ufo 5.0.7 → 6.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e11b921dfd30c66a4207c1dd61a0b4861465fd1b99657f54c71f7b6556b14a60
-  data.tar.gz: e904b55c7d413f5ba941fd71ea79bc72f492faf94e7484b13be5edb966e0b63c
+  metadata.gz: 1f7705c4016b08dd205ad9209ee255b6cd3411fea731183b6c859b28cf900990
+  data.tar.gz: 4eb918b33c3a87ed71fbc64e3a0dbac8766a02ccbf15d7e35b863a26f7fd78a3
 SHA512:
-  metadata.gz: bfa6504eccbac3d06a264d0e719195d896ecaaf7b4a86f4e9267b3665bbb986b92fca0b16f45f117d670e891223fbe5df88236e3ef3bc8812fcad4274e221b51
-  data.tar.gz: 1eb60fe3d3661c39e37c610b3a22d987ecc71b681bb3d4429fde26e19bfe706d03ee8e16602917c739258ab01331e2bac1219e7f78a2586b5a4d7bf69c368ee2
+  metadata.gz: c65f585f02f1a54afa5c3c2c0a36378e219b8490eec8321d1dd18f9cec4026108f39e11215d0ec964b1842dbca8ade66d4f7e0b256c41386f86eb0db60f931b2
+  data.tar.gz: 16226423b75d58394e9e92dcd4562629e9defc5ed46a2acad4e0f049deca9e0c525e2ddaec984eaac616edebe996c1e8e154f3ea3fbb73ae8dfd108bd68958cf

data/.cody/README.md

@@ -0,0 +1,19 @@
+# Overview
+
+CodeBuild is used to run **acceptance-level tests**.
+
+## Deploy Project
+
+To update the CodeBuild project that handles deployment:
+
+    cody deploy ufo -t acceptance
+
+## Start Build
+
+To start a CodeBuild build:
+
+    cody start ufo -t acceptance
+
+To specify a branch:
+
+    cody start ufo -t acceptance -b feature

data/.cody/acceptance/bin/build.sh

@@ -0,0 +1,90 @@
+#!/bin/bash
+
+final_status=0
+function capture_status {
+  if [ "$?" -ne "0" ] && [ $final_status -ne 1 ] ; then
+    final_status=1
+  fi
+}
+
+set -eu
+# will build from /tmp because terraspace/Gemfile may interfere
+cd /tmp
+export PATH=~/bin:$PATH # ~/bin/ufo wrapper
+
+# Create empty folder for project
+mkdir demo
+cd demo
+
+# Create ECR repo - it might already exist
+aws ecr create-repository --repository-name test/demo || true
+REPO=$(aws ecr describe-repositories --repository-name test/demo | jq -r '.repositories[].repositoryUri')
+
+# DockerHub
+# toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating
+docker login --username $DOCKER_USER --password $DOCKER_PASS
+TOKEN=$(curl -s --user "$DOCKER_USER:$DOCKER_PASS" "https://auth.docker.io/token?service=registry.docker.io&scope=repository:ratelimitpreview/test:pull" | jq -r .token)
+echo "Current rate limit:"
+curl -s --head -H "Authorization: Bearer $TOKEN" https://registry-1.docker.io/v2/ratelimitpreview/test/manifests/latest
+
+set -x
+
+# Generate .ufo files/structure
+ufo init --app testapp --repo $REPO
+
+# Review generated files
+cat Dockerfile
+cat .ufo/config.rb
+cat .ufo/resources/task_definitions/web.yml
+cat .ufo/vars/base.rb
+cat .ufo/vars/dev.rb
+
+# Deploy
+ufo ship -y
+# Check
+ufo ps
+ENDPOINT=$(ufo ps 2>&1 | grep ELB | sed 's/.*ELB: //')
+curl -s $ENDPOINT | grep title # should be success. IE: exit 0
+
+# Change
+cat << EOF > .ufo/vars/dev.rb
+@cpu = 512
+@memory = 512
+EOF
+
+cat << EOF > .ufo/config/web/dev.rb
+Ufo.configure do |config|
+  config.autoscaling.max_capacity = 3
+end
+EOF
+
+# Update
+ufo clean -y # dont have to but good to test ufo clean
+ufo ship -y
+# Check
+ufo ps # see full output for debugging
+ufo ps 2>&1 | grep 'Max: 3' # should be success. IE: exit 0
+# grab task id - json output goes to stdout
+TASK=$(ufo ps --format json | jq -r '.[0].Task')
+echo "TASK $TASK"
+
+# TODO: create fargate spot cluster
+CLUSTER=dev
+# Just show for now. Might have to add wait logic to confirm new settings
+aws ecs describe-tasks --cluster $CLUSTER --tasks $TASK \
+    | jq '.tasks[].containers[] | {cpu: .cpu, memory: .memory}'
+
+# Destroy
+ufo destroy -y
+# Check
+ufo ps
+ufo ps 2>&1 | grep No | grep found # should be success. IE: exit 0
+
+## Also test different roles like worker
+
+export UFO_ROLE=worker
+ufo ship -y
+ufo ps # see full output for debugging
+ufo ps 2>&1 | grep Stack | grep worker # should be success. IE: exit 0
+ufo destroy -y
+ufo ps 2>&1 | grep No | grep found # should be success. IE: exit 0

data/.cody/acceptance/buildspec.yml

@@ -0,0 +1,10 @@
+version: 0.2
+
+phases:
+  install:
+    runtime-versions:
+      ruby: latest
+  build:
+    commands:
+      - .cody/shared/script/install.sh
+      - .cody/acceptance/bin/build.sh

data/.cody/acceptance/project.rb

@@ -0,0 +1,11 @@
+github_url("https://github.com/boltops-tools/ufo")
+linux_image("aws/codebuild/amazonlinux2-x86_64-standard:3.0")
+environment_variables(
+  DOCKER_USER: "ssm:/codebuild/ufo/DOCKER_USER",
+  DOCKER_PASS: "ssm:/codebuild/ufo/DOCKER_PASS",
+)
+
+# triggers(
+#   webhook: true,
+#   filter_groups: [[{type: "EVENT", pattern: "PUSH"}]]
+# )

data/.cody/acceptance/role.rb

@@ -0,0 +1,28 @@
+iam_policy(
+  "application-autoscaling",
+  "cloudformation",
+  "ec2",
+  "ecr",
+  "ecs",
+  "elasticloadbalancing",
+  "elasticloadbalancingv2",
+  "iam", # to create .ufo/resources/iam_roles
+  "logs",
+  "route53",
+  "ssm", # for codebuild to pull in ssm parameter
+)
+
+iam_policy(
+  Action: [
+    "iam:PassRole",
+  ],
+  Effect: "Allow",
+  Resource: "*",
+  Condition: {
+    StringLike: {
+      "iam:PassedToService": [
+        "ecs-tasks.amazonaws.com"
+      ]
+    }
+  }
+)

data/.cody/shared/script/install/ufo.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+
+set -eux
+
+export PATH=~/bin:$PATH
+
+cat << 'EOF' > ~/.gemrc
+---
+:backtrace: false
+:bulk_threshold: 1000
+:sources:
+- https://rubygems.org
+:update_sources: true
+:verbose: true
+benchmark: false
+install: "--no-ri --no-rdoc --no-document"
+update: "--no-ri --no-rdoc --no-document"
+EOF
+
+gem install bundler # upgrade bundler
+
+# In original ufo source and install ufo
+cd $CODEBUILD_SRC_DIR # ufo folder - in case code is added later above this that uses cd
+bundle install
+bundle exec rake install
+
+mkdir -p ~/bin
+cat << EOF > ~/bin/ufo
+#!/bin/bash
+# If there's a Gemfile, assume we're in a ufo project with a Gemfile for ufo
+if [ -f Gemfile ]; then
+  exec bundle exec $CODEBUILD_SRC_DIR/exe/ufo "\$@"
+else
+  exec $CODEBUILD_SRC_DIR/exe/ufo "\$@"
+fi
+EOF
+
+cat ~/bin/ufo
+
+chmod a+x ~/bin/ufo

data/.cody/shared/script/install.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -eu
+
+.cody/shared/script/install/ufo.sh

data/.github/workflows/main.yml

@@ -0,0 +1,28 @@
+name: Ruby
+
+on:
+  push:
+    branches:
+      - master
+      - v6
+
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    name: Ruby ${{ matrix.ruby }}
+    strategy:
+      matrix:
+        ruby:
+          - '3.0.3'
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Set up Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ${{ matrix.ruby }}
+        bundler-cache: true
+    - name: Run the default task
+      run: bundle exec rspec

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 All notable changes to this project will be documented in this file.
 This project *tries* to adhere to [Semantic Versioning](http://semver.org/), even before v1.0.
 
+## [6.0.0] - 2022-03-05
+- [#125](https://github.com/tongueroo/ufo/pull/125) v6: major ufo upgrades and new structure
+
 ## [5.0.7] - 2021-12-18
 - [#123](https://github.com/tongueroo/ufo/pull/123) fix activesupport require
 
@@ -433,7 +436,7 @@ This project *tries* to adhere to [Semantic Versioning](http://semver.org/), eve
 
 ## [0.1.1]
 
-- rename `ufo docker full_image_name` to `ufo docker image_name`
+- rename `ufo docker docker_image` to `ufo docker image_name`
 
 ## [0.1.0]
 

data/Gemfile

@@ -2,5 +2,3 @@ source "https://rubygems.org"
 
 # Specify your gem dependencies in ufo.gemspec
 gemspec
-
-gem "codeclimate-test-reporter", group: :test, require: nil

data/README.md

@@ -4,7 +4,6 @@
 
 # UFO: ECS Deploy Tool
 
-[![CircleCI](https://circleci.com/gh/tongueroo/ufo.svg?style=svg)](https://circleci.com/gh/tongueroo/ufo)
 [![Join the chat at https://gitter.im/tongueroo/ufo](https://badges.gitter.im/tongueroo/ufo.svg)](https://gitter.im/tongueroo/ufo?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
 [![Support](https://img.shields.io/badge/get-support-blue.svg)](https://boltops.com?utm_source=badge&utm_medium=badge&utm_campaign=ufo)
 
@@ -12,13 +11,7 @@
 
 Please **watch/star** this repo to help grow and support the project.
 
-Ufo is a tool that builds Docker images and deploys them to [AWS ECS](https://aws.amazon.com/ecs/).  The main command is `ufo ship`.  Here's summary of what it does:
-
-1. Builds a docker image.
-2. Generates and registers the ECS template definition.
-3. Deploys the ECS template definition to the ECS service.
-
-Ufo deploys a task definition that is written in a templating language that is easily and fully controllable.
+UFO provides convenient tooling to make it easier and more fun to work with ECS. UFO tries to bring a heroku-like experience to ECS.
 
 See [ufoships.com](http://ufoships.com) for full documentation.
 
@@ -32,30 +25,6 @@ If you are upgrading, please refer to the [Upgrading docs](https://ufoships.com/
 
 Full installation instructions are at [Install Ufo](http://ufoships.com/docs/install/).
 
-## Quick Start
-
-To quickly demonstrate how simple it is to use ufo we will use an example app from [tongueroo/demo-ufo](https://github.com/tongueroo/demo-ufo).  The app is a barebones sinatra app.  Here are the steps:
-
-    gem install ufo
-    git clone https://github.com/tongueroo/demo-ufo.git demo
-    cd demo
-    ufo init --image=tongueroo/demo-ufo
-    ufo ship demo-web
-
-Congratulations, you have successfully used ufo to deploy to an ECS service.
-
-## Load Balancer Support
-
-Ufo can also create a load balancer as part of creating the ECS service if you wish. Underneath the hood, ufo uses CloudFormation to create the load balancer.  More information can be found at the [load balancer support docs](https://ufoships.com/docs/extras/load-balancer/).
-
-## Articles
-
-* [UFO How to Create Unlimited Extra Environments](https://blog.boltops.com/2018/07/12/ufo-how-to-create-unlimited-extra-environments)
-* [UFO and ECS Fargate Introduction Tutorial](https://blog.boltops.com/2018/07/11/ufo-and-ecs-fargate-introduction-tutorial)
-* [UFO ECS Deployment Tool Introduction](https://blog.boltops.com/2018/07/06/ufo-ecs-deployment-tool-introduction)
-* [UFO Version 4 Release: Load Balancer Support](https://blog.boltops.com/2018/07/05/ufo-version-4-release)
-* [UFO Ship on AWS ECS Presentation](http://www.slideshare.net/tongueroo/ufo-ship-for-aws-ecs-70885296)
-
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at [https://github.com/tongueroo/ufo/issues](https://github.com/tongueroo/ufo/issues).

data/lib/templates/docker/Dockerfile

@@ -0,0 +1,4 @@
+# Simple starter example
+FROM nginx
+EXPOSE 80
+CMD ["nginx", "-g", "daemon off;"]

data/lib/templates/helper/%underscore_name%_helper.rb.tt

@@ -0,0 +1,6 @@
+module <%= class_name %>Helper
+  # Your code goes here
+  # def custom_method
+  # ...
+  # end
+end

data/lib/templates/init/.ufo/config/web/base.rb

@@ -0,0 +1,6 @@
+Ufo.configure do |config|
+  config.autoscaling.enabled = true
+  config.autoscaling.min_capacity = 1
+  config.autoscaling.max_capacity = 1
+  config.autoscaling.target_value = 50.0
+end

data/lib/templates/init/.ufo/config/web/dev.rb

@@ -0,0 +1,6 @@
+Ufo.configure do |config|
+  config.autoscaling.max_capacity = 2
+
+  # config.elb.ssl.enabled = true
+  # config.elb.ssl.certificates = "arn:aws:acm:us-west-2:111111111111:certificate/EXAMPLE"
+end

data/lib/templates/init/.ufo/config/web/prod.rb

@@ -0,0 +1,6 @@
+Ufo.configure do |config|
+  config.autoscaling.max_capacity = 3
+
+  # config.elb.ssl.enabled = true
+  # config.elb.ssl.certificates = "arn:aws:acm:us-west-2:111111111111:certificate/EXAMPLE"
+end

data/lib/templates/init/.ufo/config.rb.tt

@@ -0,0 +1,39 @@
+Ufo.configure do |config|
+  config.logger.level = "info" # IE: info or debug
+  config.app = "<%= @app %>" # UFO_APP takes higher precedence if set
+  config.docker.repo = "<%= @repo %>"
+  # config.ecs.cluster = ":ENV" # :ENV pattern is replaced with UFO_ENV. Default is UFO_ENV=dev
+
+  # See VPC Docs: https://ufoships.com/docs/config/vpc/
+  # When not set, it's assumed that the ECS cluster using default vpc and default subnets.
+  # Notice the ability to use `stack_output` helpers to set the values.
+  # config.vpc.id = stack_output("vpc-:ENV.Vpc")
+  # config.vpc.subnets.ecs = stack_output("vpc-:ENV.PrivateAppSubnets").split(',')
+  # config.vpc.subnets.elb = stack_output("vpc-:ENV.PublicSubnets").split(',')
+
+  # See AutoScaling Docs: https://ufoships.com/docs/features/autoscaling/
+  # config.autoscaling.enabled = true
+  # config.autoscaling.min_capacity = 2
+  # config.autoscaling.max_capacity = 3
+  # config.autoscaling.target_value = 50.0
+
+  # See Route DNS Docs: https://ufoships.com/docs/features/dns-route53-support/
+  # config.dns.domain = "domain.com"
+
+  # See ufo exec Docs: https://ufoships.com/docs/intro/ufo-exec/
+  # bash is default but may not be available your Docker image
+  # Configure to /bin/sh if needed
+  # config.ecs.default_execute_command = "/bin/bash"
+
+  # See: https://ufoships.com/docs/config/reference/
+  # config.ps.summary = false # false to turn off the summary at top of ufo ps output
+  # config.ps.format = "table" # Examples: csv table tab json
+
+  # See: https://ufoships.com/docs/config/reference/
+  # Note: the `-` (minus sign) in front rejects the pattern
+  # config.logs.filter_pattern = '- "HealthChecker"'
+
+  # See: https://ufoships.com/docs/config/reference/
+  # You may want to set to false if your docker build and push process takes a while
+  # config.ship.docker.quiet = false # default is true.
+end

data/lib/templates/init/.ufo/resources/iam_roles/execution_role.rb

@@ -0,0 +1,23 @@
+# Example starter execution role.
+# IAM Role permissions that EC2 Instance or host needs.
+#
+# Docs: https://ufoships.com/docs/iam-roles/
+#
+# Starter IAM permissions for secrets, ssm, and minimal ecr and cloudwatch permissions
+iam_policy("SsmParameterStore",
+  Action: [
+    "ssm:GetParameters",
+  ],
+  Effect: "Allow",
+  Resource: "*"
+)
+iam_policy("SecretsManager",
+  Action: [
+    "secretsmanager:GetSecretValue",
+  ],
+  Effect: "Allow",
+  Resource: "*"
+)
+# AmazonECSTaskExecutionRolePolicy includes use cases. Minimal ecr and logs permissions.
+# See: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html
+managed_iam_policy("service-role/AmazonECSTaskExecutionRolePolicy")

data/lib/templates/init/.ufo/resources/iam_roles/task_role.rb

@@ -0,0 +1,20 @@
+# Example starter execution role.
+# IAM Role permissions that the ECS Task or container needs.
+#
+# Docs: https://ufoships.com/docs/intro/task-iam/
+#
+# For `ufo exec` of `aws ecs execute-command`
+# See: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html#ecs-exec-enabling-and-using
+iam_policy("EcsExecuteCommand",
+  Action: [
+    "ssmmessages:CreateControlChannel",
+    "ssmmessages:CreateDataChannel",
+    "ssmmessages:OpenControlChannel",
+    "ssmmessages:OpenDataChannel",
+  ],
+  Effect: "Allow",
+  Resource: "*",
+)
+
+# Managed policies examples:
+# managed_iam_policy("AmazonSSMReadOnlyAccess")

data/lib/templates/init/.ufo/resources/task_definitions/web.yml

@@ -0,0 +1,29 @@
+---
+family: <%= @family %>
+# "bridge" is default because "awsvpc" requires specific instance types and
+# ECS tasks to run on private subnets.
+# Note: However, bridge mode requires user to open up EC2 instances ports: 49153-65535
+networkMode: bridge
+containerDefinitions:
+- name: <%= @name %>
+  image: <%= @image %>
+  cpu: <%= @cpu %>
+  memory: <%= @memory %>
+  memoryReservation: <%= @memory_reservation %>
+<% if @container_port -%>
+  portMappings:
+  - containerPort: <%= @container_port %>
+    protocol: tcp
+<% end -%>
+  command: <%= @command.to_json %>
+  environment: <%= @environment.to_json if @environment %>
+  secrets: <%= @secrets.to_json if @secrets %>
+<% if @awslogs_group -%>
+  logConfiguration:
+    logDriver: awslogs
+    options:
+      awslogs-group: "<%= @awslogs_group %>"
+      awslogs-region: "<%= @awslogs_region || 'us-east-1' %>"
+      awslogs-stream-prefix: "<%= @awslogs_stream_prefix %>"
+<% end -%>
+  essential: true

data/lib/templates/init/.ufo/vars/base.rb

@@ -0,0 +1,20 @@
+# Example .ufo/vars/base.rb
+# Ufo docs
+# Variables: http://ufoships.com/docs/variables/
+# Helpers: http://ufoships.com/docs/helpers/
+
+@family = family # Also: task_definition_name
+@name = role     # IE: web worker clock
+@image = docker_image # includes the git sha org/repo:ufo-[sha].
+# Docs: https://ufoships.com/docs/helpers/builtin/secrets/
+# @environment = env_file(".env")
+# @secrets = secrets_file(".secrets")
+@cpu = 256
+@memory = 256
+@memory_reservation = 256
+
+@awslogs_group = ["ecs/#{Ufo.app}", Ufo.env, Ufo.extra].compact.join('-')
+@awslogs_stream_prefix = role
+@awslogs_region = aws_region
+
+@container_port = dockerfile_port # parsed from Dockerfile

data/lib/templates/init/.ufo/vars/dev.rb

@@ -0,0 +1,4 @@
+# Example .ufo/vars/dev.rb
+# Docs: https://ufoships.com/docs/layering/variables/
+
+@cpu = 384

data/lib/templates/init/.ufo/vars/prod.rb

@@ -0,0 +1,4 @@
+# Example .ufo/vars/prod.rb
+# Docs: https://ufoships.com/docs/layering/variables/
+
+@cpu = 256

data/lib/ufo/aws_services.rb

@@ -0,0 +1,118 @@
+require "aws-sdk-applicationautoscaling"
+require "aws-sdk-cloudformation"
+require "aws-sdk-cloudwatchlogs"
+require "aws-sdk-ec2"
+require "aws-sdk-ecr"
+require "aws-sdk-ecs"
+require "aws-sdk-elasticloadbalancingv2"
+require "aws-sdk-ssm"
+
+require "aws_mfa_secure/ext/aws" # add MFA support
+require "cfn_status"
+
+module Ufo
+  module AwsServices
+    extend Memoist
+
+    def applicationautoscaling
+      Aws::ApplicationAutoScaling::Client.new(aws_options)
+    end
+    memoize :applicationautoscaling
+
+    def cloudformation
+      Aws::CloudFormation::Client.new(aws_options)
+    end
+    memoize :cloudformation
+
+    def cloudwatchlogs
+      Aws::CloudWatchLogs::Client.new(aws_options)
+    end
+    memoize :cloudwatchlogs
+
+    def ec2
+      Aws::EC2::Client.new(aws_options)
+    end
+    memoize :ec2
+
+    def ecr
+      Aws::ECR::Client.new(aws_options)
+    end
+    memoize :ecr
+
+    def ecs
+      Aws::ECS::Client.new(aws_options)
+    end
+    memoize :ecs
+
+    def elb
+      Aws::ElasticLoadBalancingV2::Client.new(aws_options)
+    end
+    memoize :elb
+
+    def ssm_client
+      Aws::SSM::Client.new
+    end
+    memoize :ssm_client
+
+    # Override the AWS retry settings with AWS clients.
+    #
+    # The aws-sdk-core has exponential backup with this formula:
+    #
+    #   2 ** c.retries * c.config.retry_base_delay
+    #
+    # Source:
+    #   https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-core/lib/aws-sdk-core/plugins/retry_errors.rb
+    #
+    # So the max delay will be 2 ** 7 * 0.6 = 76.8s
+    #
+    # Only scoping this to deploy because dont want to affect people's application that use the aws sdk.
+    #
+    # There is also additional rate backoff logic elsewhere, since this is only scoped to deploys.
+    #
+    # Useful links:
+    #   https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-core/lib/aws-sdk-core/plugins/retry_errors.rb
+    #   https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html
+    #
+    def aws_options
+      options = {
+        retry_limit: 7, # default: 3
+        retry_base_delay: 0.6, # default: 0.3
+      }
+      options.merge!(
+        log_level: :debug,
+        logger: Logger.new($stdout),
+      ) if ENV['UFO_DEBUG_AWS_SDK']
+      options
+    end
+
+    def find_stack(stack_name)
+      resp = cloudformation.describe_stacks(stack_name: stack_name)
+      resp.stacks.first
+    rescue Aws::CloudFormation::Errors::ValidationError => e
+      # example: Stack with id demo-web does not exist
+      if e.message =~ /Stack with/ && e.message =~ /does not exist/
+        nil
+      else
+        raise
+      end
+    end
+
+    def task_definition_arns(family, max_items=10)
+      resp = ecs.list_task_definitions(
+        family_prefix: family,
+        sort: "DESC",
+      )
+      arns = resp.task_definition_arns
+      arns = arns.select do |arn|
+        task_definition = arn.split('/').last.split(':').first
+        task_definition == family
+      end
+      arns[0..max_items]
+    end
+
+    def status
+      CfnStatus.new(@stack_name) # NOTE: @stack_name must be set in the including Class
+    end
+    memoize :status
+  end
+end

data/lib/ufo/booter.rb

@@ -0,0 +1,27 @@
+module Ufo
+  module Booter
+    def boot
+      run_hooks
+    end
+
+    # Special boot hooks run super early.
+    # Useful for setting env vars and other early things.
+    #
+    #    .ufo/boot.rb
+    #    .ufo/boot/dev.rb
+    #
+    def run_hooks
+      run_hook
+      run_hook(Ufo.env)
+      Ufo::Config::Inits.run_all
+    end
+
+    def run_hook(env=nil)
+      name = env ? "boot/#{env}" : "boot"
+      path = "#{Ufo.root}/.ufo/#{name}.rb" # IE: .ufo/boot/dev.rb
+      require path if File.exist?(path)
+    end
+
+    extend self
+  end
+end

data/lib/ufo/cfn/base.rb

@@ -0,0 +1,7 @@
+module Ufo::Cfn
+  class Base < Ufo::CLI::Base
+    extend Memoist
+    include Ufo::AwsServices
+    include Ufo::Concerns # info
+  end
+end