
+            address: builds
+            port_value: 50051
     - name: inventory_service
       connect_timeout: 0.25s
       type: logical_dns

docker-compose.yaml

@@ -37,3 +37,4 @@ services:
       args:
         service: scaffolder
     restart: unless-stopped
+    env_file: secrets.env