Running It & the Final Project
Run, observe, and defend a complete GraphQL tracking system across Compose, minikube and OpenShift Local.
Local with Docker Compose
The tracking view as one local tier: an nginx edge that terminates TLS 1.3, caps request bodies and routes only /graphql, an internal backend network, configuration and secrets kept outside the images, health-ordered start, resource limits, restart and shutdown settings, and a request followed from the edge to its trace and its log record.
Kubernetes on minikube
The two stacks of Chapter 25 as one Helm release on minikube: a values map for both stacks, ConfigMaps, a chart-generated TLS Secret, startup, readiness and liveness probes, a NodePort edge published at cluster creation, the pod named in each trace, a NetworkPolicy and helm test.
The final project
The whole tracking view as one system: the complete schema with subscriptions over WebSocket and SSE, query limits, Keycloak tokens with operation, object and field authorization on every path, introspection on internal instances only, one edge in front, telemetry by trace id and a k6 load, the same images in every tier.
Appendix A — OpenShift Local (CRC)
Chapter 27's chart on OpenShift Local through a wrapper chart: Docker-strategy builds in the cluster, Routes with edge TLS at the router, restricted-v2 for every pod but one, and a teardown that returns the cluster to the state it started in; the image pruner removes the unreferenced build layers.