Video Converter Microservices Application Documentation

Overview

Video-to-MP3 microservices app on AWS EKS. Jenkins CI/CD builds images, pushes to ECR, installs infra with Helm, applies manifests, and sets deployments to the new images. Services: Auth (Flask/Postgres), Gateway (Flask/Mongo/RabbitMQ), Converter (MoviePy/RabbitMQ), Frontend (React/Nginx). Data: PostgreSQL for users, MongoDB GridFS for files, RabbitMQ queue for conversion jobs. Frontend lets users register, log in, upload MP4, poll status, and download MP3.

🎬 Demo Video

This is the first version (the old one)

Demo_Video.mp4

This is the last version (the new one)

New_Demo_Video.mp4

Old Architecture:

New Architecture:

The application consists of the following components:

Services

1. Auth Service (auth-service)

   • Technology: Flask, PostgreSQL, JWT
   • Port: 5000
   • Functionality: Handles user authentication and JWT token generation/validation
   • Database: PostgreSQL (authdb table: auth_user with email/password)
   • Endpoints:
     • POST /login: Authenticates user and returns JWT token

2. Gateway Service (gateway-service)

   • Technology: Flask, PyMongo, GridFS, Pika, JWT
   • Port: 8080 (NodePort: 30002)
   • Functionality: API gateway for file upload/download, auth validation, and storage operations
   • Endpoints:
     • POST /login: Proxies to auth service
     • POST /upload: Accepts MP4 file upload, stores in MongoDB, publishes to RabbitMQ 'video' queue
     • GET /download?fid=<file_id>: Downloads converted MP3 file from MongoDB

3. Converter Service (converter-service)

   • Technology: Pika, PyMongo, GridFS, MoviePy
   • Functionality: Consumes messages from 'video' queue, converts MP4 to MP3 using MoviePy, stores MP3 in MongoDB
   • Process:
     • Downloads video from MongoDB GridFS
     • Extracts audio using MoviePy
     • Saves MP3 to MongoDB GridFS (with metadata linking the original video_fid)

4. Removed: Notification Service (email)

   • Email notifications have been removed. Conversion progress is tracked via the gateway /status endpoint using the original video_fid.

5. Frontend Service (frontend-service)

   • Technology: React, Vite, Tailwind CSS, Nginx
   • Port: 80 (NodePort: 30001)
   • Functionality: User interface for login, video upload, conversion status checking, and MP3 download
   • Components:
     • Login: Authenticates user and obtains JWT token
     • Upload: Allows MP4 file selection and upload to gateway
     • Status: Polls conversion status using file ID
     • Download: Downloads converted MP3 file
   • Proxy Configuration: Nginx proxies /api requests to gateway service

Databases and Message Queue

• PostgreSQL: Deployed via Helm chart, stores user credentials
• MongoDB: Deployed via Helm chart, stores video and MP3 files using GridFS
• RabbitMQ: Deployed via Helm chart, handles async message passing between services
  • Queue: 'video' (for converter)

Infrastructure

• Kubernetes: All services deployed as Deployments with ConfigMaps and Secrets
• Helm Charts: Used for deploying databases and RabbitMQ
• AWS EKS: Kubernetes cluster on AWS
• Storage: Persistent Volumes for databases

Application Flow

1. User authenticates via POST /login with email/password
2. Receives JWT token
3. Uploads MP4 file via POST /upload with Authorization header containing JWT
4. Gateway validates JWT, stores file in MongoDB, publishes message to 'video' queue
5. Converter consumes message, downloads video, converts to MP3, stores MP3
6. User checks /status?fid=<video_fid>; once completed, the status returns mp3_fid
7. User downloads MP3 via GET /download?fid=<mp3_fid> with JWT

Deployment

CI/CD (Jenkins) — current flow

• Stages: kubeconfig, Helm install/upgrade MongoDB, PostgreSQL (runs init.sql to create auth_user), RabbitMQ (loads definitions.json to create durable video queue), ensure ecr-secret, ECR login, build/push images (auth/gateway/converter/frontend), set deployments to new images, rollout status, cleanup old ReplicaSets (0 desired/current/ready), kubectl apply manifests.
• Env in Jenkinsfile: AWS_DEFAULT_REGION, AWS_ACCOUNT_ID, CLUSTER_NAME, ECR_REGISTRY, IMAGE_TAG (commit hash).
• Jenkins host needs Docker (socket mounted), Helm, kubectl, AWS CLI, IAM role with ECR push + EKS access, GitHub webhook or SCM polling.
• Deployments use RollingUpdate with maxSurge: 0 / maxUnavailable: 1 to avoid a temporary second pod on small nodes.

Manual steps (if not using Jenkins)

1. Helm install infra:

helm upgrade --install mongodb  ./Helm_charts/MongoDB
helm upgrade --install postgres ./Helm_charts/Postgres
helm upgrade --install rabbitmq ./Helm_charts/RabbitMQ

2. Queue creation: automatic via RabbitMQ definitions and converter’s queue_declare.
3. Deploy services:

kubectl apply -f src/auth-service/manifest/
kubectl apply -f src/gateway-service/manifest/
kubectl apply -f src/converter-service/manifest/
kubectl apply -f frontend-service/manifest/   # if present

4. Image pull secret (private ECR):

kubectl create secret docker-registry ecr-secret \
  --docker-server=<account>.dkr.ecr.<region>.amazonaws.com \
  --docker-username=AWS \
  --docker-password=$(aws ecr get-login-password --region <region>) \
  --docker-email=none
kubectl patch deployment frontend --type='json' -p='[{"op": "add", "path": "/spec/template/spec/imagePullSecrets", "value": [{"name": "ecr-secret"}]}]'

Networking / Security Groups

• Expose only frontend (NodePort 30001) and gateway (NodePort 30002) to your IP. Everything else stays internal (Postgres 5432, Mongo 27017, RabbitMQ 5672/15672).
• Node SG inbound: allow TCP 30001/30002 from your IP. Leave DB/queue internal.
• Jenkins UI: TCP 8080 from your IP only. SSH: TCP 22 from your IP.

Database bootstrap

• Postgres init.sql runs on first start (mounted to /docker-entrypoint-initdb.d/); creates auth_user and seeds a user. If needed manually:

kubectl exec -it deployment/postgres-deploy -- psql -U mohamed -d authdb -c "CREATE TABLE IF NOT EXISTS auth_user (id integer GENERATED ALWAYS AS IDENTITY PRIMARY KEY, email VARCHAR(255) NOT NULL, password VARCHAR(255) NOT NULL);"

Environment Variables

• Auth Service:

  • DATABASE_PASSWORD
  • JWT_SECRET

• Gateway Service:

  • MONGODB_URI
  • JWT_SECRET

• Converter Service:

  • MONGODB_URI
  • VIDEO_QUEUE=video

Frontend Usage

Access the application at http://nodeIP:30001 (replace nodeIP with your EKS node external IP, e.g., 44.200.235.233:30001).

Commands cheat sheet and quick user Workflow:

1. Register: Create a user with your email and password (or use the seeded account)
2. Login: Enter your email and password
3. Convert: Select an MP4 and click Convert. The UI polls status in the background.
4. Download: When conversion finishes, the page shows “Status: completed — Ready! Click Download MP3”. Click to download immediately.

API Usage

Register

curl -X POST http://nodeIP:30002/register -u email:password

Login

curl -X POST http://nodeIP:30002/login -u email:password

Upload

curl -X POST -F 'file=@video.mp4' -H 'Authorization: Bearer <JWT>' http://nodeIP:30002/upload

Status Check

curl -X GET -H 'Authorization: Bearer <JWT>' "http://nodeIP:30002/status?fid=<video_fid>"

Download

curl -X GET -H 'Authorization: Bearer <JWT>' "http://nodeIP:30002/download?fid=<mp3_fid>" -o output.mp3

Monitoring and Troubleshooting

• Check pod status: kubectl get pods
• View logs: kubectl logs deployment/<service-name>
• Check queue: Access RabbitMQ management UI at nodeIP:30004 (username: guest, password: guest)
• Database access: Use kubectl exec to connect to postgres/mongodb pods
• Frontend access: http://nodeIP:30001
• Gateway API: http://nodeIP:30002
• PostgreSQL: nodeIP:30003
• MongoDB: nodeIP:30005

Security Considerations

• JWT tokens for authentication
• Secrets stored in Kubernetes Secrets (Email notifications removed)
• Persistent volumes for data storage

Development

Each service is containerized with Docker. Source code is in src/ directory with service-specific subdirectories. Requirements.txt files list Python dependencies.

Future Improvements

• Implement Redis for caching
• Add more comprehensive logging and monitoring with Prometheus/Grafana
• Enhance security with TLS/SSL encryption
• Improve frontend with real-time status updates using WebSockets