🔱 Fork Notice: This is a fork of GoogleCloudPlatform/microservices-demo customized for demonstrating AWS Security Agent and AWS DevOps Agent capabilities on Amazon EKS.

🌐 Live Demo: https://boutique.dev.ops4life.com

Online Boutique is a cloud-first microservices demo application. The application is a web-based e-commerce app where users can browse items, add them to the cart, and purchase them.

This fork demonstrates how AWS Security Agent and AWS DevOps Agent can be used for security assessment, penetration testing, autonomous incident response, and root cause analysis on Amazon EKS deployments. The application works on any Kubernetes cluster and is primarily deployed on Amazon EKS for AWS agent demonstrations.

Originally developed by Google to demonstrate modernizing enterprise applications using Google Cloud products. This application maintains compatibility with various cloud platforms while focusing on AWS-based security and DevOps automation capabilities.

If you're using this demo, please ★Star this repository to show your interest!

Architecture

Online Boutique is composed of 11 microservices written in different languages that talk to each other over gRPC.

Find Protocol Buffers Descriptions at the ./protos directory.

Service	Language	Description
frontend	Go	Exposes an HTTP server to serve the website. Does not require signup/login and generates session IDs for all users automatically.
cartservice	C#	Stores the items in the user's shopping cart in Redis and retrieves it.
productcatalogservice	Go	Provides the list of products from a JSON file and ability to search products and get individual products.
currencyservice	Node.js	Converts one money amount to another currency. Uses real values fetched from European Central Bank. It's the highest QPS service.
paymentservice	Node.js	Charges the given credit card info (mock) with the given amount and returns a transaction ID.
shippingservice	Go	Gives shipping cost estimates based on the shopping cart. Ships items to the given address (mock)
emailservice	Python	Sends users an order confirmation email (mock).
checkoutservice	Go	Retrieves user cart, prepares order and orchestrates the payment, shipping and the email notification.
recommendationservice	Python	Recommends other products based on what's given in the cart.
adservice	Java	Provides text ads based on given context words.
loadgenerator	Python/Locust	Continuously sends requests imitating realistic user shopping flows to the frontend.

Screenshots

Home Page	Checkout Screen

Quickstart (Amazon EKS)

1. Ensure you have the following requirements:

   • AWS Account
   • Shell environment with aws, git, and kubectl
   • eksctl or AWS CLI for cluster creation

2. Clone this repository.

   git clone https://github.com/duyluann/microservices-demo.git
   cd microservices-demo/

3. Set your AWS region.

   export AWS_REGION=ap-southeast-1  # or your preferred region

4. Create an EKS cluster.

   Using eksctl:

   eksctl create cluster \
     --name online-boutique \
     --region ${AWS_REGION} \
     --nodes 3 \
     --node-type t3.medium

   Creating the cluster may take 15-20 minutes.

5. Deploy Online Boutique to the cluster.

   kubectl apply -f ./release/kubernetes-manifests.yaml

6. Wait for the pods to be ready.

   kubectl get pods

   After a few minutes, you should see the Pods in a Running state:

   NAME                                     READY   STATUS    RESTARTS   AGE
   adservice-76bdd69666-ckc5j               1/1     Running   0          2m58s
   cartservice-66d497c6b7-dp5jr             1/1     Running   0          2m59s
   checkoutservice-666c784bd6-4jd22         1/1     Running   0          3m1s
   currencyservice-5d5d496984-4jmd7         1/1     Running   0          2m59s
   emailservice-667457d9d6-75jcq            1/1     Running   0          3m2s
   frontend-6b8d69b9fb-wjqdg                1/1     Running   0          3m1s
   loadgenerator-665b5cd444-gwqdq           1/1     Running   0          3m
   paymentservice-68596d6dd6-bf6bv          1/1     Running   0          3m
   productcatalogservice-557d474574-888kr   1/1     Running   0          3m
   recommendationservice-69c56b74d4-7z8r5   1/1     Running   0          3m1s
   redis-cart-5f59546cdd-5jnqf              1/1     Running   0          2m58s
   shippingservice-6ccc89f8fd-v686r         1/1     Running   0          2m58s
   

7. Access the web frontend in a browser using the LoadBalancer's external hostname.

   kubectl get service frontend-external | awk '{print $4}'

   Visit the external hostname in a web browser to access your instance of Online Boutique.

8. (Optional) Configure a custom domain with AWS Route 53 or your DNS provider to point to the LoadBalancer. See the live demo at https://boutique.dev.ops4life.com as an example.

9. Congrats! You've deployed Online Boutique on Amazon EKS. To set up AWS Security Agent or AWS DevOps Agent for demonstrations, see AWS Agent Demonstrations.

10. Once you are done with it, delete the EKS cluster.

    eksctl delete cluster --name online-boutique --region ${AWS_REGION}

    Deleting the cluster may take a few minutes.

Additional deployment options

• GKE (Original deployment target): See Quickstart (GKE) below for deploying to Google Kubernetes Engine.
• Terraform: See these instructions to learn how to deploy Online Boutique using Terraform.
• Istio / Cloud Service Mesh: See these instructions to deploy Online Boutique alongside an Istio-backed service mesh.
• Non-GKE clusters (Minikube, Kind, etc): See the Development guide to learn how you can deploy Online Boutique on non-GKE clusters.
• AI assistant using Gemini: See these instructions to deploy a Gemini-powered AI assistant that suggests products to purchase based on an image.
• And more: The /kustomize directory contains instructions for customizing the deployment of Online Boutique with other variations.

Quickstart (GKE)

Click to expand GKE deployment instructions

1. Ensure you have the following requirements:

   • Google Cloud project.
   • Shell environment with gcloud, git, and kubectl.

2. Clone the original repository (or use this fork).

   git clone --depth 1 --branch v0 https://github.com/GoogleCloudPlatform/microservices-demo.git
   cd microservices-demo/

   The --depth 1 argument skips downloading git history.

3. Set the Google Cloud project and region and ensure the Google Kubernetes Engine API is enabled.

   export PROJECT_ID=<PROJECT_ID>
   export REGION=us-central1
   gcloud services enable container.googleapis.com \
     --project=${PROJECT_ID}

   Substitute <PROJECT_ID> with the ID of your Google Cloud project.

4. Create a GKE cluster and get the credentials for it.

   gcloud container clusters create-auto online-boutique \
     --project=${PROJECT_ID} --region=${REGION}

   Creating the cluster may take a few minutes.

5. Deploy Online Boutique to the cluster.

   kubectl apply -f ./release/kubernetes-manifests.yaml

6. Wait for the pods to be ready.

   kubectl get pods

   After a few minutes, you should see the Pods in a Running state:

   NAME                                     READY   STATUS    RESTARTS   AGE
   adservice-76bdd69666-ckc5j               1/1     Running   0          2m58s
   cartservice-66d497c6b7-dp5jr             1/1     Running   0          2m59s
   checkoutservice-666c784bd6-4jd22         1/1     Running   0          3m1s
   currencyservice-5d5d496984-4jmd7         1/1     Running   0          2m59s
   emailservice-667457d9d6-75jcq            1/1     Running   0          3m2s
   frontend-6b8d69b9fb-wjqdg                1/1     Running   0          3m1s
   loadgenerator-665b5cd444-gwqdq           1/1     Running   0          3m
   paymentservice-68596d6dd6-bf6bv          1/1     Running   0          3m
   productcatalogservice-557d474574-888kr   1/1     Running   0          3m
   recommendationservice-69c56b74d4-7z8r5   1/1     Running   0          3m1s
   redis-cart-5f59546cdd-5jnqf              1/1     Running   0          2m58s
   shippingservice-6ccc89f8fd-v686r         1/1     Running   0          2m58s
   

7. Access the web frontend in a browser using the frontend's external IP.

   kubectl get service frontend-external | awk '{print $4}'

   Visit http://EXTERNAL_IP in a web browser to access your instance of Online Boutique.

8. Congrats! You've deployed the default Online Boutique. To deploy a different variation of Online Boutique (e.g., with Google Cloud Operations tracing, Istio, etc.), see the kustomize directory.

9. Once you are done with it, delete the GKE cluster.

   gcloud container clusters delete online-boutique \
     --project=${PROJECT_ID} --region=${REGION}

   Deleting the cluster may take a few minutes.

AWS Agent Demonstrations

This fork is optimized for demonstrating AWS Security Agent and AWS DevOps Agent capabilities.

Live Demo: https://boutique.dev.ops4life.com

AWS Security Agent

Security assessment and penetration testing capabilities:

• AWS Security Agent Setup Guide

AWS DevOps Agent

Autonomous incident response and root cause analysis:

• AWS DevOps Agent Setup Guide
• Incident Scenarios - Common incident patterns and investigation workflows
• Deployment Integration - Enhanced observability and deployment tracking
• Prevention Guide - Proactive reliability improvements

Triggering Demo Incidents

This repository includes GitHub Actions workflows for triggering demo incidents to showcase AWS DevOps Agent's capabilities. See .github/workflows/trigger-incident.yaml for automated incident simulation.

Documentation

AWS-Specific Documentation

See the guides above for AWS Security Agent and AWS DevOps Agent setup and usage.

General Documentation

• Development Guide - Learn how to run and develop this app locally

About This Fork

This repository is maintained by @duyluann as a demonstration platform for AWS Security Agent and AWS DevOps Agent capabilities on Amazon EKS.

Original Project: GoogleCloudPlatform/microservices-demo

Fork Purpose:

• Demonstrate AWS Security Agent for security assessment and penetration testing
• Showcase AWS DevOps Agent for autonomous incident response and root cause analysis
• Provide AWS-specific deployment patterns and best practices
• Maintain compatibility with the upstream project while adding AWS-focused enhancements

Contributing:

• AWS-specific enhancements and documentation improvements are welcome
• For general Online Boutique features, please contribute to the upstream repository
• Create issues or pull requests for AWS agent integration improvements

Additional Demos and Resources

• Security hardening of the OnlineBoutique sample apps with the Docker Hardened Images (DHI)
• alpine, distroless or scratch?
• Platform Engineering in action: Deploy the Online Boutique sample apps with Score and Humanitec
• The new Kubernetes Gateway API with Istio and Anthos Service Mesh (ASM)
• Use Azure Redis Cache with the Online Boutique sample on AKS
• Sail Sharp, 8 tips to optimize and secure your .NET containers for Kubernetes
• Deploy multi-region application with Anthos and Google cloud Spanner
• Use Google Cloud Memorystore (Redis) with the Online Boutique sample on GKE
• Use Helm to simplify the deployment of Online Boutique, with a Service Mesh, GitOps, and more!
• How to reduce microservices complexity with Apigee and Anthos Service Mesh
• gRPC health probes with Kubernetes 1.24+
• Use Google Cloud Spanner with the Online Boutique sample
• Seamlessly encrypt traffic from any apps in your Mesh to Memorystore (redis)
• Strengthen your app's security with Cloud Service Mesh and Anthos Config Management
• From edge to mesh: Exposing service mesh applications through GKE Ingress
• Take the first step toward SRE with Cloud Operations Sandbox
• Deploying the Online Boutique sample application on Cloud Service Mesh
• Anthos Service Mesh Workshop: Lab Guide
• KubeCon EU 2019 - Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways - Steve Dake, Independent
• Google Cloud Next'18 SF
  • Day 1 Keynote showing GKE On-Prem
  • Day 3 Keynote showing Stackdriver APM (Tracing, Code Search, Profiler, Google Cloud Build)
  • Introduction to Service Management with Istio
• Google Cloud Next'18 London – Keynote showing Stackdriver Incident Response Management
• Microservices demo showcasing Go Micro