Add IaC (terraform) for STACKIT and helm chart for YATT

axonserver/config/axonserver.yaml

@@ -1,3 +1,4 @@
 axoniq:
   axonserver:
-    hostname: axonserver
+    hostname: axonserver
+    standalone: true

backend/apis/common/build.gradle.kts

@@ -9,11 +9,11 @@ group = "${group}.apis"
 dependencies {
   api(project(":services:common:api"))
   api(project(":services:common:auditing"))
-  api(project(":services:company:api"))
-  api(project(":services:project:api"))
-  api(project(":services:user:api"))
+  api(project(":services:company:company-api"))
+  api(project(":services:project:project-api"))
+  api(project(":services:user:user-api"))
 
-  implementation("org.axonframework:axon-spring-boot-starter")
+    implementation("org.axonframework:axon-spring-boot-starter")
   implementation("org.axonframework.extensions.kotlin:axon-kotlin")
   implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
   implementation("org.springframework.boot:spring-boot-starter-security")

backend/apis/graphql/Dockerfile

@@ -0,0 +1,7 @@
+FROM gcr.io/distroless/java17-debian12
+ARG JAR_FILE=build/libs/*.jar
+COPY ${JAR_FILE} graphql.jar
+#User nonroot (ID 65532) is a user created by distroless images
+#See https://github.com/GoogleContainerTools/distroless/issues/235
+USER 65532
+CMD ["/graphql.jar"]

backend/apis/graphql/build.gradle.kts

@@ -1,24 +1,13 @@
 plugins {
-  id("yatt.kotlin-conventions")
-  id("io.spring.dependency-management")
-  kotlin("plugin.spring")
+  id("yatt.api-conventions")
 }
 
 group = "${group}.apis"
 
 dependencies {
-  api(project(":apis:common"))
-
-  implementation("io.opentracing.contrib:opentracing-spring-jaeger-cloud-starter")
   implementation("io.projectreactor.kotlin:reactor-kotlin-extensions:1.1.5")
-  implementation("org.axonframework:axon-spring-boot-starter")
-  implementation("org.axonframework.extensions.kotlin:axon-kotlin")
-  implementation("org.axonframework.extensions.tracing:axon-tracing-spring-boot-starter")
+
   implementation("org.springframework.boot:spring-boot-starter-graphql")
-  implementation("org.springframework.boot:spring-boot-starter-security")
   implementation("org.springframework.boot:spring-boot-starter-web")
   implementation("org.springframework.boot:spring-boot-starter-websocket")
-  implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
-
-  testImplementation("org.springframework.boot:spring-boot-starter-test")
 }

backend/apis/graphql/src/main/kotlin/com/novatecgmbh/eventsourcing/axon/application/config/CorsConfig.kt

@@ -12,7 +12,7 @@ import org.springframework.web.filter.CorsFilter
 class CorsConfig {
 
     @Bean
-    fun corsFilter(@Value("\${app.cors.allowed-origins}") allowedOrigins: List<String>?) =
+    fun corsFilter(@Value("\${yatt.cors.origins}") allowedOrigins: List<String>?) =
         CorsFilter(
             UrlBasedCorsConfigurationSource().apply {
                 this.registerCorsConfiguration(

backend/apis/graphql/src/main/resources/application.yaml

@@ -1,3 +1,12 @@
+yatt:
+  cors:
+    origins: http://localhost:3000
+  jwt:
+    issuer:
+      uri: http://localhost:8999/realms/eventsourcing-with-axon
+    jwks:
+      uri: http://localhost:8999/realms/eventsourcing-with-axon/protocol/openid-connect/certs
+
 spring:
   application:
     name: graphql-api
@@ -16,15 +25,11 @@ spring:
     oauth2:
       resourceserver:
         jwt:
-          issuer-uri: http://localhost:8999/realms/eventsourcing-with-axon
-
+          issuer-uri: ${yatt.jwt.issuer.uri}
+          jwk-set-uri: ${yatt.jwt.jwks.uri}
 server:
   port: 8088
 
-app:
-  cors:
-    allowed-origins: http://localhost:3000
-
 logging:
   level:
     ROOT: warn

backend/apis/grpc/build.gradle.kts

@@ -1,22 +1,14 @@
 plugins {
   id("com.google.protobuf") version "0.8.18"
-   id("yatt.kotlin-conventions")
-  id("io.spring.dependency-management")
-  kotlin("plugin.spring")
+  id("yatt.api-conventions")
 }
 
 group = "${group}.apis"
 
 dependencies {
-  api(project(":apis:common"))
   api(project(":apis:grpc-lib"))
 
   implementation("io.projectreactor:reactor-core")
   implementation("jakarta.annotation:jakarta.annotation-api:2.0.0")
-
   implementation("net.devh:grpc-spring-boot-starter:2.13.1.RELEASE")
-  implementation("org.axonframework:axon-spring-boot-starter")
-  implementation("org.axonframework.extensions.kotlin:axon-kotlin")
-  implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
-  implementation("org.springframework.boot:spring-boot-starter-security")
 }

backend/apis/grpc/src/main/resources/application.yaml

@@ -1,3 +1,8 @@
+axon:
+  extension:
+    tracing:
+      enabled: false
+
 spring:
   application:
     name: grpc-api

backend/apis/rest/Dockerfile

@@ -0,0 +1,7 @@
+FROM gcr.io/distroless/java17-debian12
+ARG JAR_FILE=build/libs/*.jar
+COPY ${JAR_FILE} rest.jar
+#User nonroot (ID 65532) is a user created by distroless images
+#See https://github.com/GoogleContainerTools/distroless/issues/235
+USER 65532
+CMD ["/rest.jar"]

backend/apis/rest/build.gradle.kts

@@ -1,24 +1,10 @@
 plugins {
-  id("yatt.kotlin-conventions")
-  id("io.spring.dependency-management")
-  kotlin("plugin.spring")
+  id("yatt.api-conventions")
 }
 
 group = "${group}.apis"
 
 dependencies {
-  api(project(":apis:common"))
-
-  implementation("com.fasterxml.jackson.module:jackson-module-kotlin")
-  implementation("io.opentracing.contrib:opentracing-spring-jaeger-web-starter")
   implementation("io.projectreactor:reactor-core")
-  implementation("org.axonframework:axon-spring-boot-starter")
-  implementation("org.axonframework.extensions.kotlin:axon-kotlin")
-  implementation("org.axonframework.extensions.tracing:axon-tracing-spring-boot-starter")
-  implementation("org.springframework.boot:spring-boot-starter-security")
   implementation("org.springframework.boot:spring-boot-starter-web")
-  implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
-
-  testImplementation("org.axonframework:axon-test")
-  testImplementation("org.springframework.boot:spring-boot-starter-test")
 }

backend/apis/rest/src/main/kotlin/com/novatecgmbh/eventsourcing/axon/application/config/CorsConfig.kt

@@ -11,7 +11,7 @@ import org.springframework.web.filter.CorsFilter
 @Configuration
 class CorsConfig {
     @Bean
-    fun corsFilter(@Value("\${app.cors.allowed-origins}") allowedOrigins: List<String>?) =
+    fun corsFilter(@Value("\${yatt.cors.origins}") allowedOrigins: List<String>?) =
         CorsFilter(
             UrlBasedCorsConfigurationSource().apply {
                 this.registerCorsConfiguration(

backend/apis/rest/src/main/resources/application.yml

@@ -1,3 +1,12 @@
+yatt:
+  cors:
+    origins: http://localhost:3000
+  jwt:
+    issuer:
+      uri: http://localhost:8999/realms/eventsourcing-with-axon
+    jwks:
+      uri: http://localhost:8999/realms/eventsourcing-with-axon/protocol/openid-connect/certs
+
 spring:
   application:
     name: rest-api
@@ -8,12 +17,8 @@ spring:
     oauth2:
       resourceserver:
         jwt:
-          issuer-uri: http://localhost:8999/realms/eventsourcing-with-axon
-          jwk-set-uri: http://localhost:8999/realms/eventsourcing-with-axon/protocol/openid-connect/certs
-
-app:
-  cors:
-    allowed-origins: http://localhost:3000
+          issuer-uri: ${yatt.jwt.issuer.uri}
+          jwk-set-uri: ${yatt.jwt.jwks.uri}
 
 logging:
   level:

backend/apis/rsocket/build.gradle.kts

@@ -1,33 +1,21 @@
 plugins {
-  id("yatt.kotlin-conventions")
-  id("io.spring.dependency-management")
+  id("yatt.api-conventions")
   id("com.google.osdetector") version "1.7.0"
-  kotlin("plugin.spring")
 }
 
 group = "${group}.apis"
 
 dependencies {
-  api(project(":apis:common"))
 
   if (osdetector.arch.equals("aarch_64")) {
     implementation("io.netty:netty-all")
   }
 
-  implementation("com.fasterxml.jackson.module:jackson-module-kotlin")
   implementation("io.projectreactor:reactor-core")
   implementation("io.projectreactor.kotlin:reactor-kotlin-extensions")
-  implementation("org.axonframework:axon-spring-boot-starter")
-  implementation("org.axonframework.extensions.kotlin:axon-kotlin")
   implementation("org.axonframework.extensions.reactor:axon-reactor-spring-boot-starter")
-  implementation("org.axonframework.extensions.tracing:axon-tracing-spring-boot-starter")
-  implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server")
   implementation("org.springframework.boot:spring-boot-starter-rsocket")
-  implementation("org.springframework.boot:spring-boot-starter-security")
   implementation("org.springframework.boot:spring-boot-starter-webflux")
   implementation("org.springframework.security:spring-security-messaging")
   implementation("org.springframework.security:spring-security-rsocket")
-
-  testImplementation("org.axonframework:axon-test")
-  testImplementation("org.springframework.boot:spring-boot-starter-test")
 }