Release 5.0
New Services#
The following new services will be added as part of the official Helm chart:
aisvc- The REST API for the AI Servicepassportsvc-legacy- The original Passport Service implementation for backwards compatabilityplatform-notificationsvc-api- The REST API for the new Notification Serviceplatform-notificationsvc-worker- The worker for the new Notification Serviceworkflowsvc-api- The REST API for the new Workflow Serviceworkflowsvc-backend- The API worker backend for the new Workflow Serviceworkflowsvc-conductor- The coordinator for the new Workflow Serviceworkflowwkr-backend- The job worker backend for the new Notification Service
New External Secrets#
To support those features above, new external secrets must be created with the corresponding environment variables below. While some variables are pre-existing, many are new variables to support individual passwords to external services.
aisvc-external#
KAFKA_ADMINISTRATOR_PASSWORDPOSTGRES_AISVC_PASSWORD- NewREDIS_AISVC_PASSWORD- New
platform-notificationsvc-external#
KAFKA_ADMINISTRATOR_PASSWORDPOSTGRES_PLATFORM_NOTIFICATIONSVC_PASSWORD- NewREDIS_PLATFORM_NOTIFICATIONSVC_PASSWORD- NewSMTP_DEFAULT_PASSWORD
workflowsvc-api-external#
KAFKA_ADMINISTRATOR_PASSWORDPOSTGRES_WORKFLOWSVC_API_PASSWORD- NewWORKFLOWSVC_ENCRYPTION_KEY- NewWORKFLOWSVC_ENCRYPTION_SALT- New
workflowsvc-backend-external#
KAFKA_ADMINISTRATOR_PASSWORDPOSTGRES_WORKFLOWSVC_API_PASSWORD- New
workflowsvc-conductor-external#
POSTGRES_WORKFLOWSVC_CONDUCTOR_PASSWORD- New
workflowwkr-backend-external#
KAFKA_ADMINISTRATOR_PASSWORD
Updating Existing External Secrets#
Some external secrets need additional environment variables added:
graphicssvc-external#
MAPBOX_LICENSE_KEY- New
platform-kafka-connect-external#
POSTGRES_AISVC_PASSWORD- NewPOSTGRES_PLATFORM_NOTIFICATIONSVC_PASSWORD- NewPOSTGRES_WORKFLOWSVC_API_PASSWORD- New
New Object Storage Buckets#
The Workflow Service requires it's own object storage bucket. This can be created according to the normal documentation for AWS or OCI.
New Object Storage Access Policies#
The new services need access to new and existing object storage buckets. The following Kubernetes Service accounts should be provided access to the corresponding buckets:
| Kubernetes Service Account | Policy |
|---|---|
| aisvc | kafka |
| platform-notificationsvc-api | kafka |
| platform-notificationsvc-worker | kafka |
| workflowsvc-api | kafka, workflowsvc |
| workflowsvc-backend | kafka, workflowsvc |
| workflowwkr-backend | kafka, workflowsvc |