66 lines
1.9 KiB
Bash
66 lines
1.9 KiB
Bash
|
#!/bin/bash
|
||
|
|
#
|
||
|
|
# Phase 15: Production Hardening
|
||
|
|
# Resource limits, backups, disaster recovery, documentation
|
||
|
|
#
|
||
|
|
|
||
|
|
set -euo pipefail
|
||
|
|
|
||
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
|
|
source "${SCRIPT_DIR}/config.sh"
|
||
|
|
|
||
|
|
log_info "=========================================="
|
||
|
|
log_info "Phase 15: Production Hardening"
|
||
|
|
log_info "=========================================="
|
||
|
|
|
||
|
|
# 15.1 Production Configuration
|
||
|
|
log_step "15.1 Configuring production settings..."
|
||
|
|
|
||
|
|
if [ "${ENVIRONMENT}" != "prod" ]; then
|
||
|
|
log_warning "Not production environment. Skipping production hardening."
|
||
|
|
exit 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Update replica counts
|
||
|
|
log_info "Updating replica counts for production..."
|
||
|
|
for service in "${SERVICES[@]}"; do
|
||
|
|
kubectl scale deployment "${service}" \
|
||
|
|
--replicas=3 \
|
||
|
|
-n "${NAMESPACE}" \
|
||
|
|
|| log_warning "Failed to scale ${service}"
|
||
|
|
done
|
||
|
|
|
||
|
|
# 15.2 Backup Configuration
|
||
|
|
log_step "15.2 Configuring backups..."
|
||
|
|
|
||
|
|
# Database backups
|
||
|
|
log_info "Configuring database backups..."
|
||
|
|
az postgres server backup create \
|
||
|
|
--resource-group "${AKS_RESOURCE_GROUP}" \
|
||
|
|
--server-name "${POSTGRES_SERVER_NAME}" \
|
||
|
|
--backup-name "daily-backup-$(date +%Y%m%d)" \
|
||
|
|
|| log_warning "Failed to create database backup"
|
||
|
|
|
||
|
|
# Storage backups
|
||
|
|
log_info "Enabling storage versioning..."
|
||
|
|
az storage account blob-service-properties update \
|
||
|
|
--account-name "${STORAGE_ACCOUNT_NAME}" \
|
||
|
|
--enable-versioning true \
|
||
|
|
|| log_warning "Failed to enable versioning"
|
||
|
|
|
||
|
|
log_info "Production hardening complete"
|
||
|
|
log_info "Next steps (manual):"
|
||
|
|
log_info " 1. Configure resource limits in deployments"
|
||
|
|
log_info " 2. Set up automated backups"
|
||
|
|
log_info " 3. Configure disaster recovery"
|
||
|
|
log_info " 4. Review security settings"
|
||
|
|
log_info " 5. Update documentation"
|
||
|
|
|
||
|
|
# Save state
|
||
|
|
save_state "phase15" "complete"
|
||
|
|
|
||
|
|
log_success "=========================================="
|
||
|
|
log_success "Phase 15: Production Hardening - COMPLETE"
|
||
|
|
log_success "=========================================="
|
||
|
|
|