Page MenuHomePhabricator
Differential D12560

[terraform] set up keyserver load balancer
ClosedPublic
Actions

Authored by will on Jun 24 2024, 7:33 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mar 7 2025, 3:18 AM
Unknown Object (File)
Mar 6 2025, 2:00 AM
Unknown Object (File)
Feb 27 2025, 10:31 AM
Unknown Object (File)
Feb 22 2025, 6:46 AM
Unknown Object (File)
Feb 22 2025, 6:46 AM
Unknown Object (File)
Feb 22 2025, 6:46 AM
Unknown Object (File)
Feb 22 2025, 6:46 AM
Unknown Object (File)
Feb 22 2025, 6:45 AM
View All 79 Files
Subscribers
ashoat
tomek

Details

Reviewers
bartek
kamil
Commits
rCOMM09879f5ea31b: [terraform] set up keyserver load balancer
Summary

This implements the load balancer for the keyserver ecs cluster, distributing keyserver requests to keyserver tasks

Depends on D12559

Test Plan

Successful load balancer health check on the primary ecs task, meaning traffic is properly sent to our fargate tasks.

Was also able to send requests through my domain configured to point to the load balancer.

Diff Detail

Repository
rCOMM Comm
Branch
keyserver_to_aws
Lint
No Lint Coverage
Unit
No Test Coverage

Revision Contents
Changeset List

PathSize
services/
terraform/
self-host/
84 lines
32 lines
5 lines

Diff 41665

View Options

services/terraform/self-host/aws_lb.tf

  • This file was added.
#import "CommServicesAuthMetadataEmitter.h"
#import <Foundation/Foundation.h>
#import <React/RCTBridgeModule.h>
#import <React/RCTEventEmitter.h>
NSString *const commServicesAuthMetadata = @"commServicesAuthMetadata";
@interface CommServicesAuthMetadataEmitterIOSWrapper
: RCTEventEmitter <RCTBridgeModule>
@property(nonatomic) BOOL hasListeners;
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID;
@end
@implementation CommServicesAuthMetadataEmitterIOSWrapper
RCT_EXPORT_MODULE(CommServicesAuthMetadataEmitter);
static CommServicesAuthMetadataEmitterIOSWrapper *sharedInstance = nil;
- (instancetype)init {
self = [super init];
if (!self) {
return self;
}
_hasListeners = NO;
return self;
}
- (void)startObserving {
@synchronized([self class]) {
_hasListeners = YES;
sharedInstance = self;
}
}
- (void)stopObserving {
@synchronized([self class]) {
_hasListeners = NO;
sharedInstance = nil;
}
}
- (NSArray<NSString *> *)supportedEvents {
return @[ commServicesAuthMetadata ];
}
- (NSDictionary *)constantsToExport {
return @{@"COMM_SERVICES_AUTH_METADATA" : commServicesAuthMetadata};
}
+ (BOOL)requiresMainQueueSetup {
return YES;
}
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID {
@synchronized([self class]) {
if (!sharedInstance) {
return;
}
// Event body must match UserLoginResponse
// type from 'lib/types/identity-service-types.js'
NSDictionary *eventBody =
@{@"accessToken" : accessToken, @"userID" : userID};
[sharedInstance sendEventWithName:commServicesAuthMetadata body:eventBody];
}
}
@end
namespace comm {
void CommServicesAuthMetadataEmitter::sendAuthMetadataToJS(
rust::String accessToken,
rust::String userID) {
NSString *accessTokenObjC =
[NSString stringWithCString:std::string(accessToken).c_str()
encoding:NSUTF8StringEncoding];
NSString *userIDObjC = [NSString stringWithCString:std::string(userID).c_str()
encoding:NSUTF8StringEncoding];
[CommServicesAuthMetadataEmitterIOSWrapper sendAccessTokenToJS:accessTokenObjC
withUserID:userIDObjC];
}
} // namespace comm
View Options

services/terraform/self-host/keyserver_primary.tf

  • This file was added.
#import "CommServicesAuthMetadataEmitter.h"
#import <Foundation/Foundation.h>
#import <React/RCTBridgeModule.h>
#import <React/RCTEventEmitter.h>
NSString *const commServicesAuthMetadata = @"commServicesAuthMetadata";
@interface CommServicesAuthMetadataEmitterIOSWrapper
: RCTEventEmitter <RCTBridgeModule>
@property(nonatomic) BOOL hasListeners;
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID;
@end
@implementation CommServicesAuthMetadataEmitterIOSWrapper
RCT_EXPORT_MODULE(CommServicesAuthMetadataEmitter);
static CommServicesAuthMetadataEmitterIOSWrapper *sharedInstance = nil;
- (instancetype)init {
self = [super init];
if (!self) {
return self;
}
_hasListeners = NO;
return self;
}
- (void)startObserving {
@synchronized([self class]) {
_hasListeners = YES;
sharedInstance = self;
}
}
- (void)stopObserving {
@synchronized([self class]) {
_hasListeners = NO;
sharedInstance = nil;
}
}
- (NSArray<NSString *> *)supportedEvents {
return @[ commServicesAuthMetadata ];
}
- (NSDictionary *)constantsToExport {
return @{@"COMM_SERVICES_AUTH_METADATA" : commServicesAuthMetadata};
}
+ (BOOL)requiresMainQueueSetup {
return YES;
}
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID {
@synchronized([self class]) {
if (!sharedInstance) {
return;
}
// Event body must match UserLoginResponse
// type from 'lib/types/identity-service-types.js'
NSDictionary *eventBody =
@{@"accessToken" : accessToken, @"userID" : userID};
[sharedInstance sendEventWithName:commServicesAuthMetadata body:eventBody];
}
}
@end
namespace comm {
void CommServicesAuthMetadataEmitter::sendAuthMetadataToJS(
rust::String accessToken,
rust::String userID) {
NSString *accessTokenObjC =
[NSString stringWithCString:std::string(accessToken).c_str()
encoding:NSUTF8StringEncoding];
NSString *userIDObjC = [NSString stringWithCString:std::string(userID).c_str()
encoding:NSUTF8StringEncoding];
[CommServicesAuthMetadataEmitterIOSWrapper sendAccessTokenToJS:accessTokenObjC
withUserID:userIDObjC];
}
} // namespace comm
View Options

services/terraform/self-host/variables.tf

  • This file was added.
#import "CommServicesAuthMetadataEmitter.h"
#import <Foundation/Foundation.h>
#import <React/RCTBridgeModule.h>
#import <React/RCTEventEmitter.h>
NSString *const commServicesAuthMetadata = @"commServicesAuthMetadata";
@interface CommServicesAuthMetadataEmitterIOSWrapper
: RCTEventEmitter <RCTBridgeModule>
@property(nonatomic) BOOL hasListeners;
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID;
@end
@implementation CommServicesAuthMetadataEmitterIOSWrapper
RCT_EXPORT_MODULE(CommServicesAuthMetadataEmitter);
static CommServicesAuthMetadataEmitterIOSWrapper *sharedInstance = nil;
- (instancetype)init {
self = [super init];
if (!self) {
return self;
}
_hasListeners = NO;
return self;
}
- (void)startObserving {
@synchronized([self class]) {
_hasListeners = YES;
sharedInstance = self;
}
}
- (void)stopObserving {
@synchronized([self class]) {
_hasListeners = NO;
sharedInstance = nil;
}
}
- (NSArray<NSString *> *)supportedEvents {
return @[ commServicesAuthMetadata ];
}
- (NSDictionary *)constantsToExport {
return @{@"COMM_SERVICES_AUTH_METADATA" : commServicesAuthMetadata};
}
+ (BOOL)requiresMainQueueSetup {
return YES;
}
+ (void)sendAccessTokenToJS:(NSString *)accessToken
withUserID:(NSString *)userID {
@synchronized([self class]) {
if (!sharedInstance) {
return;
}
// Event body must match UserLoginResponse
// type from 'lib/types/identity-service-types.js'
NSDictionary *eventBody =
@{@"accessToken" : accessToken, @"userID" : userID};
[sharedInstance sendEventWithName:commServicesAuthMetadata body:eventBody];
}
}
@end
namespace comm {
void CommServicesAuthMetadataEmitter::sendAuthMetadataToJS(
rust::String accessToken,
rust::String userID) {
NSString *accessTokenObjC =
[NSString stringWithCString:std::string(accessToken).c_str()
encoding:NSUTF8StringEncoding];
NSString *userIDObjC = [NSString stringWithCString:std::string(userID).c_str()
encoding:NSUTF8StringEncoding];
[CommServicesAuthMetadataEmitterIOSWrapper sendAccessTokenToJS:accessTokenObjC
withUserID:userIDObjC];
}
} // namespace comm