Improve kubernetes for prod

infrastructure/kubernetes/base/components/alert-processor/alert-processor-service.yaml

@@ -20,6 +20,68 @@ spec:
         app.kubernetes.io/component: worker
     spec:
       initContainers:
+      # Wait for Redis to be ready
+      - name: wait-for-redis
+        image: redis:7.4-alpine
+        command:
+        - sh
+        - -c
+        - |
+          echo "Waiting for Redis to be ready..."
+          until redis-cli -h $REDIS_HOST -p $REDIS_PORT --tls --cert /tls/redis-cert.pem --key /tls/redis-key.pem --cacert /tls/ca-cert.pem -a "$REDIS_PASSWORD" ping | grep -q PONG; do
+            echo "Redis not ready yet, waiting..."
+            sleep 2
+          done
+          echo "Redis is ready!"
+        env:
+        - name: REDIS_HOST
+          valueFrom:
+            configMapKeyRef:
+              name: bakery-config
+              key: REDIS_HOST
+        - name: REDIS_PORT
+          valueFrom:
+            configMapKeyRef:
+              name: bakery-config
+              key: REDIS_PORT
+        - name: REDIS_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: redis-secrets
+              key: REDIS_PASSWORD
+        volumeMounts:
+        - name: redis-tls
+          mountPath: /tls
+          readOnly: true
+      # Wait for RabbitMQ to be ready
+      - name: wait-for-rabbitmq
+        image: curlimages/curl:latest
+        command:
+        - sh
+        - -c
+        - |
+          echo "Waiting for RabbitMQ to be ready..."
+          until curl -f -u "$RABBITMQ_USER:$RABBITMQ_PASSWORD" http://$RABBITMQ_HOST:15672/api/healthchecks/node > /dev/null 2>&1; do
+            echo "RabbitMQ not ready yet, waiting..."
+            sleep 2
+          done
+          echo "RabbitMQ is ready!"
+        env:
+        - name: RABBITMQ_HOST
+          valueFrom:
+            configMapKeyRef:
+              name: bakery-config
+              key: RABBITMQ_HOST
+        - name: RABBITMQ_USER
+          valueFrom:
+            secretKeyRef:
+              name: rabbitmq-secrets
+              key: RABBITMQ_USER
+        - name: RABBITMQ_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: rabbitmq-secrets
+              key: RABBITMQ_PASSWORD
       - name: wait-for-migration
         image: postgres:17-alpine
         command:
@@ -53,52 +115,6 @@ spec:
             secretKeyRef:
               name: database-secrets
               key: ALERT_PROCESSOR_DB_USER
-      - name: wait-for-database
-        image: busybox:1.36
-        command:
-        - sh
-        - -c
-        - |
-          echo "Waiting for alert processor database to be ready..."
-          until nc -z $ALERT_PROCESSOR_DB_HOST $ALERT_PROCESSOR_DB_PORT; do
-            echo "Database not ready yet, waiting..."
-            sleep 2
-          done
-          echo "Database is ready!"
-        env:
-        - name: ALERT_PROCESSOR_DB_HOST
-          valueFrom:
-            configMapKeyRef:
-              name: bakery-config
-              key: ALERT_PROCESSOR_DB_HOST
-        - name: ALERT_PROCESSOR_DB_PORT
-          valueFrom:
-            configMapKeyRef:
-              name: bakery-config
-              key: DB_PORT
-      - name: wait-for-rabbitmq
-        image: busybox:1.36
-        command:
-        - sh
-        - -c
-        - |
-          echo "Waiting for RabbitMQ to be ready..."
-          until nc -z $RABBITMQ_HOST $RABBITMQ_PORT; do
-            echo "RabbitMQ not ready yet, waiting..."
-            sleep 2
-          done
-          echo "RabbitMQ is ready!"
-        env:
-        - name: RABBITMQ_HOST
-          valueFrom:
-            configMapKeyRef:
-              name: bakery-config
-              key: RABBITMQ_HOST
-        - name: RABBITMQ_PORT
-          valueFrom:
-            configMapKeyRef:
-              name: bakery-config
-              key: RABBITMQ_PORT
       containers:
       - name: alert-processor-service
         image: bakery/alert-processor:f246381-dirty
@@ -152,3 +168,8 @@ spec:
           periodSeconds: 10
           timeoutSeconds: 5
           failureThreshold: 3
+      volumes:
+      - name: redis-tls
+        secret:
+          secretName: redis-tls-secret
+          defaultMode: 0400