sudo yum update -y
sudo yum install -y docker
sudo service docker start
sudo curl -L https://github.com/docker/compose/releases/download/1.22.0/docker-compose-$(uname -s)-$(uname -m) -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose

sudo docker run -d \
    -e MYSQL_ROOT_PASSWORD=Unix11 \
    -e MYSQL_DATABASE=students \
    -e MYSQL_USER=students \
    -e MYSQL_PASSWORD=Unix11 \
    -p 3306:3306 \
    -v mysql-data:/var/lib/mysql \
    mysql:8.0
    
sudo docker ps
sudo docker logs [containerid]

sudo docker kill [containerid]

ssh-keygen
cat ./.ssh/id_rsa.pub

spring.datasource.url=jdbc:mysql://mysql:3306/students
spring.datasource.username=students
spring.datasource.password=Unix11

sudo yum update
sudo yum install git
git clone [email protected]:nivitzhaky/ops-basic-spring.git 

fork repo: https://github.com/handson-academy/basic-html to your account 
explain developer tools
main
explain domain / url / http(s) / request and response headers/ 
copy to postman
make a curl
curl into file 1.html

echo "
something one
something two
something three
" > 2.txt

grep something *
grep three *
grep something * | wc -l

sudo su
vi 3.txt
aaa
bbb
ccc
ddd

add text 
delete lines
save

sudo chmod 700 3.txt
cat 3.txt

exit

cat 3.txt
sudo cat 3.txt


git clone [your repo]
cd basic-html/

sudo yum install python
python --version
python -m http.server 5555
nohup python -m http.server 5555 &
tail -f nohup.out

ps -ef | grep python
pgrep python
kill -9 [pid]
pkill python

test the http://[public ip]:5555/index.html 

go to git -> settings -> developer settings-> personal access tokens -> tokens (classic)
generate new token (classic
no expiration all privileges

git branch test-branch
git checkout test-branch
git status
vi index.html 
vi index2.html
git add index2.html
git commit -a -m "2 indexes"
git push

create a pull request
show that handson academy can merge

create a new branch in ui test-branch
create new files
git pull
ll
git checkout test-branch2
ll

cd ..
find . -name "index*.html" 
find . -name "index*.html" | xargs grep Hello
grep -r Hello *

mkdir newdir
echo "
{\"service\": {\"id\": 3, \"name\" : \"service3\"}}
" > newdir/1.json

sudo yum install jq
cat  newdir/1.json | jq -r '.service.name'

echo "
version: v1
services:
  service1: myservice
" >  newdir/2.yml

sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
sudo chmod a+x /usr/local/bin/yq
cat  newdir/2.yml | yq -r '.services.service1'

sed -i 's/myservice/nivservice/g' newdir/2.yml 
cat  newdir/2.yml | yq -r '.services.service1'

ll
rm -rf newdir/

pwd
cd ~/basic-html/
 
ssh-keygen
cat ~/.ssh/id_rsa.pub 
go to github -> settings -> ssh and gpg add the key

make a private repository
try to clone with https
now with ssh

df -h
find . -type f -exec du -ah {} + | sort -rh | head -n 10

updated command- show the most bigger files in the disk 
sudo find / -type f -exec du -ah {} + | sort -rh | head -n 10

sudo wget http://repos.fedorapeople.org/repos/dchen/apache-maven/epel-apache-maven.repo -O /etc/yum.repos.d/epel-apache-maven.repo
sudo sed -i s/\$releasever/6/g /etc/yum.repos.d/epel-apache-maven.repo
sudo yum install -y apache-maven

cd ops-basic-spring
mvn clean install

sudo docker build . -t backend
sudo docker login
nivitzhaky
Jul201789#
sudo docker tag backend nivitzhaky/backend
sudo docker push nivitzhaky/backend

git pull
echo "
version: \"3\"
services:
  appserver:
    container_name: server
    hostname: localhost
    image: nivitzhaky/backend:latest
    ports:
      - "8080:8080"
  mysql:
    image: mysql:8.0
    environment:
      MYSQL_ROOT_PASSWORD: Unix11
      MYSQL_DATABASE: students
      MYSQL_USER: students
      MYSQL_PASSWORD: Unix11
    ports:
      - "3306:3306"
    volumes:
      - ./mysql-data:/var/lib/mysql
    privileged: true
" >>  docker-compose.yml

sudo  docker-compose   up -d
# test http://[ip address]:8080/swagger-ui.html
sudo docker-compose   down

cd ~
git clone [email protected]:handson-academy/ops-basic-angular.git
cd ops-basic-angular

echo "
export const environment = {
  production: true,
  url: 'http://13.50.247.173:8080/api' 
};
" > src/environments/environment.prod.ts

echo "
export const environment = {
  production: false,
  url: 'http://13.50.247.173:8080/api' 
};
" > src/environments/environment.ts


sudo docker run -p 3000:3000 -v $(pwd):/app  -d node:14 tail -f /dev/null
sudo docker ps
sudo docker exec -it [containerid]  /bin/bash

cd /app
npm install
npm run build --prod


npm install -g http-server
nohup http-server /app/dist/webapp -p 3000 &

DOCKERHUB_USERNAME = nivitzhaky
DOCKERHUB_TOKEN = dckr_pat_wNsuA4lJiuBnc4iCsNCmxjCVjc4
EC2_INSTANCE_PUBLIC_IP = 13.50.235.108
SSH_KEY = 

name: Build and Deploy

on:
  push:
    branches:
      - master

env:
  APP_VERSION: v1.0.${{ github.run_number }}

jobs:
  build:
    name: Build & Deploy
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@v2
      - name: Set up JDK 11
        uses: actions/setup-java@v2
        with:
          java-version: '11'
          distribution: 'adopt'
      - name: Build and analyze
        env:
          GITHUB_TOKEN: ${{ secrets.ACCESSE_TOKEN }}
        run: mvn clean install
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v1
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1
      - name: Login to DockerHub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Build and push
        id: docker_build
        uses: docker/build-push-action@v2
        with:
          context: .
          push: true
          tags: ${{ secrets.DOCKERHUB_USERNAME }}/backend:${{ env.APP_VERSION }}
      - name: Deploy to AWS EC2
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.EC2_INSTANCE_PUBLIC_IP }}
          username: ec2-user
          key: ${{ secrets.SSH_KEY }} # store the SSH password as a secret in the repository
          script: |
            cd /home/ec2-user/ops-basic-spring
            sudo /usr/local/bin/docker-compose  down || true
            sed -i 's/image: ${{ secrets.DOCKERHUB_USERNAME }}\/backend:.*/image: ${{ secrets.DOCKERHUB_USERNAME }}\/backend:v1.0.${{ github.run_number }}/g' /home/ec2-user/ops-basic-spring/docker-compose.yml
            sudo /usr/local/bin/docker-compose  up -d || true

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PublicReadGetObject",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::niv.backend.students/*"
        }
    ]
}

AWS_ACCESS_KEY_ID: 
AWS_SECRET_ACCESS_KEY:
AWS_REGION: <YOUR_AWS_REGION>
S3_BUCKET_NAME: <YOUR_S3_BUCKET_NAME>

name: Deploy to S3 Bucket
on:
  push:
    branches:
      - main
jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Install Node.js
        uses: actions/setup-node@v1
        with:
          node-version: '14.x'
      - name: Install dependencies
        run: npm install
      - name: Build application
        run: npm run build --prod
      - name: Install AWS CLI
        run: |
          sudo apt-get update
          sudo apt-get install -y python3-pip
          pip3 install awscli --upgrade --user
      - name: Deploy to S3
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION: ${{ secrets.AWS_REGION }}
          S3_BUCKET_NAME: ${{ secrets.S3_BUCKET_NAME }}
        run: |
          aws s3 sync ./dist/webapp s3://${{ env.S3_BUCKET_NAME }} --delete

create database students_stage_ecs;
CREATE USER 'students_staging_ecs'@'%' IDENTIFIED BY 'students_staging_ecs';
GRANT all PRIVILEGES on students_stage_ecs to 'students_staging_ecs'@'%';
GRANT all PRIVILEGES on students_stage_ecs.* to 'students_staging_ecs'@'%';

create database students_stage_eks;
CREATE USER 'students_staging_eks'@'%' IDENTIFIED BY 'students_staging_eks';
GRANT all PRIVILEGES on students_stage_eks to 'students_staging_eks'@'%';
GRANT all PRIVILEGES on students_stage_eks.* to 'students_staging_eks'@'%';

accountid = 
access_key=
secret_key=
username=academy
password=Unix11!@

AWS_ACCESS_KEY_ID=
AWS_DEFAULT_REGION=eu-north-1
AWS_SECRET_ACCESS_KEY=
CI_AWS_ECS_CLUSTER=ecs-stage-cluster
CI_AWS_ECS_SERVICE=ecs-stage-service

students_staging_ecs=jdbc:mysql://database-2.cmyyngkp9f7o.eu-north-1.rds.amazonaws.com:3306/students_stage_ecs
students_staging_ecs_user=students_staging_ecs
students_staging_ecs_password=students_staging_ecs
students_staging_eks=jdbc:mysql://database-2.cmyyngkp9f7o.eu-north-1.rds.amazonaws.com:3306/students_stage_eks
students_staging_eks_user=students_staging_eks
students_staging_eks_password=students_staging_eks

<settings xmlns="http://maven.apache.org/SETTINGS/1.1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.1.0 http://maven.apache.org/xsd/settings-1.1.0.xsd">
  <servers>
    <server>
      <id>gitlab-maven</id>
      <configuration>
        <httpHeaders>
          <property>
            <name>Job-Token</name>
            <value>${CI_JOB_TOKEN}</value>
          </property>
        </httpHeaders>
      </configuration>
    </server>
  </servers>
</settings>

variables:
  DOCKER_REGISTRY: [ecr url - no /]
  AWS_DEFAULT_REGION: eu-north-1
  APP_NAME: students-ecs
  DOCKER_HOST: tcp://docker:2375

publish:
  image: 
    name: maven:3.8.1-openjdk-11
    entrypoint: [""]
  services:
    - docker:dind
  before_script:
    - apt-get update
    - apt-get install -y python3-pip
    - pip3 install awscli
    - aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
    - aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
    - aws configure set region $AWS_DEFAULT_REGION
    - export DB_URL=$(aws ssm get-parameter --name "students_staging_ecs" --query "Parameter.Value" --output text)
    - echo $DB_URL
    - export DB_PASSWORD=$(aws ssm get-parameter --name "students_staging_ecs_password" --query "Parameter.Value" --output text)
    - echo $DB_PASSWORD
    - export DB_USER=$(aws ssm get-parameter --name "students_staging_ecs_user" --query "Parameter.Value" --output text)
    - echo $DB_USER
    - sed -i "s#spring.datasource.url=.*#spring.datasource.url=${DB_URL}#g"  src/main/resources/application.properties
    - sed -i "s#spring.datasource.username=.*#spring.datasource.username=${DB_USER}#g"  src/main/resources/application.properties
    - sed -i "s#spring.datasource.password=.*#spring.datasource.password=${DB_PASSWORD}#g"  src/main/resources/application.properties
    - cat src/main/resources/application.properties
    - apt-get update
    - apt-get install -y curl
    - curl -fsSL https://get.docker.com | sh
    - aws --version
    - docker --version
    - mvn --version
  script:
    - mvn clean install
    - aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin $DOCKER_REGISTRY
    - docker build -t $DOCKER_REGISTRY/$APP_NAME:latest . 
    - docker push $DOCKER_REGISTRY/$APP_NAME:latest  

deploy:
  image: 
    name: docker:19.03.10
    entrypoint: [""]
  services:
    - docker:dind
  before_script:
    - apk add --no-cache curl jq python py-pip
    - pip install awscli
    - aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
    - aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
    - aws configure set region $AWS_DEFAULT_REGION
    - aws ecr get-login-password --region eu-north-1 | docker login --username AWS --password-stdin $DOCKER_REGISTRY
  stage: deploy
  script:
    - echo $REPOSITORY_URL:$IMAGE_TAG 
    - echo "Updating the service..."
    - aws ecs update-service --region "${AWS_DEFAULT_REGION}" --cluster "${CI_AWS_ECS_CLUSTER}" --service "${CI_AWS_ECS_SERVICE}"  --force-new-deployment

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PublicRead",
            "Effect": "Allow",
            "Principal": "*",
            "Action": [
                "s3:GetObject",
                "s3:GetObjectVersion"
            ],
            "Resource": "arn:aws:s3:::ecs-stage.files.nivitzhaky.com/*"
        }
    ]
}

BACKEND_URL_ECS -> https:\/\/ecs.nivitzhaky.com\/api
AWS_ACCESS_KEY_ID 
AWS_SECRET_ACCESS_KEY 

<settings xmlns="http://maven.apache.org/SETTINGS/1.1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.1.0 http://maven.apache.org/xsd/settings-1.1.0.xsd">
  <servers>
    <server>
      <id>gitlab-maven</id>
      <configuration>
        <httpHeaders>
          <property>
            <name>Job-Token</name>
            <value>${CI_JOB_TOKEN}</value>
          </property>
        </httpHeaders>
      </configuration>
    </server>
  </servers>
</settings>

build stage:  
   image: doctrine/nodejs-aws-cli:v10.19
   stage: build  
   only:    
      - ecs  
   script:
      - echo $BACKEND_URL_ECS
      - sed -i "s/backend_url/'$BACKEND_URL_ECS'/" src/environments/environment.ts
      - sed -i "s/backend_url/'$BACKEND_URL_ECS'/" src/environments/environment.prod.ts    
      - cat src/environments/environment.ts
      - cat src/environments/environment.prod.ts
      - npm install --save --legacy-peer-deps    
      # Build App    
      - npm run build 
   artifacts:    
      paths:      
         # Build folder      
         - dist/    
      expire_in: 1 hour

deploy stage:  
   image: python:latest  
   stage: deploy  
   only:    
      - ecs  
   script:    
      - pip install awscli    
      - aws s3 sync ./dist/webapp/ s3://ecs-stage.files.nivitzhaky.com   

sudo curl --silent --location -o /usr/local/bin/kubectl \
   https://s3.us-west-2.amazonaws.com/amazon-eks/1.21.5/2022-01-21/bin/linux/amd64/kubectl

sudo chmod +x /usr/local/bin/kubectl

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

sudo yum -y install jq gettext bash-completion moreutils
echo 'yq() {
  docker run --rm -i -v "${PWD}":/workdir mikefarah/yq "$@"
}' | tee -a ~/.bashrc && source ~/.bashrc

kubectl completion bash >>  ~/.bash_completion
. /etc/profile.d/bash_completion.sh
. ~/.bash_completion

for command in kubectl jq envsubst aws
  do
    which $command &>/dev/null && echo "$command in path" || echo "$command NOT FOUND"
  done

echo 'export LBC_VERSION="v2.4.1"' >>  ~/.bash_profile
echo 'export LBC_CHART_VERSION="1.4.1"' >>  ~/.bash_profile
.  ~/.bash_profile

aws kms create-alias --alias-name alias/eks --target-key-id $(aws kms create-key --query KeyMetadata.Arn --output text)
export MASTER_ARN=$(aws kms describe-key --key-id alias/eks --query KeyMetadata.Arn --output text)
echo "export MASTER_ARN=${MASTER_ARN}" | tee -a ~/.bash_profile

curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | tar xz -C /tmp

sudo mv -v /tmp/eksctl /usr/local/bin

eksctl version

eksctl completion bash >> ~/.bash_completion
. /etc/profile.d/bash_completion.sh
. ~/.bash_completion

export ACCOUNT_ID=$(aws sts get-caller-identity --output text --query Account)
export AWS_REGION=$(curl -s 169.254.169.254/latest/dynamic/instance-identity/document | jq -r '.region')
export AZS=($(aws ec2 describe-availability-zones --query 'AvailabilityZones[].ZoneName' --output text --region $AWS_REGION))

test -n "$AWS_REGION" && echo AWS_REGION is "$AWS_REGION" || echo AWS_REGION is not set

echo "export ACCOUNT_ID=${ACCOUNT_ID}" | tee -a ~/.bash_profile
echo "export AWS_REGION=${AWS_REGION}" | tee -a ~/.bash_profile
echo "export AZS=(${AZS[@]})" | tee -a ~/.bash_profile
aws configure set default.region ${AWS_REGION}
aws configure get default.region

cat << EOF > eks.yaml
---
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig

metadata:
  name: eks-students
  region: ${AWS_REGION}
  version: "1.25"

availabilityZones: ["${AZS[0]}", "${AZS[1]}"]

managedNodeGroups:
- name: nodegroup
  desiredCapacity: 2
  instanceType: t3.medium
  ssh:
    enableSsm: true

# To enable all of the control plane logs, uncomment below:
# cloudWatch:
#  clusterLogging:
#    enableTypes: ["*"]

secretsEncryption:
  keyARN: ${MASTER_ARN}
EOF


eksctl create cluster -f eks.yaml

git clone https://github.com/handson-academy/ops-basic-spring

manually copy the templates and replace values
deployment.yaml
image from ecr

service.yaml:
service:
  type: LoadBalancer
  port: 8081


kubectl apply -f deployment.yaml 
kubectl get deployment
kubectl get pods

kubectl apply -f service.yaml
kubectl get service
kubectl logs [podid]
kubectl exec -it [podid] -- /bin/bash
kubectl describe service springboot-service
kubectl get service springboot-service -o yaml
kubectl scale deployment   springboot-deployment   --replicas=1
kubectl delete -f deployment.yaml 
kubectl delete -f service.yaml 

rm -rf ops-basic-spring
git clone https://github.com/handson-academy/ops-basic-spring

curl https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 > get_helm.sh
chmod 700 get_helm.sh
./get_helm.sh

update ecr in values.yaml

helm upgrade -i springboot springboot/ --values springboot/values.yaml
helm list

go to https://artifacthub.io/packages/helm/groundhog2k/postgres

helm repo add groundhog2k  https://groundhog2k.github.io/helm-charts/
helm repo list
helm search repo postgres
helm show values groundhog2k/postgres > postgres-values.yaml
helm install my-postgres groundhog2k/postgres -f postgres-values.yaml
update the database, user and password

helm list
kubectl get pods

        		{
			"Effect": "Allow",
			"Principal": {
				"AWS": "arn:aws:iam::304303674048:user/academy"
			},
			"Action": "sts:AssumeRole"
		}

helm delete springboot
helm delete my-postgres
https://phoenixnap.com/kb/helm-commands-cheat-sheet

<settings xmlns="http://maven.apache.org/SETTINGS/1.1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.1.0 http://maven.apache.org/xsd/settings-1.1.0.xsd">
  <servers>
    <server>
      <id>gitlab-maven</id>
      <configuration>
        <httpHeaders>
          <property>
            <name>Job-Token</name>
            <value>${CI_JOB_TOKEN}</value>
          </property>
        </httpHeaders>
      </configuration>
    </server>
  </servers>
</settings>

variables:
  DOCKER_REGISTRY: [eks-ecr no /]
  AWS_DEFAULT_REGION: eu-north-1
  APP_NAME: students_eks
  DOCKER_HOST: tcp://docker:2375
  EKS_ROLE: [eks-admin urn]

publish:
  image: 
    name: maven:3.8.1-openjdk-11
    entrypoint: [""]
  services:
    - docker:dind
  before_script:
    - apt-get update
    - apt-get install -y python3-pip
    - pip3 install awscli
    - aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
    - aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
    - aws configure set region $AWS_DEFAULT_REGION
    - export DB_URL=$(aws ssm get-parameter --name "students_staging_eks" --query "Parameter.Value" --output text)
    - echo $DB_URL
    - export DB_PASSWORD=$(aws ssm get-parameter --name "students_staging_eks_password" --query "Parameter.Value" --output text)
    - echo $DB_PASSWORD
    - export DB_USER=$(aws ssm get-parameter --name "students_staging_eks_user" --query "Parameter.Value" --output text)
    - echo $DB_USER
    - sed -i "s#spring.datasource.url=.*#spring.datasource.url=${DB_URL}#g"  src/main/resources/application.properties
    - sed -i "s#spring.datasource.username=.*#spring.datasource.username=${DB_USER}#g"  src/main/resources/application.properties
    - sed -i "s#spring.datasource.password=.*#spring.datasource.password=${DB_PASSWORD}#g"  src/main/resources/application.properties
    - cat src/main/resources/application.properties
    - apt-get update
    - apt-get install -y curl
    - curl -fsSL https://get.docker.com | sh
    - aws --version
    - docker --version
    - mvn --version

  script:
    - mvn clean install
    - aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin $DOCKER_REGISTRY
    - docker build -t $DOCKER_REGISTRY/$APP_NAME:$CI_PIPELINE_IID . 
    - docker push $DOCKER_REGISTRY/$APP_NAME:$CI_PIPELINE_IID  

deploy_to_eks:
  stage: deploy
  image: registry.gitlab.com/gitlab-org/cloud-deploy/aws-base:latest
  before_script:
    - export KUBECTL_VERSION=v1.25
    - curl -o kubectl https://s3.us-west-2.amazonaws.com/amazon-eks/1.25.2/2021-07-05/bin/linux/amd64/kubectl
    - chmod +x ./kubectl
    - mkdir -p $HOME/bin && cp ./kubectl $HOME/bin/kubectl && export PATH=$PATH:$HOME/bin
    - curl https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 > get_helm.sh
    - chmod 700 get_helm.sh
    - ./get_helm.sh
    - aws --version
    - aws sts assume-role --role-arn "$EKS_ROLE" --role-session-name AWSCLI-Session
    - aws eks update-kubeconfig --name eks-students --region $AWS_DEFAULT_REGION --role-arn $EKS_ROLE
    - aws sts get-caller-identity
    
 
  script:
    - sed -i "s/latest/$CI_PIPELINE_IID/" springboot/values.yaml
    - helm upgrade -i springboot springboot/ --values springboot/values.yaml

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PublicRead",
            "Effect": "Allow",
            "Principal": "*",
            "Action": [
                "s3:GetObject",
                "s3:GetObjectVersion"
            ],
            "Resource": "arn:aws:s3:::eks-stage.nivitzhaky.com/*"
        }
    ]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PublicRead",
            "Effect": "Allow",
            "Principal": "*",
            "Action": [
                "s3:GetObject",
                "s3:GetObjectVersion"
            ],
            "Resource": "arn:aws:s3:::eks-staging.nivitzhaky.com/*"
        }
    ]
}

BACKEND_URL_EKS -> https:\/\/eks.nivitzhaky.com\/api

build stage:  
   image: doctrine/nodejs-aws-cli:v10.19
   stage: build  
   only:    
      - eks  
   script:
      - echo $BACKEND_URL_EKS
      - sed -i "s/backend_url/'$BACKEND_URL_EKS'/" src/environments/environment.ts
      - sed -i "s/backend_url/'$BACKEND_URL_EKS'/" src/environments/environment.prod.ts    
      - cat src/environments/environment.ts
      - cat src/environments/environment.prod.ts
      - npm install --save --legacy-peer-deps    
      # Build App    
      - npm run build 
   artifacts:    
      paths:      
         # Build folder      
         - dist/    
      expire_in: 1 hour

deploy stage:  
   image: python:latest  
   stage: deploy  
   only:    
      - eks  
   script:    
      - pip install awscli    
      - aws s3 sync ./dist/webapp/ s3://eks-staging.nivitzhaky.com