stackit 0.1.7 → 0.1.9

data/templates/vpc.parameters

@@ -0,0 +1,54 @@
+[
+  {
+    "ParameterKey": "VpcName",
+    "ParameterValue": "StackIT"
+  },
+  {
+    "ParameterKey": "OfficeNetwork",
+    "ParameterValue": "127.0.0.1/32"
+  },
+  {
+    "ParameterKey": "VpcCidrNetwork",
+    "ParameterValue": "172.16.0.0/16"
+  },
+  {
+    "ParameterKey": "PublicCidrAZ1",
+    "ParameterValue": "172.16.110.0/24"
+  },
+  {
+    "ParameterKey": "PublicCidrAZ2",
+    "ParameterValue": "172.16.120.0/24"
+  },
+  {
+    "ParameterKey": "PublicCidrAZ3",
+    "ParameterValue": "172.16.130.0/24"
+  },
+  {
+    "ParameterKey": "PrivateCidrAZ1",
+    "ParameterValue": "172.16.111.0/24"
+  },
+  {
+    "ParameterKey": "PrivateCidrAZ2",
+    "ParameterValue": "172.16.121.0/24"
+  },
+  {
+    "ParameterKey": "PrivateCidrAZ3",
+    "ParameterValue": "172.16.131.0/24"
+  },
+  {
+    "ParameterKey": "VpcAvailabilityZone1",
+    "ParameterValue": "us-east-1a"
+  },
+  {
+    "ParameterKey": "VpcAvailabilityZone2",
+    "ParameterValue": "us-east-1c"
+  },
+  {
+    "ParameterKey": "VpcAvailabilityZone3",
+    "ParameterValue": "us-east-1e"
+  },
+  {
+    "ParameterKey": "DevOpsBucketName",
+    "ParameterValue": "devops-automation"
+  }
+]

data/templates/vpn.json

@@ -0,0 +1,258 @@
+{
+  "AWSTemplateFormatVersion" : "2010-09-09",
+
+  "Description" : "Remote Access VPN stack",
+
+  "Parameters" : {
+
+    "VpcId" : {
+      "Type": "AWS::EC2::VPC::Id",
+      "Description" : "The VPC identifier",
+      "ConstraintDescription": "must be a valid VPC identifier"
+    },
+
+    "VpcCidrNetwork" : {
+      "Description" : "The VPC CIDR",
+      "Type": "String",
+      "MinLength": "9",
+      "MaxLength": "18",
+      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
+      "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
+    },
+
+    "RemoteAdminNetwork" : {
+      "Description" : "The office CIDR where remote management will occur",
+      "Type": "String",
+      "MinLength": "9",
+      "MaxLength": "18",
+      "Default": "127.0.0.1/32",
+      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
+      "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
+    },
+
+    "StackEnvironment": {
+      "Type": "String",
+      "Description" : "The environment (dev|prod)",
+      "MinLength": "1",
+      "MaxLength": "255",
+      "AllowedPattern" : "dev|prod",
+      "ConstraintDescription" : "can contain only ASCII characters."
+    },
+
+    "KeyPair": {
+      "Type": "AWS::EC2::KeyPair::KeyName",
+      "Description": "Name of an existing EC2 KeyPair to enable SSH access to the instance",
+      "ConstraintDescription": "must be the name of an existing EC2 KeyPair."
+    },
+
+    "DefaultIngressSecurityGroup": {
+      "Type": "AWS::EC2::SecurityGroup::Id",
+      "Description": "The default VPC ingress security group"
+    },
+
+    "OpsWorksStackName": {
+      "Type": "String"
+    },
+
+    "OpsWorksDefaultOs": {
+      "Type": "String",
+      "Description": "The stack's default operating system"
+    },
+
+    "OpsWorksDefaultSubnetId": {
+      "Type": "AWS::EC2::Subnet::Id",
+      "Description": "The stack's default VPC subnet ID"
+    },
+
+    "OpsWorksCustomJson": {
+      "Type": "String",
+      "Description": "Custom JSON used to override corresponding default stack configuration JSON values"
+    },
+
+    "OpsWorksServiceRoleArn": {
+      "Type": "String",
+      "Description": "The AWS Identity and Access Management (IAM) role that AWS OpsWorks uses to work with AWS resources on your behalf."
+    },
+
+    "UseOpsworksSecurityGroups": {
+      "Type": "String",
+      "Description": "Whether to associate the AWS OpsWorks built-in security groups with the stack's layers."
+    },
+
+    "OpsWorksConfigureRunlist": {
+      "Type": "CommaDelimitedList"
+    },
+
+    "OpsWorksDeployRunlist": {
+     "Type": "CommaDelimitedList"
+    },
+
+    "OpsWorksSetupRunlist": {
+      "Type": "CommaDelimitedList"
+    },
+
+    "OpsWorksShutdownRunlist": {
+      "Type": "CommaDelimitedList"
+    },
+
+    "OpsWorksUndeployRunlist": {
+      "Type": "CommaDelimitedList"
+    },
+
+    "S3CookbookSource": {
+      "Type": "String"
+    }
+
+  },
+
+  "Conditions": {
+
+    "HasCustomJson": { 
+      "Fn::Not" : [{
+        "Fn::Equals" : [
+          {"Ref" : "OpsWorksCustomJson"},
+          ""
+        ]
+      }]
+    }
+
+  },
+
+  "Resources" : {
+
+    "VpnInstanceRole": {
+      "Type": "AWS::IAM::Role",
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Principal": {
+                "Service": [
+                  "ec2.amazonaws.com"
+                ]
+              },
+              "Action": [
+                "sts:AssumeRole"
+              ]
+            }
+          ]
+        },
+        "Path": "/"
+      }
+    },
+
+    "VpnServerIamPolicy": {
+      "Type": "AWS::IAM::Policy",
+      "Properties": {
+        "PolicyName": "vpnserver",
+        "PolicyDocument": {
+        "Statement": [{
+          "Effect": "Allow",
+          "Action": [
+            "ec2:AllocateAddress",
+            "ec2:AssociateAddress",
+            "ec2:DescribeAddresses",
+            "ec2:DisassociateAddress"
+	  ],
+          "Resource": [ "*" ]
+        }]
+        },
+        "Roles" : [ { "Ref" : "VpnInstanceRole" } ]
+      }
+    },
+
+    "VpnInstanceIamProfile": {
+      "Type": "AWS::IAM::InstanceProfile",
+      "Properties": {
+        "Path": "/",
+        "Roles": [ {"Ref": "VpnInstanceRole"} ]
+      }
+    },
+
+    "VpnServerSecurityGroup" : {
+      "Type" : "AWS::EC2::SecurityGroup",
+      "Properties" : {
+        "VpcId" : { "Ref" : "VpcId" },
+        "GroupDescription" : "Enable VPN server ingress traffic",
+        "SecurityGroupIngress" : [
+          {"IpProtocol" : "tcp", "FromPort" : "1701", "ToPort" : "1701", "CidrIp" : "0.0.0.0/0"},
+          {"IpProtocol" : "udp", "FromPort" : "4500", "ToPort" : "4500", "CidrIp" : "0.0.0.0/0"},
+          {"IpProtocol" : "udp", "FromPort" : "500", "ToPort" : "500", "CidrIp" : "0.0.0.0/0"},
+          {"IpProtocol" : "tcp", "FromPort" : "443", "ToPort" : "443", "CidrIp" : "0.0.0.0/0"}
+         ],
+         "Tags" : [
+           { "Key" : "Name", "Value" : { "Fn::Join": [ "-", [ { "Ref": "StackEnvironment" }, "vpnserver" ] ] } }
+         ]
+      }
+    },
+
+    "VpnServerEip" : {
+      "Type" : "AWS::EC2::EIP",
+      "Properties" : {
+        "Domain" : "vpc"
+      }
+    },
+
+    "OpsWorksStack": {
+      "Type" : "AWS::OpsWorks::Stack",
+      "Properties" : {
+        "Name": {"Ref": "OpsWorksStackName"},
+        "VpcId": {"Ref": "VpcId"},
+        "ConfigurationManager" : { 
+          "Name" : "Chef",
+          "Version" : "12"
+        },
+        "CustomCookbooksSource" : {
+          "Type": "s3",
+          "Url": { "Ref": "S3CookbookSource" }
+        },
+        "CustomJson" : {
+          "Fn::If" : [
+            "HasCustomJson",
+            {"Ref" : "OpsWorksCustomJson"},
+            {"Ref" : "AWS::NoValue" }
+          ]
+        },
+        "DefaultOs": {"Ref": "OpsWorksDefaultOs"},
+        "DefaultSubnetId": {"Ref": "OpsWorksDefaultSubnetId"},
+        "DefaultInstanceProfileArn":  {"Fn::GetAtt" : ["VpnInstanceIamProfile", "Arn"] },
+        "DefaultSshKeyName": {"Ref": "KeyPair"},
+        "HostnameTheme": "Layer_Dependent",
+        "ServiceRoleArn": {"Ref": "OpsWorksServiceRoleArn"},
+        "UseCustomCookbooks": true,
+        "UseOpsworksSecurityGroups": {"Ref": "UseOpsworksSecurityGroups"}
+      }
+    },
+
+    "OpsWorksLayer": {
+      "Type": "AWS::OpsWorks::Layer",
+      "Properties": {
+        "Name": { "Fn::Join": [ "-", [ {"Ref": "StackEnvironment" }, "vpnserver"] ] },
+        "Shortname": { "Fn::Join": [ "-", [ {"Ref": "StackEnvironment" }, "vpnserver"] ] },
+        "StackId" : {"Ref": "OpsWorksStack"},
+        "Type": "custom",
+        "AutoAssignElasticIps": false,
+        "AutoAssignPublicIps": true,
+        "CustomInstanceProfileArn": {"Fn::GetAtt" : ["VpnInstanceIamProfile", "Arn"] },
+        "CustomRecipes": {
+          "Configure": {"Ref" : "OpsWorksConfigureRunlist"},
+          "Deploy": {"Ref" : "OpsWorksDeployRunlist"},
+          "Setup": {"Ref" : "OpsWorksSetupRunlist"},
+          "Shutdown": {"Ref" : "OpsWorksShutdownRunlist"},
+          "Undeploy": {"Ref" : "OpsWorksUndeployRunlist"}
+        },
+        "CustomSecurityGroupIds":  [ {"Ref": "DefaultIngressSecurityGroup"}, {"Ref": "VpnServerSecurityGroup"}],
+        "EnableAutoHealing": true,
+        "InstallUpdatesOnBoot": true
+      }
+    }
+
+  },
+
+  "Outputs" : {
+    "VpnServerEipAllocationId" : { 
+      "Value" : { "Fn::GetAtt" : [ "VpnServerEip", "AllocationId" ] }
+    }
+  }
+}

data/templates/vpn.parameters

@@ -0,0 +1,70 @@
+[
+  {
+    "ParameterKey": "VpcId",
+    "ParameterValue": "vpc-abcd1234"
+  },
+  {
+    "ParameterKey": "VpcCidrNetwork",
+    "ParameterValue": "172.16.0.0/16"
+  },
+  {
+    "ParameterKey": "RemoteAdminNetwork",
+    "ParameterValue": "127.0.0.1/32"
+  },
+  {
+    "ParameterKey": "StackEnvironment",
+    "ParameterValue": "dev"
+  },
+  {
+    "ParameterKey": "KeyPair",
+    "ParameterValue": "testkey"
+  },
+  {
+    "ParameterKey": "DefaultIngressSecurityGroup",
+    "ParameterValue": "sg-abcd1234"
+  },
+  {
+    "ParameterKey": "OpsWorksDefaultOs",
+    "ParameterValue": "Amazon Linux 2016.03"
+  },
+  {
+    "ParameterKey": "OpsWorksDefaultSubnetId",
+    "ParameterValue": "subnet-abcd1234"
+  },
+  {
+    "ParameterKey": "OpsWorksStackName",
+    "ParameterValue": "DevRemoteAccessVPN"
+  },
+  {
+    "ParameterKey": "OpsWorksCustomJson",
+    "ParameterValue": ""
+  },
+  {
+    "ParameterKey": "OpsWorksServiceRoleArn",
+    "ParameterValue": "arn:aws:iam::123456789012:role/teststack-OpsWorksServiceRole-L44YW4T65C00"
+  },
+  {
+    "ParameterKey": "UseOpsworksSecurityGroups",
+    "ParameterValue": "false"
+  },
+  {
+    "ParameterKey": "OpsWorksConfigureRunlist",
+    "ParameterValue": "vpnserver::configure"
+  },
+  {
+    "ParameterKey": "OpsWorksDeployRunlist",
+    "ParameterValue": "vpnserver::deploy"
+  },
+  {
+    "ParameterKey": "OpsWorksSetupRunlist",
+    "ParameterValue": "vpnserver::setup"
+  },
+  {
+    "ParameterKey": "OpsWorksShutdownRunlist",
+    "ParameterValue": "vpnserver::shutdown"
+  },
+  {
+    "ParameterKey": "OpsWorksUndeployRunlist",
+    "ParameterValue": "vpnserver::undeploy"
+  }
+]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: stackit
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.9
 platform: ruby
 authors:
 - Jeremy Hahn
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-04-15 00:00:00.000000000 Z
+date: 2016-04-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -153,6 +153,12 @@ files:
 - lib/stackit/version.rb
 - lib/stackit/wait.rb
 - stackit.gemspec
+- templates/vpc-tiered.json
+- templates/vpc-tiered.parameters
+- templates/vpc.json
+- templates/vpc.parameters
+- templates/vpn.json
+- templates/vpn.parameters
 homepage: https://github.com/jeremyhahn/stackit
 licenses:
 - GPLv3