Microservice Pattern — EMS Service Bootstrap Baseline

<parent>
    <groupId>za.co.idealogic</groupId>
    <artifactId>event</artifactId>
    <version>1.3.1</version>
</parent>

<artifactId>my-service</artifactId>
<version>${revision}</version>
<packaging>jar</packaging>

<properties>
    <revision>0.1.0-SNAPSHOT</revision>
    <java.version>17</java.version>
    <start-class>za.co.idealogic.event.myservice.MyServiceApp</start-class>
    <!-- OTel agent locations — same conventions across the fleet -->
    <agent-extraction-root>${project.build.directory}/jib-agents</agent-extraction-root>
    <agent-install-location>/javaagent</agent-install-location>
    <opentelemetry-javaagent-filename>opentelemetry-javaagent.jar</opentelemetry-javaagent-filename>
    <opentelemetry-javaagent.version>2.10.0</opentelemetry-javaagent.version>
</properties>

<repositories>
    <repository>
        <id>github-christhonie</id>
        <url>https://maven.pkg.github.com/christhonie/event</url>
        <releases><enabled>true</enabled><checksumPolicy>fail</checksumPolicy></releases>
        <snapshots><enabled>false</enabled></snapshots>
    </repository>
</repositories>

<!-- 1. Always download the OTel agent into the build output -->
<plugin>
    <groupId>org.apache.maven.plugins</groupId>
    <artifactId>maven-dependency-plugin</artifactId>
    <executions>
        <execution>
            <id>copy-javaagent</id>
            <phase>package</phase>
            <goals><goal>copy</goal></goals>
            <configuration>
                <artifactItems>
                    <artifactItem>
                        <groupId>io.opentelemetry.javaagent</groupId>
                        <artifactId>opentelemetry-javaagent</artifactId>
                        <version>${opentelemetry-javaagent.version}</version>
                        <outputDirectory>${agent-extraction-root}</outputDirectory>
                        <destFileName>${opentelemetry-javaagent-filename}</destFileName>
                    </artifactItem>
                </artifactItems>
            </configuration>
        </execution>
    </executions>
</plugin>

<!-- 2. Jib copies it into the image at /javaagent/opentelemetry-javaagent.jar -->
<plugin>
    <groupId>com.google.cloud.tools</groupId>
    <artifactId>jib-maven-plugin</artifactId>
    <configuration>
        <to>
            <image>docker.io/christhonie/<service-name>:${project.version}</image>
        </to>
        <extraDirectories>
            <paths>
                <path>
                    <from>${agent-extraction-root}</from>
                    <into>${agent-install-location}</into>
                </path>
            </paths>
        </extraDirectories>
        <container>
            <ports><port>12507</port></ports>
            <environment>
                <OTEL_SERVICE_NAME>${project.artifactId}</OTEL_SERVICE_NAME>
            </environment>
            <jvmFlags>
                <jvmFlag>-Djava.security.egd=file:/dev/./urandom</jvmFlag>
                <jvmFlag>-XX:+UseContainerSupport</jvmFlag>
                <jvmFlag>-XX:MaxRAMPercentage=75.0</jvmFlag>
                <jvmFlag>-javaagent:${agent-install-location}/${opentelemetry-javaagent-filename}</jvmFlag>
                <jvmFlag>-Dotel.logs.exporter=otlp</jvmFlag>
                <jvmFlag>-Dotel.traces.exporter=otlp</jvmFlag>
                <jvmFlag>-Dotel.metrics.exporter=otlp</jvmFlag>
            </jvmFlags>
            <mainClass>${start-class}</mainClass>
        </container>
    </configuration>
</plugin>

<service>/src/main/helm/
├── Chart.yaml
├── values.yaml
└── templates/
    ├── deployment.yaml
    ├── service.yaml
    ├── ingress.yaml
    ├── serviceaccount.yaml
    ├── _helpers.tpl
    └── NOTES.txt

config:
    profiles: "prod,otlp"             # comma-separated Spring profiles
    existingsecret: ""                 # K8s Secret name; chart reads, never creates in prod

image:
    repository: docker.io/christhonie/<service-name>
    pullPolicy: IfNotPresent           # Always for dev (mutable SNAPSHOT tags)

imagePullSecrets:
    - name: christhonie-docker

ingress:
    enabled: false
    className: nginx
    annotations: {}
    hosts: []
    tls: []

resources:
    requests: { cpu: 100m, memory: 256Mi }
    limits:   { memory: 512Mi }

replicaCount: 1

podAnnotations: {}                     # populated by the workflow with build-sha; see § Rollover trigger

podSecurityContext:
    fsGroup: 1000
securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    allowPrivilegeEscalation: false
    readOnlyRootFilesystem: false
    capabilities:
        drop: [ALL]

template:
  metadata:
    annotations:
      config/secret-version: {{ .Values.config.existingsecret | default "none" | quote }}
      {{- with .Values.podAnnotations }}
      {{- toYaml . | nindent 8 }}
      {{- end }}

<profile>
    <id>otlp</id>
    <properties>
        <profile.otlp>,otlp</profile.otlp>
    </properties>
    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>io.opentelemetry.instrumentation</groupId>
                <artifactId>opentelemetry-instrumentation-bom</artifactId>
                <version>2.10.0</version>
                <type>pom</type><scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>io.opentelemetry.instrumentation</groupId>
            <artifactId>opentelemetry-spring-boot-starter</artifactId>
        </dependency>
        <dependency>
            <groupId>io.opentelemetry.instrumentation</groupId>
            <artifactId>opentelemetry-instrumentation-annotations</artifactId>
        </dependency>
        <dependency>
            <groupId>io.opentelemetry.instrumentation</groupId>
            <artifactId>opentelemetry-logback-appender-1.0</artifactId>
            <version>2.10.0-alpha</version>
        </dependency>
    </dependencies>
</profile>

management:
  metrics:
    export:
      otlp:
        enabled: true

otel:
  java:
    global-autoconfigure:
      enabled: true
  exporter:
    otlp:
      endpoint: 'http://opentelemetry-collector.observability.svc.cluster.local:4317'
    jaeger:
      enabled: false
    zipkin:
      enabled: false
  springboot:
    resource:
      enable: true
  resource:
    attributes:
      'service.version': '${project.version}'
      'deployment.environment': production
  instrumentation:
    annotations:
      enabled: true
    logback-appender.enabled: true
    spring-web.enabled: false
    spring-webmvc.enabled: false
    spring-webflux.enabled: false

log.info("event=tool.invocation actor={} tool={} params={} latencyMs={} outcome={}",
    sub, toolName, args, latency, outcome);