GRPC switch

Reviewed-on: #106

.drone.yml

@@ -1,82 +1,68 @@
+---
 kind: pipeline
 type: docker
-name: cicd-pipeline
+name: build-and-package
-
-# Let Drone handle the clone automatically; it's faster and cleaner.
-clone:
-  depth: 1
 
 steps:
-  # --- BUILD & TEST STAGE ---
+  - name: build-test-publish
-  - name: build-and-test
+    image: nexus.khongisa.co.za/sdk:10.0
-    image: mcr.microsoft.com/dotnet/sdk:10.0
     commands:
-      - dotnet build --configuration Release
+      - dotnet restore --source https://nexus.khongisa.co.za/repository/nuget-group/index.json --no-cache
-      - dotnet test --configuration Release
+      - dotnet build --configuration Release --no-restore
+      - dotnet test --configuration Release --no-build
+      - dotnet publish --configuration Release --no-build
 
-  # --- PACKAGE STAGE ---
+  - name: docker-build-and-push
-  # We build the image locally first so we can scan it BEFORE pushing
-  - name: docker-build
     image: plugins/docker
     settings:
       registry: nexus.khongisa.co.za
-      repo: nexus.khongisa.co.za/mngomalab/webapitest
+      repo: nexus.khongisa.co.za/webapitest
       tags: [ "${DRONE_BUILD_NUMBER}", "latest" ]
-      username:
+      username: { from_secret: docker_username }
-        from_secret: docker_username
+      password: { from_secret: docker_password }
-      password:
-        from_secret: docker_password
-      # This builds the image and loads it into the local cache for scanning
-      dry_run: true 
-      # Set to false once you verify the scan passes, or see the step below
 
   - name: vulnerability-scan
-    image: aquasec/trivy
+    image: aquasec/trivy:0.50.1
     environment:
-      # Trivy needs these to pull the image from your Nexus to scan it
+      TRIVY_USERNAME: { from_secret: docker_username }
-      TRIVY_USERNAME:
+      TRIVY_PASSWORD: { from_secret: docker_password }
-        from_secret: docker_username
-      TRIVY_PASSWORD:
-        from_secret: docker_password
     commands:
-      - trivy image --exit-code 1 --severity CRITICAL nexus.khongisa.co.za/mngomalab/webapitest:${DRONE_BUILD_NUMBER}
+      - trivy image --image-src remote --exit-code 1 --severity CRITICAL nexus.khongisa.co.za/webapitest:${DRONE_BUILD_NUMBER}
 
-  - name: docker-push
+trigger:
-    image: plugins/docker
+  branch:
-    settings:
+    - main
-      registry: nexus.khongisa.co.za
+  event:
-      repo: nexus.khongisa.co.za/mngomalab/webapitest
+    exclude:
-      tags: [ "${DRONE_BUILD_NUMBER}", "latest" ]
+      - promote
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
 
-  # --- DEPLOY STAGE ---
+---
-  - name: deploy-uat
+kind: pipeline
+type: docker
+name: deploy-to-uat
+
+depends_on:
+  - build-and-package
+
+steps:
+  - name: uat-deployment
     image: appleboy/drone-ssh
     settings:
-      host: 
+      host: { from_secret: ssh_host }
-        from_secret: ssh_host
+      username: { from_secret: ssh_user }
-      username: 
+      password: { from_secret: ssh_password }
-        from_secret: ssh_user
-      password: 
-        from_secret: ssh_password
       script:
-        # Login to Nexus on the remote server
         - echo $DOCKER_PASSWORD | docker login nexus.khongisa.co.za -u $DOCKER_USERNAME --password-stdin
-        - docker pull nexus.khongisa.co.za/mngomalab/webapitest:latest
+        - docker pull nexus.khongisa.co.za/webapitest:latest
-        # Standard Linux cleanup
         - docker stop webapi 2>/dev/null || true
         - docker rm webapi 2>/dev/null || true
-        - docker run -d --name webapi --restart unless-stopped -e ASPNETCORE_ENVIRONMENT=Development -p 4000:8081 nexus.khongisa.co.za/mngomalab/webapitest:latest
+        - docker run -d --name webapi --restart unless-stopped -e ASPNETCORE_ENVIRONMENT=Development -p 4000:8081 nexus.khongisa.co.za/webapitest:latest
     environment:
-      DOCKER_USERNAME:
+      DOCKER_USERNAME: { from_secret: docker_username }
-        from_secret: docker_username
+      DOCKER_PASSWORD: { from_secret: docker_password }
-      DOCKER_PASSWORD:
-        from_secret: docker_password
 
 trigger:
   event:
-    exclude:
+    - promote
-      - promote
+  target:
+    - staging

Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS final
+FROM nexus.khongisa.co.za/aspnet:10.0 AS final
 WORKDIR /app
 
 USER app

SampleApi/Controllers/DemoController.cs

@@ -1,4 +1,5 @@
 using Microsoft.AspNetCore.Mvc;
+using System.Diagnostics;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -8,10 +9,17 @@ namespace SampleApi.Controllers
     [ApiController]
     public class DemoController : ControllerBase
     {
+        private static readonly ActivitySource MyActivitySource = new("SampleApi");
+
         // GET: api/<DemoController>
         [HttpGet]
-        public IEnumerable<string> Get()
+        public IEnumerable<string> Get(ILogger<DemoController> logger)
         {
+            using var activity = MyActivitySource.StartActivity("ManualTraceTest");
+            activity?.SetTag("test.status", "success");
+
+            logger.LogInformation("sample api log");
+
             return new string[] { "value1", "value2" };
         }
 

SampleApi/Program.cs

@@ -1,9 +1,69 @@
+using OpenTelemetry.Exporter;
+using OpenTelemetry.Logs;
+using OpenTelemetry.Metrics;
+using OpenTelemetry.Resources;
+using OpenTelemetry.Trace;
+using System.Diagnostics.Metrics;
+
 var builder = WebApplication.CreateBuilder(args);
 
+// ONLY FOR TESTING: Allow untrusted certificates
+var handler = new HttpClientHandler
+{
+    ServerCertificateCustomValidationCallback = (message, cert, chain, errors) => true
+};
+builder.Services.AddHttpClient("OtlpClient").ConfigurePrimaryHttpMessageHandler(() => handler);
+
+// 1. Define Resource Information
+var resourceBuilder = ResourceBuilder.CreateDefault()
+    .AddService("SampleApi");
+
+// 2. Configuration Variables 
+// Using the API Key from your aspire-dashboard-auth secret
+var oltpApiKey = "mc3G63K2j5ZOEsi0AjMojLTXm1KEZFctzIIjSwDiTGut8qGSkPuWwxGP1RbscJUo";
+
+// Pointing to your Traefik IngressRoute. 
+// The SDK will append /v1/traces, /v1/metrics, etc., to this base URL
+var oltpAddress = "https://aspire.khongisa.co.za/otlp-grpc";
+//var oltpAddress = "https://aspire.khongisa.co.za/otlp-http";
+
 builder.Services.AddControllers();
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen();
-builder.Services.AddHealthChecks();
+
+// 3. Configure OpenTelemetry Logging
+builder.Logging.AddOpenTelemetry(logging =>
+{
+    logging.SetResourceBuilder(resourceBuilder);
+    logging.AddOtlpExporter(opt =>
+    {
+        opt.Endpoint = new Uri(oltpAddress);
+        opt.Protocol = OtlpExportProtocol.Grpc; // Switched to gRPC
+        // Note: Headers are only needed if you re-enable ApiKey auth mode
+    });
+});
+
+// 4. Configure Tracing and Metrics
+builder.Services.AddOpenTelemetry()
+    .WithTracing(tracing => tracing
+        .SetResourceBuilder(resourceBuilder)
+        .AddAspNetCoreInstrumentation()
+        .AddHttpClientInstrumentation()
+        .AddOtlpExporter(opt =>
+        {
+            opt.Endpoint = new Uri(oltpAddress);
+            opt.Protocol = OtlpExportProtocol.Grpc;
+        }))
+    .WithMetrics(metrics => metrics
+        .SetResourceBuilder(resourceBuilder)
+        .AddMeter("SampleApi")
+        .AddAspNetCoreInstrumentation()
+        .AddRuntimeInstrumentation()
+        .AddOtlpExporter(opt =>
+        {
+            opt.Endpoint = new Uri(oltpAddress);
+            opt.Protocol = OtlpExportProtocol.Grpc;
+        }));
 
 var app = builder.Build();
 
@@ -13,10 +73,9 @@ if (app.Environment.IsDevelopment())
     app.UseSwaggerUI();
 }
 
-app.MapHealthChecks("/health");
 app.UseRouting();
-app.UseHttpsRedirection();
 app.UseAuthorization();
 app.MapControllers();
 
 app.Run();
+app.Run();

SampleApi/Properties/launchSettings.json

@@ -8,7 +8,7 @@
         "ASPNETCORE_ENVIRONMENT": "Development"
       },
       "dotnetRunMessages": true,
-      "applicationUrl": "http://localhost:5221"
+      "applicationUrl": "http://0.0.0.0:5000"
     },
     "https": {
       "commandName": "Project",

SampleApi/SampleApi.csproj

@@ -10,6 +10,11 @@
 
   <ItemGroup>
     <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.23.0" />
+    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
+    <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.15.3" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
     <PackageReference Include="Polly" Version="8.6.6" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="10.1.7" />
   </ItemGroup>