PostgreSQL on Kubernetes for NHS Patient Monitoring

What is this project for?

Table of Contents

Prerequisites

aws --version
terraform --version
kubectl version --client
helm version
git --version

Overview

Architecture & Approach

Why This Approach?

How the Components Fit Together

Deployment Process

Security Considerations

GitOps Extension

What is GitOps?

How to Implement GitOps with this Repository

Benefits for NHS

Trade-offs

Validation

Basic Checks

# 1. Check generated password
terraform output postgres_password

# 2. Confirm namespace and secret
kubectl get ns patient-monitoring
kubectl get secret postgres-secrets -n patient-monitoring

# 3. Verify StorageClass and CSI driver
kubectl get storageclass
kubectl get csidrivers

# 4. Check pods, and PVC
kubectl get pods,pvc -n patient-monitoring

Extended Checks

Future Enhancements

Debug Script (PowerShell)

Write-Output "===== Checking AWS Credentials ====="
aws sts get-caller-identity

Write-Output "===== Checking EKS Cluster ====="
aws eks describe-cluster --name nhs-patient-monitoring --query "cluster.status"

Write-Output "===== Configuring kubectl ====="
aws eks update-kubeconfig --region eu-west-2 --name nhs-patient-monitoring

Write-Output "===== Checking Nodes ====="
kubectl get nodes -o wide

Write-Output "===== Checking EBS CSI Driver ====="
kubectl get pods -n kube-system | Where-Object { $_ -match "ebs-csi" }

Write-Output "===== Checking StorageClass ====="
kubectl get storageclass

Write-Output "===== Checking Namespace ====="
try { kubectl get all -n patient-monitoring } catch { Write-Output "Namespace not found" }

Write-Output "===== Checking Events ====="
try { kubectl get events -n patient-monitoring --sort-by='.lastTimestamp' } catch { Write-Output "No events" }

Write-Output "===== Checking PVCs ====="
try { kubectl get pvc -n patient-monitoring } catch { Write-Output "No PVCs" }

Write-Output "===== Checking Pod Logs ====="
try {
  $pod = kubectl get pods -n patient-monitoring -l app.kubernetes.io/name=postgresql -o jsonpath="{.items[0].metadata.name}"
  if ($pod) { kubectl logs -n patient-monitoring $pod } else { kubectl get events -n patient-monitoring }
} catch { Write-Output "Error fetching logs" }

Write-Output "===== Checking Node Capacity ====="
kubectl describe nodes | Select-String -Pattern "Capacity:" -Context 0,5

Write-Output "===== Debug Complete ====="