Infrastructure - Gateway de Pagamento

Este diretório contém toda a infraestrutura como código e scripts de deployment.

Estrutura

Docker (/docker)

• Objetivo: Containerização da aplicação

• Arquivos necessários:

  • Dockerfile - Container principal da aplicação

  • Dockerfile.nginx - Container do servidor web

  • docker-compose.yml - Orquestração para desenvolvimento

  • docker-compose.prod.yml - Orquestração para produção

  • .dockerignore - Exclusões do build

  • entrypoint.sh - Script de inicialização

Kubernetes (/kubernetes)

• Objetivo: Orquestração em produção com Kubernetes

• Arquivos necessários:

  • namespace.yaml - Namespace dedicado

  • deployment.yaml - Deployment da aplicação

  • service.yaml - Serviços internos

  • ingress.yaml - Ingress para exposição externa

  • configmap.yaml - Configurações não-sensíveis

  • secret.yaml - Configurações sensíveis

  • hpa.yaml - Horizontal Pod Autoscaler

  • network-policy.yaml - Políticas de rede

Scripts (/scripts)

• Objetivo: Scripts de automação e deployment

• Arquivos necessários:

  • deploy.sh - Script principal de deploy

  • backup-database.sh - Backup do banco de dados

  • restore-database.sh - Restore do banco

  • health-check.sh - Verificação de saúde

  • rollback.sh - Rollback de versão

  • setup-env.sh - Configuração de ambiente

Docker Configuration

Dockerfile Exemplo

FROM node:18-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production

FROM node:18-alpine
RUN addgroup -g 1001 -S nodejs
RUN adduser -S nodeuser -u 1001
WORKDIR /app
COPY --from=builder /app/node_modules ./node_modules
COPY --chown=nodeuser:nodejs . .
USER nodeuser
EXPOSE 3000
CMD ["npm", "start"]

Docker Compose para Desenvolvimento

version: '3.8'
services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=development
      - DATABASE_URL=postgresql://user:pass@postgres:5432/payment_gateway
    depends_on:
      - postgres
      - redis
    
  postgres:
    image: postgres:15
    environment:
      - POSTGRES_DB=payment_gateway
      - POSTGRES_USER=user
      - POSTGRES_PASSWORD=pass
    volumes:
      - postgres_data:/var/lib/postgresql/data
    
  redis:
    image: redis:7-alpine
    volumes:
      - redis_data:/data

volumes:
  postgres_data:
  redis_data:

Kubernetes Deployment

Deployment Configuration

apiVersion: apps/v1
kind: Deployment
metadata:
  name: payment-gateway
  namespace: payment-system
spec:
  replicas: 3
  selector:
    matchLabels:
      app: payment-gateway
  template:
    metadata:
      labels:
        app: payment-gateway
    spec:
      containers:
      - name: payment-gateway
        image: payment-gateway:latest
        ports:
        - containerPort: 3000
        env:
        - name: NODE_ENV
          value: "production"
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              name: payment-secrets
              key: database-url
        livenessProbe:
          httpGet:
            path: /health
            port: 3000
          initialDelaySeconds: 30
          periodSeconds: 10
        readinessProbe:
          httpGet:
            path: /ready
            port: 3000
          initialDelaySeconds: 5
          periodSeconds: 5
        resources:
          requests:
            memory: "256Mi"
            cpu: "250m"
          limits:
            memory: "512Mi"
            cpu: "500m"

Service Configuration

apiVersion: v1
kind: Service
metadata:
  name: payment-gateway-service
  namespace: payment-system
spec:
  selector:
    app: payment-gateway
  ports:
    - protocol: TCP
      port: 80
      targetPort: 3000
  type: ClusterIP

Security Considerations

Container Security

• Non-root user execution

• Multi-stage builds para reduzir attack surface

• Minimal base images (Alpine)

• Regular security scanning

• Secrets management via Kubernetes secrets

Network Security

• Network policies para isolamento

• TLS encryption entre serviços

• Private container registry

• VPC/subnet segregation

Deployment Strategies

Blue-Green Deployment

• Zero downtime deployments

• Quick rollback capability

• Full environment testing

• Traffic switching

Rolling Updates

• Gradual pod replacement

• Health checks durante update

• Automatic rollback on failure

• Resource optimization

Canary Deployment

• Gradual traffic shifting

• A/B testing capability

• Risk mitigation

• Performance monitoring

Monitoring and Observability

Prometheus Integration

apiVersion: v1
kind: ServiceMonitor
metadata:
  name: payment-gateway-metrics
spec:
  selector:
    matchLabels:
      app: payment-gateway
  endpoints:
  - port: metrics
    interval: 30s
    path: /metrics

Logging Configuration

• Centralized logging com ELK stack

• Structured JSON logs

• Log aggregation por namespace

• Retention policies

Backup and Disaster Recovery

Database Backup

• Automated daily backups

• Point-in-time recovery

• Cross-region replication

• Backup encryption

Application State

• Stateless application design

• Configuration externalization

• Secret rotation procedures

• Recovery testing

Scalability

Horizontal Pod Autoscaler

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: payment-gateway-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: payment-gateway
  minReplicas: 3
  maxReplicas: 100
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 70
  - type: Resource
    resource:
      name: memory
      target:
        type: Utilization
        averageUtilization: 80

Recommended Tools

Infrastructure as Code

• Terraform para provisionamento

• Helm para package management

• Kustomize para configuração

CI/CD

• GitHub Actions ou GitLab CI

• ArgoCD para GitOps

• Tekton para pipelines nativos K8s

Security

• Falco para runtime security

• OPA Gatekeeper para policies

• Cert-manager para certificados