ciinabox-ecs 0.3.0.alpha.1612412532 → 0.3.1.alpha.1622698898

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0c757f7bd31538bddd7834491413db7d5748ca7944e1796f6779a1806abd16c
-  data.tar.gz: bd1b8aea5d676333fc569fa47dc6160a42878a8b479ef1311d34db106e253006
+  metadata.gz: 0abdb55ba421e1ca32b4863da34398e6b301cb1b8aa26c804f434603e540a18f
+  data.tar.gz: 19524b3f753dcea4077f0ac65f6af8848e711d410407afcee38776d989900c69
 SHA512:
-  metadata.gz: 44312cfb402dd20e0e001c10d84f479c164471fb4cc4bd9de7ffcc8592e97bb3feaae252fdd42b69f33dd132d88db54e0a3347f1e3e4e7700a7c86ed6f4d10d1
-  data.tar.gz: 5d97aee7e73853e9825f2717e78d6beb5ad0a890b97e2ffd93e002df6074c869bcff57dc633b934442a2b7d78533fdadf672a10ee9ec0691f87ff1972f0c9ef8
+  metadata.gz: 31b14e819855f75aa59569765c74777355dc409213c44a8dc85aba1148037df2d56b618ce90b72700092279d41a9afe6bdaf554e7af93115b46e81b54d736153
+  data.tar.gz: 72228109787271ddc4961c185af54dfce7810263b4931c9417641424982de4f562eeda8c099f80cbdd9997630e8b9aa4487b51f496765d2c23870c3e30f5cc3e

data/templates/ecs-cluster.rb

@@ -190,6 +190,8 @@ CloudFormation {
         "echo ECS_ENABLE_TASK_CPU_MEM_LIMIT=false >> /etc/ecs/ecs.config\n",
         "INSTANCE_ID=$(echo `/opt/aws/bin/ec2-metadata -i | cut -f2 -d:`)\n",
         "PRIVATE_IP=`/opt/aws/bin/ec2-metadata -o | cut -f2 -d: | cut -f2 -d-`\n",
+        "echo 'vm.max_map_count=262144' >> /etc/sysctl.conf\n",
+        "sysctl -p\n",
         "hostname ciinabox-ecs-xx\n",
         "#{proxy_config_userdata}",
         "yum install -y python-pip\n",

data/templates/services/drone.rb

@@ -1,6 +1,7 @@
 require 'cfndsl'
 require 'securerandom'
 require 'deep_merge'
+require_relative '../../ext/helper'
 
 # default values
 shared_envs = {

data/templates/services/jenkins.rb

@@ -1,4 +1,5 @@
 require 'cfndsl'
+require_relative '../../ext/helper'
 
 if !defined? timezone
   timezone = 'GMT'

data/templates/services/sonarqube.rb

@@ -0,0 +1,166 @@
+require 'cfndsl'
+require_relative '../../ext/helper'
+
+if !defined? timezone
+  timezone = 'GMT'
+end
+
+image = 'sonarqube:lts'
+java_opts = ''
+memory = 2048
+cpu = 300
+container_port = 0
+service = lookup_service('sonarqube', services)
+if service
+  java_opts = service['JAVA_OPTS'] || ''
+  image = service['ContainerImage'] || image
+  memory = service['ContainerMemory'] || 2048
+  cpu = service['ContainerCPU'] || 300
+  container_port = service['InstancePort'] || 0
+  postgres_url_param_arn = service['PostgresUrlParamArn'] || nil
+  postgres_user_param_arn = service['PostgresUserParamArn'] || nil
+  postgres_password_param_arn = service['PostgresPasswordParamArn'] || nil
+end
+
+CloudFormation {
+
+  AWSTemplateFormatVersion "2010-09-09"
+  Description "ciinabox - ECS Service SonarQube v#{ciinabox_version}"
+
+  Parameter("ECSCluster"){ Type 'String' }
+  Parameter("ECSRole"){ Type 'String' }
+  Parameter("ServiceELB"){ Type 'String' }
+
+  Resource('SonarQubeTask') {
+    Type "AWS::ECS::TaskDefinition"
+    Property('ExecutionRoleArn', FnGetAtt('TaskExecutionRole', 'Arn'))
+    sonarqube_container_def = {
+      Name: 'sonarqube',
+      MemoryReservation: memory,
+      Cpu: cpu,
+      Image: image,
+      Environment: [
+        {
+          Name: 'VIRTUAL_HOST',
+          Value: "sonar.#{dns_domain}"
+        },
+        {
+          Name: 'VIRTUAL_PORT',
+          Value: '9000'
+        }
+      ],
+      Ulimits: [
+        {
+          Name: "nofile",
+          SoftLimit: 65536,
+          HardLimit: 65536
+        }
+      ],
+      Essential: true,
+      MountPoints: [
+        {
+          ContainerPath: '/etc/localtime',
+          SourceVolume: 'timezone',
+          ReadOnly: true
+        },
+        {
+          ContainerPath: '/opt/sonarqube/extensions',
+          SourceVolume: 'sonarqube_extensions',
+          ReadOnly: false
+        },
+        {
+          ContainerPath: '/opt/sonarqube/logs',
+          SourceVolume: 'sonarqube_logs',
+          ReadOnly: false
+        },
+        {
+          ContainerPath: '/opt/sonarqube/data',
+          SourceVolume: 'sonarqube_data',
+          ReadOnly: false
+        }
+      ]
+    }
+    if postgres_user_param_arn then
+      sonarqube_container_def[:Secrets] = [
+        {
+          Name: 'SONARQUBE_JDBC_URL',
+          ValueFrom: postgres_url_param_arn
+        },
+        {
+          Name: 'SONARQUBE_JDBC_USERNAME',
+          ValueFrom: postgres_user_param_arn
+        },
+        {
+          Name: 'SONARQUBE_JDBC_PASSWORD',
+          ValueFrom: postgres_password_param_arn
+        }
+      ]
+    end
+    Property('ContainerDefinitions', [sonarqube_container_def])
+    Property('Volumes', [
+      {
+        Name: 'timezone',
+        Host: {
+          SourcePath: '/etc/localtime'
+        }
+      },
+      {
+        Name: 'sonarqube_conf',
+        Host: {
+          SourcePath: '/data/sonarqube/conf'
+        }
+      },
+      {
+        Name: 'sonarqube_extensions',
+        Host: {
+          SourcePath: '/data/sonarqube/extensions'
+        }
+      },
+      {
+        Name: 'sonarqube_logs',
+        Host: {
+          SourcePath: '/data/sonarqube/logs'
+        }
+      },
+      {
+        Name: 'sonarqube_data',
+        Host: {
+          SourcePath: '/data/sonarqube/data'
+        }
+      }
+    ])
+  }
+
+  Resource('TaskExecutionRole') {
+    Type 'AWS::IAM::Role'
+    Property('AssumeRolePolicyDocument', {
+      "Version": "2012-10-17",
+      "Statement": [
+        {
+          "Effect": "Allow",
+          "Principal": {
+            "Service": "ecs-tasks.amazonaws.com"
+          },
+          "Action": "sts:AssumeRole"
+        }
+      ]
+    })
+    Property('ManagedPolicyArns', [
+      'arn:aws:iam::aws:policy/AmazonSSMReadOnlyAccess',
+      'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'
+    ])
+  }
+
+  Resource('SonarQubeService') {
+    Type 'AWS::ECS::Service'
+    Property('Cluster', Ref('ECSCluster'))
+    Property('DesiredCount', 1)
+    Property('TaskDefinition', Ref('SonarQubeTask'))
+    Property('Role', Ref('ECSRole')) unless container_port == 0
+    Property('LoadBalancers', [
+      { ContainerName: 'sonarqube', ContainerPort: container_port, LoadBalancerName: Ref('ServiceELB') }
+    ]) unless container_port == 0
+
+  }
+
+}

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ciinabox-ecs
 version: !ruby/object:Gem::Version
-  version: 0.3.0.alpha.1612412532
+  version: 0.3.1.alpha.1622698898
 platform: ruby
 authors:
 - Base2Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-04 00:00:00.000000000 Z
+date: 2021-06-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -147,6 +147,7 @@ files:
 - templates/services/icinga2.rb
 - templates/services/jenkins.rb
 - templates/services/nexus.rb
+- templates/services/sonarqube.rb
 - templates/vpc.rb
 - templates/vpn.rb
 homepage: https://github.com/base2Services/ciinabox-ecs
@@ -168,7 +169,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.1
 requirements: []
-rubygems_version: 3.2.8
+rubygems_version: 3.2.19
 signing_key: 
 specification_version: 4
 summary: Manage ciinabox on Aws Ecs