[SAM][architecture] Give up lambda for PaimonGanyuSpringBootApp, use Elastic Beanstalk instead.

[binchoo]

As-is

Running a SpringBoot application on a lambda container is not optimal at all. The aws-serverless-java-container module is trying the best to support SpringBoot apps on the lambda service, but it is not satisfying me.

Cons:

• DispatherServlet is not available.
• ArgumentResolvers, ViewResolvers are not usable.
• Cold start latency is terrible.

Pros:

• Easy to deploy.
• Easy to configure IAM Roles and IAM Policies.

[binchoo]

As-is: API Gateway + PaimonGanyuSpringBootApp on AWS Lambda

To-be:

• PaimonGanyuSpringBootApp on EC2 instances
  • Security Group allowing inbound traffic from the ALB.
  • EC2 User Data to pull application source from github and run ./gradlew bootRun
• Auto Scaling Group for EC2 instances.
  • IAM Roles to access UserHoyopassTable, UserDailyCheckTable, UserRedeemTable and two SSM paramters (HoyopassPublicKey andHoyopassPrivateKey).
• Application Load Balancer(L7)
  • SecurityGroup allowing inbound traffic from the API Gateway.

Disgusting to write down to template.yaml.

[binchoo]

To-be

Let's use Elastic Beanstalk.

[binchoo]

Change Impact

The principle: "Keep single-jar deployment."

Java code base

• [x] PaminGanyu> :application module

  • [x] Resolve the timezone problem programmatically. (Don't make .ebextensions file. Keep the principle.)
  • [x] Introduce a HealthCheckController to support ALB's health checking mechanisms.
  • [x] Add a /health handler mapping.
  • [x] application.properties> set server.port=5000 to customarily handle the proxied request from nginx.

  What the doc says:

  

  --HTTP(80)--> ALB --HTTP(80)--> ASG --HTTP(80)--> NGINX --HTTP(5000)--> SpringBootApp 

IAM

• [x] Create an IAM Role that will be required by the paimonganyu-skill's instance profile.
  • [x] DynamoDB CRUD policies attached.
  • [x] SSM Parameter CRUD policies attached.

AWS Beanstalk

• [x] Create an application named paimonganyu-skill.
• [x] ALB Configurations

  Do not bother yourself to tell that a process is using the 5000 port, because NGINX transparently forwards requests from 80 to 5000.

AWS SAM template.yaml

• [x] Commentify the PaimonGanyuSpringBootApp section in the original template.yaml.
• [x] Write down a new template.yaml named paimonganyu-skill.yaml that configures the paimonganyu-skill application.
  • [x] Consider multiple environments: prod and test.
• [x] Create an API Gateway resource explictly, as the PaimonGanyuSpringBootApp.Properties.Events is gonna be removed.
• [x] Create an IAM Role resource that I said before.

Makefile

• [x] Define a workflow that builds & deploys a bootJar to the paimonganyu-skill beanstalk app.