terra_boi 0.0.13 → 1.0.2

data/lib/generators/terra_boi/templates/lib/scripts/update_service_pull_from_ecr.sh.erb

@@ -0,0 +1,18 @@
+# Requires AWS cli >= v2.x.x
+# https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html
+
+# Arg 1: prod or staging
+# Arg 2: web_app or head_worker
+
+SCRIPT_DIR=$(realpath "$(dirname "${BASH_SOURCE[0]}")")
+ENV=$1
+SUB_FOLDER=$2
+cd $SCRIPT_DIR/../../$ENV/$SUB_FOLDER
+pwd
+
+echo "Deploying newest container pushed to ECR..."
+
+OUTPUT=$(aws ecs update-service --cluster $(terraform output ecs_cluster_name) --service $(terraform output ecs_service_name) --force-new-deployment)
+
+echo $OUTPUT
+echo "Deployment complete! Please allow 1-2 minutes for your <%= application_name %> container to boot and join the cluster."

data/lib/generators/terra_boi/templates/lib/task_templates/head_worker.json.erb

@@ -0,0 +1,61 @@
+[
+	{
+		"name": "web_app",
+		"image": "${image}",
+		"entryPoint": ["sh", "-c", "rake db:migrate && touch /etc/crontab /etc/cron.*/* && service cron start && whenever --update-crontab && rake jobs:work"],
+		"essential": true,
+		"environment": [
+			{
+				"name": "RAILS_ENV",
+				"value": "production"
+			},
+			{
+				"name": "DB_HOST",
+				"value": "${db_host}"
+			},
+			{
+				"name": "DB_USERNAME",
+				"value": "${db_username}"
+			},
+			{
+				"name": "DB_PASSWORD",
+				"value": "${db_password}"
+			},
+			{
+				"name": "AWS_ACCESS_KEY_ID",
+				"value": "${aws_access_key}"
+			},
+			{
+				"name": "AWS_SECRET_ACCESS_KEY",
+				"value": "${aws_secret_key}"
+			},
+			{
+				"name": "RAILS_LOG_TO_STDOUT",
+				"value": "true"
+			},
+			{
+				"name": "RAILS_SERVE_STATIC_FILES",
+				"value": "true"
+			}
+		],
+		"memory": ${memory},
+		"cpu": ${cpu},
+		"healthCheck": {
+			"command": [
+				"CMD-SHELL",
+				"echo hello"
+			],
+			"interval": 5,
+			"timeout": 2,
+			"retries": 3
+		},
+		"logConfiguration": {
+			"logDriver": "awslogs",
+			"options": {
+				"awslogs-group": "/fargate/service/${app_name}-${environment}-${app_type}",
+				"awslogs-region": "${region}",
+				"awslogs-stream-prefix": "ecs"
+			}
+		}
+	}
+]

data/lib/generators/terra_boi/templates/lib/task_templates/web_app.json.erb

@@ -0,0 +1,58 @@
+[
+	{
+		"name": "web_app",
+		"image": "${image}",
+		"entryPoint": ["sh", "-c", "rake db:migrate && bin/rails server --port 3000 -b 0.0.0.0"],
+		"essential": true,
+		"portMappings": [
+			{
+				"containerPort": ${port},
+				"hostPort": ${port}
+			}
+		],
+		"environment": [
+			{
+				"name": "RAILS_ENV",
+				"value": "production"
+			},
+			{
+				"name": "DB_HOST",
+				"value": "${db_host}"
+			},
+			{
+				"name": "DB_USERNAME",
+				"value": "${db_username}"
+			},
+			{
+				"name": "DB_PASSWORD",
+				"value": "${db_password}"
+			},
+			{
+				"name": "AWS_ACCESS_KEY_ID",
+				"value": "${aws_access_key}"
+			},
+			{
+				"name": "AWS_SECRET_ACCESS_KEY",
+				"value": "${aws_secret_key}"
+			},
+			{
+				"name": "RAILS_LOG_TO_STDOUT",
+				"value": "true"
+			},
+			{
+				"name": "RAILS_SERVE_STATIC_FILES",
+				"value": "true"
+			}
+		],
+		"memory": ${memory},
+		"cpu": ${cpu},
+		"logConfiguration": {
+			"logDriver": "awslogs",
+			"options": {
+				"awslogs-group": "/fargate/service/${app_name}-${environment}-${app_type}",
+				"awslogs-region": "${region}",
+				"awslogs-stream-prefix": "ecs"
+			}
+		}
+	}
+]

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_cluster/main.tf.erb

@@ -0,0 +1,12 @@
+provider "aws" {
+  version = "~> 2.0"
+  region  = var.region
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. ECS CLUSTER
+# ---------------------------------------------------------------------------------------------------------------------
+
+resource "aws_ecs_cluster" "ecs_cluster" {
+  name = "${var.app_name}-${var.environment}"
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_cluster/var.tf.erb

@@ -0,0 +1,20 @@
+# -----------------------------
+# 1. GENERAL
+# -----------------------------
+
+# Optional
+
+variable "region" {
+	type    = string
+	default = "us-east-2"
+}
+
+variable "app_name" {
+	type    = string
+	default = "<%= application_name %>"
+}
+
+variable "environment" {
+	type    = string
+	default = "dev"
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_web_app/ecs_role.tf.erb

@@ -0,0 +1,7 @@
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. ECS IAM ROLE (Created in web_app)
+# ---------------------------------------------------------------------------------------------------------------------
+
+data "aws_iam_role" "ecs_execution_role" {
+  name = "ecs_${var.app_name}_execution_role"
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_web_app/load_balancer.tf.erb

@@ -0,0 +1,92 @@
+# ----------------------------------------------
+# 1. AWS ALB
+# ----------------------------------------------
+
+resource "aws_alb" "application_load_balancer" {
+  name = "${var.app_name}-${var.environment}-lb"
+  load_balancer_type = "application"
+  
+  subnets = [ # default subnets
+    aws_default_subnet.default_subnet_a.id,
+    aws_default_subnet.default_subnet_b.id,
+    aws_default_subnet.default_subnet_c.id,
+  ]
+  
+  security_groups = [aws_security_group.load_balancer_sg.id]
+}
+
+resource "aws_security_group" "load_balancer_sg" {
+  ingress {
+    from_port = 80
+    to_port = 80
+    protocol = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port = 443
+    to_port = 443
+    protocol = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port = 0
+    to_port = 0
+    protocol = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+# ----------------------------------------------
+# 2. AWS ALB TARGET GROUP + LISTENER
+# ----------------------------------------------
+
+resource "aws_lb_target_group" "target_group" {
+  name = "${var.app_name}-${var.environment}-target-group"
+  port = 80
+  protocol = "HTTP"
+  target_type = "ip"
+  vpc_id = aws_default_vpc.default_vpc.id
+}
+
+# 2.1 HTTP:
+
+resource "aws_lb_listener" "listener" {
+  load_balancer_arn = aws_alb.application_load_balancer.arn
+  port = 80
+  protocol = "HTTP"
+
+  default_action {
+    type = "forward"
+    target_group_arn = aws_lb_target_group.target_group.arn
+  }
+}
+
+# 2.2 HTTPS:
+
+resource "aws_lb_listener" "listener_https" {
+  load_balancer_arn = aws_alb.application_load_balancer.arn
+  port = 443
+  protocol = "HTTPS"
+  certificate_arn   = aws_acm_certificate_validation.cert.certificate_arn
+
+  default_action {
+    type = "forward"
+    target_group_arn = aws_lb_target_group.target_group.arn
+  }
+}
+
+# ----------------------------------------------
+# 3. HTTPS CERT
+# ----------------------------------------------
+
+data "aws_acm_certificate" "cert" {
+  domain      = "*.${var.domain_name}"
+  types       = ["AMAZON_ISSUED"]
+  most_recent = true
+}
+
+resource "aws_acm_certificate_validation" "cert" {
+  certificate_arn = data.aws_acm_certificate.cert.arn
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_web_app/main.tf.erb

@@ -0,0 +1,134 @@
+provider "aws" {
+  version = "~> 2.0"
+  region  = var.region
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 1. ECS TASK
+# ---------------------------------------------------------------------------------------------------------------------
+
+data "aws_ecr_repository" "ecr_repo" {
+  name = "${var.app_name}-ecr-repo"
+}
+
+data "aws_ecs_cluster" "ecs_cluster" {
+  cluster_name = "${var.app_name}-${var.environment}"
+}
+
+data "terraform_remote_state" "db" {
+  backend = "s3"
+
+  config = {
+    bucket = "${var.app_name}-terraform-state-storage"
+    key    = "terraform/${var.environment}-state/terra-boi-data"
+    region = "us-east-2"
+  }
+}
+
+data "template_file" "task" {
+  template = "${file("../../lib/task_templates/${var.template_filename}")}"
+
+  vars = {
+    image       = data.aws_ecr_repository.ecr_repo.repository_url
+    app_name    = var.app_name
+    app_type    = var.app_type
+    environment = var.environment
+    region      = var.region
+    port        = var.web_app_task.port
+    memory      = var.web_app_task.memory
+    cpu         = var.web_app_task.cpu
+    db_host     = data.terraform_remote_state.db.outputs.address
+    db_username = data.terraform_remote_state.db.outputs.db_username
+    db_password = var.db_password
+    aws_access_key = var.aws_access_key
+    aws_secret_key = var.aws_secret_key
+  }
+}
+
+resource "aws_ecs_task_definition" "web_app" {
+  family                   = var.app_type            # Naming our first task
+  requires_compatibilities = ["FARGATE"]             # Stating that we are using ECS Fargate
+  network_mode             = "awsvpc"                # Using awsvpc as our network mode as this is required for Fargate
+  memory                   = var.web_app_task.memory # Specifying the memory our container requires
+  # https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-cpu-memory-error.html
+  cpu                   = var.web_app_task.cpu # Specifying the CPU our container requires
+  task_role_arn         = data.aws_iam_role.ecs_execution_role.arn
+  execution_role_arn    = data.aws_iam_role.ecs_execution_role.arn
+  container_definitions = data.template_file.task.rendered
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 2. ECS SERVICE
+# ---------------------------------------------------------------------------------------------------------------------
+
+resource "aws_ecs_service" "app" {
+  name            = var.app_type                        # Naming our first service
+  cluster         = data.aws_ecs_cluster.ecs_cluster.id # Referencing our created Cluster
+  task_definition = aws_ecs_task_definition.web_app.arn # Referencing the task our service will spin up
+  launch_type     = "FARGATE"
+  desired_count   = var.web_app_task.desired_count
+
+  load_balancer {
+    target_group_arn = aws_lb_target_group.target_group.arn
+    container_name   = aws_ecs_task_definition.web_app.family
+    container_port   = var.web_app_task.port
+  }
+
+  network_configuration {
+    subnets          = [aws_default_subnet.default_subnet_a.id, aws_default_subnet.default_subnet_b.id, aws_default_subnet.default_subnet_c.id]
+    assign_public_ip = true
+    security_groups  = [aws_security_group.service_security_group.id]
+  }
+
+  depends_on = [aws_lb_listener.listener, aws_lb_target_group.target_group, aws_cloudwatch_log_group.logs]
+}
+
+resource "aws_security_group" "service_security_group" {
+  ingress {
+    from_port       = 0
+    to_port         = 0
+    protocol        = "-1"
+    security_groups = [aws_security_group.load_balancer_sg.id]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 3. REFERENCE NETWORK RESOURCES (to default VPC)
+# ---------------------------------------------------------------------------------------------------------------------
+
+# # Providing a reference to our default VPC
+resource "aws_default_vpc" "default_vpc" {
+}
+
+# Providing a reference to our default subnets
+resource "aws_default_subnet" "default_subnet_a" {
+  availability_zone = "${var.region}a"
+}
+
+resource "aws_default_subnet" "default_subnet_b" {
+  availability_zone = "${var.region}b"
+}
+
+resource "aws_default_subnet" "default_subnet_c" {
+  availability_zone = "${var.region}c"
+}
+
+# ---------------------------------------------------------------------------------------------------------------------
+# 4. Logging
+# ---------------------------------------------------------------------------------------------------------------------
+
+resource "aws_cloudwatch_log_group" "logs" {
+  name              = "/fargate/service/${var.app_name}-${var.environment}-${var.app_type}"
+  retention_in_days = 90
+
+  tags = {
+    app = var.app_name
+  }
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_web_app/output.tf.erb

@@ -0,0 +1,11 @@
+output "ecs_service_name" {
+	value = aws_ecs_service.app.name
+}
+
+output "ecs_cluster_name" {
+	value = data.aws_ecs_cluster.ecs_cluster.cluster_name
+}
+
+output "alb_dns" {
+	value = aws_alb.application_load_balancer.dns_name
+}

data/lib/generators/terra_boi/templates/lib/terraform_modules/ecs_web_app/var.tf.erb

@@ -0,0 +1,63 @@
+# -----------------------------
+# 1. GENERAL
+# -----------------------------
+
+# Optional
+
+variable "region" {
+  type    = string
+  default = "us-east-2"
+}
+
+variable "app_name" {
+  type    = string
+  default = "<%= application_name %>"
+}
+
+variable "environment" {
+  type    = string
+  default = "dev"
+}
+
+variable "app_type" {
+  type    = string
+  default = "web_app"
+}
+
+variable "template_filename" {
+  type    = string
+  default = "web_app.json"
+}
+
+variable "db_password" {
+  description = "The password for the database"
+  type        = string
+}
+
+variable "aws_access_key" {
+  type        = string
+}
+
+variable "aws_secret_key" {
+  type        = string
+}
+
+variable "domain_name" {
+  type    = string
+  default = "<%= class_options[:domain_name] %>"
+}
+
+# -----------------------------
+# 2. WEB APP TASK
+# -----------------------------
+
+variable "web_app_task" {
+  type = map
+
+  default = {
+    memory        = 512
+    cpu           = 256
+    desired_count = 2
+    port          = 3000
+  }
+}