@glicogh/healthcare-cdk 0.1.5 → 0.1.6

package/dist/scripts/post-deployment-after-all.sh

@@ -0,0 +1,2 @@
+echo "Deployment complete"
+alert_slack 'success'

package/dist/scripts/post-deployment-api-gateway.sh

@@ -0,0 +1,35 @@
+# install nginx
+sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -y
+curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
+gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
+echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx
+sudo apt update -y
+sudo apt install nginx nodejs dnsmasq supervisor -y
+
+# copy appropriate server_name.conf based on env
+cat $service_dir/nginx/microservices/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/microservices/server_name.conf
+
+# remove default virtual host
+sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
+# create symlinks
+sudo ln -sf $service_dir/nginx/microservices /etc/nginx/microservices
+sudo ln -sf $service_dir/nginx/conf.d/microservices.conf /etc/nginx/conf.d/microservices.conf
+
+# configure dnsmasq
+echo "# ================================" | sudo tee -a /etc/dnsmasq.conf
+echo "conf-dir=/etc/dnsmasq.d/,*.conf" | sudo tee -a /etc/dnsmasq.conf
+echo "conf-dir=$service_dir/dnsmasq/conf.d/,*.conf" | sudo tee -a /etc/dnsmasq.conf
+echo "port=5353" | sudo tee -a /etc/dnsmasq.conf
+
+# configure supervisor
+sudo sed -i "s|files = .*|files = /etc/supervisor/conf.d/*.conf ${service_dir}/supervisor/conf.d/*.conf|" /etc/supervisor/supervisord.conf
+
+# start supervisor
+sudo systemctl restart supervisor
+
+# start dnsmasq
+sudo systemctl restart dnsmasq
+
+# start nginx server
+sudo systemctl restart nginx

package/dist/scripts/post-deployment-before-all.sh

@@ -0,0 +1,166 @@
+#!/bin/bash
+
+# abort immediately on error
+set -Eeuo pipefail
+
+# set variables
+deployment_started_at=$(date)
+deployment_started_at_seconds=$(date +%s)
+env_name={{envName}}
+microservices_dir="/microservices"
+services_dir="$microservices_dir/services"
+service_dir="$services_dir/{{serviceName}}"
+configuration_dir="$microservices_dir/config"
+logs_dir="$microservices_dir/logs"
+
+ssm_global_parameter_path=/{{envName}}/microservices/global/env/
+ssm_service_parameter_path=/{{envName}}/microservices/{{serviceName}}/env/
+deployment_log_file="$logs_dir/deployment.log"
+deployment_git_branch="{{gitDeploymentBranch}}"
+instance_id=$(ec2metadata --instance-id)
+instance_private_ip=$(ec2metadata --local-ipv4)
+
+# create directories
+sudo mkdir -p $microservices_dir
+sudo mkdir -p $services_dir
+sudo mkdir -p $configuration_dir
+sudo mkdir -p $logs_dir
+cd $microservices_dir
+
+# write outputs to a file
+exec &>>"$deployment_log_file"
+
+# update and install packages
+sudo apt update -y
+sudo apt install curl zip unzip -y
+
+# remove redundant packages
+sudo apt remove apache2 -y
+
+# install AWS CLI
+curl "https://awscli.amazonaws.com/awscli-exe-linux-aarch64.zip" -o "awscliv2.zip"
+unzip -o awscliv2.zip
+sudo ./aws/install --update
+sudo rm -rf awscliv2.zip aws
+
+# slack
+slack_api_key=""
+alert_slack() {
+  deployment_ended_at=$(date)
+  deployment_ended_at_seconds=$(date +%s)
+  deployment_time_diff=$((deployment_ended_at_seconds - deployment_started_at_seconds))
+  deployment_duration=$(echo $deployment_time_diff | awk '{printf "%d:%02d:%02d", $1/3600, ($1/60)%60, $1%60}')
+
+  if [[ $slack_api_key == "" ]]; then
+    slack_api_key=$(aws ssm get-parameter --name ${ssm_global_parameter_path}SLACK_API_KEY --with-decryption --query "Parameter.Value" --output text)
+  fi
+
+  if [[ $1 == 'success' ]]; then
+    alert_title="Deployment successful :white_check_mark:"
+  else
+    alert_title="Deployment failed :fire:"
+  fi
+
+  alert_content=$(echo $(tail -c 600 $logs_dir/deployment.log) | jq -Rs .)
+
+  payload='{
+    "channel": "#deployments",
+    "blocks": [
+      {
+        "type": "header",
+        "text": {
+          "type": "plain_text",
+          "text": "'$alert_title'"
+        }
+      },
+      {
+        "type": "section",
+        "text": {
+          "type": "mrkdwn",
+          "text": "<!channel>"
+        }
+      },
+      {
+        "type": "context",
+        "elements": [
+          {
+            "type": "mrkdwn",
+            "text": "*Environment:* {{envName}}"
+          },
+          {
+            "type": "mrkdwn",
+            "text": "*Service:* {{serviceName}}"
+          },
+          {
+            "type": "mrkdwn",
+            "text": "*Instance:* '$instance_id' ('$instance_private_ip')"
+          }
+        ]
+      },
+      {
+        "type": "context",
+        "elements": [
+          {
+            "type": "mrkdwn",
+            "text": "*Started At:* '$deployment_started_at'"
+          },
+          {
+            "type": "mrkdwn",
+            "text": "*Ended At:* '$deployment_ended_at'"
+          },
+          {
+            "type": "mrkdwn",
+            "text": "*Duration:* '$deployment_duration'"
+          }
+        ]
+      },
+      {
+        "type": "rich_text",
+        "elements": [
+          {
+            "type": "rich_text_preformatted",
+            "elements": [
+              {
+                "type": "text",
+                "text": '$alert_content'
+              }
+            ],
+            "border": 0
+          }
+        ]
+      }
+    ]
+  }
+  '
+  echo $payload | curl --location 'https://slack.com/api/chat.postMessage' --header 'Content-Type: application/json' --header 'Authorization: Bearer '$slack_api_key --data @-
+}
+
+# catch errors
+on_error_caught() {
+  echo 'Error encountered'
+  alert_slack 'error'
+  exit
+}
+trap 'on_error_caught' ERR
+
+# create swap file
+sudo fallocate -l 2G /swapfile
+sudo chmod 600 /swapfile
+sudo mkswap /swapfile
+sudo swapon /swapfile
+sudo cp /etc/fstab /etc/fstab.bak
+echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab
+
+sudo sysctl vm.swappiness=10
+echo 'vm.swappiness=10' | sudo tee -a /etc/sysctl.conf
+
+sudo sysctl vm.vfs_cache_pressure=40
+echo 'vm.vfs_cache_pressure=40' | sudo tee -a /etc/sysctl.conf
+
+# load Global SSM parameters into ENV
+aws ssm get-parameters-by-path --with-decryption --path $ssm_global_parameter_path --query "Parameters[*].{Name:Name,Value:Value}" | sudo sed 's,'"$ssm_global_parameter_path"',,' >$configuration_dir/global-ssm-env.json
+sudo jq -jr '.[]|.Name,"=","\"",.Value,"\"","\n"' <$configuration_dir/global-ssm-env.json >$configuration_dir/global-ssm.env
+
+# load Service-specific SSM parameters into ENV
+aws ssm get-parameters-by-path --with-decryption --path $ssm_service_parameter_path --query "Parameters[*].{Name:Name,Value:Value}" | sudo sed 's,'"$ssm_service_parameter_path"',,' >$configuration_dir/service-ssm-env.json
+sudo jq -jr '.[]|.Name,"=","\"",.Value,"\"","\n"' <$configuration_dir/service-ssm-env.json >$configuration_dir/service-ssm.env

package/dist/scripts/post-deployment-clone-repo.sh

@@ -0,0 +1,12 @@
+# install Git
+sudo apt install git -y
+
+# retrieve github api key from SSM
+github_api_key=$(aws ssm get-parameter --name ${ssm_global_parameter_path}GITHUB_API_KEY --with-decryption --query "Parameter.Value" --output text)
+
+# clone project from github into service directory
+sudo rm -rf $service_dir
+sudo git clone https://$github_api_key@github.com/{{githubRepoPath}} $service_dir
+cd $service_dir
+git checkout $deployment_git_branch
+git pull origin $deployment_git_branch

package/dist/scripts/post-deployment-laravel-based.sh

@@ -0,0 +1,86 @@
+# install packages required for PHP/Laravel
+sudo apt install curl gpg software-properties-common ca-certificates apt-transport-https lsb-release -y
+sudo add-apt-repository ppa:ondrej/php -y
+sudo apt install php8.3 supervisor -y
+sudo apt install php8.3-cli php8.3-pdo php8.3-mysql php8.3-zip php8.3-gd php8.3-mbstring php8.3-curl php8.3-xml php8.3-bcmath php8.3-common php8.3-dev php8.3-redis php8.3-swoole -y
+
+# install composer
+sudo curl -sS https://getcomposer.org/installer | sudo php
+sudo mv composer.phar /usr/local/bin/composer
+sudo ln -sf /usr/local/bin/composer /usr/bin/composer
+
+microservice_port=8080
+
+# create .env file
+sudo echo "MICROSERVICE_INTERNAL_IP=\"$instance_private_ip\"" >> $configuration_dir/local.env
+sudo echo "MICROSERVICE_INTERNAL_PORT=\"$microservice_port\"" >> $configuration_dir/local.env
+sudo echo "DEPLOYED_ENV={{envName}}" >> $configuration_dir/local.env
+sudo cat $configuration_dir/global-ssm.env >> .env
+sudo cat $configuration_dir/service-ssm.env >> .env
+sudo cat $configuration_dir/local.env >> .env
+
+# run composer as the ubuntu user. Composer doesn't like being run as root
+sudo chown -R ubuntu:ubuntu $microservices_dir
+su - ubuntu -c "ssh-keyscan -t rsa,dsa github.com >> ~/.ssh/known_hosts"
+su - ubuntu -c "composer config --global github-oauth.github.com $github_api_key"
+su - ubuntu -c "cd $service_dir && composer install --no-interaction --prefer-dist --optimize-autoloader --no-dev"
+#su - ubuntu -c "cd $service_dir && composer require glicogh/healthcare-laravel-package:dev-master --no-interaction --prefer-dist --optimize-autoloader"
+
+# remove redundant packages
+sudo apt remove apache2 -y
+
+# install openswoole
+# echo '>>> Installing openswoole'
+# sudo pecl install --configureoptions 'enable-sockets="no" enable-openssl="no" enable-http2="no" enable-mysqlnd="no" enable-hook-curl="no" enable-cares="yes" with-postgres="no"' openswoole
+# echo 'extension=openswoole.so' | sudo tee /etc/php/8.3/mods-available/openswoole.ini
+# sudo ln -sf /etc/php/8.3/mods-available/openswoole.ini /etc/php/8.3/cli/conf.d/20-openswoole.ini
+# echo '::: Openswoole installation complete'
+
+php $service_dir/artisan octane:install --server swoole --no-interaction
+
+# optimize and start laravel
+php $service_dir/artisan migrate --force
+if [[ ${env_name} != "prod" ]]; then
+    php artisan db:seed
+fi
+
+# php $service_dir/artisan cache:clear
+php $service_dir/artisan route:cache
+php $service_dir/artisan config:cache
+php $service_dir/artisan view:cache
+
+# create supervisor config for generic queue
+cat > $configuration_dir/supervisor.{{serviceName}}-service-generic-queue.conf <<EOL
+[program:{{serviceName}}-service-generic-queue]
+process_name=%(program_name)s_%(process_num)02d
+command=php $service_dir/artisan queue:work --sleep=3 --tries=3
+autostart=true
+autorestart=true
+stopasgroup=true
+killasgroup=true
+user=ubuntu
+numprocs=2
+redirect_stderr=true
+stdout_logfile=$logs_dir/{{serviceName}}-service-generic-queue.log
+EOL
+sudo ln -sf $configuration_dir/supervisor.{{serviceName}}-service-generic-queue.conf /etc/supervisor/conf.d/{{serviceName}}-service-generic-queue.conf
+
+# create supervisor config for web server
+cat > $configuration_dir/supervisor.{{serviceName}}-service-server.conf <<EOL
+[program:{{serviceName}}-service-server]
+process_name=%(program_name)s_%(process_num)02d
+command=php $service_dir/artisan octane:start --port $microservice_port --host $instance_private_ip
+autostart=true
+autorestart=true
+stopasgroup=true
+killasgroup=true
+user=ubuntu
+numprocs=1
+redirect_stderr=true
+stdout_logfile=$logs_dir/{{serviceName}}-service-server.log
+EOL
+sudo ln -sf $configuration_dir/supervisor.{{serviceName}}-service-server.conf /etc/supervisor/conf.d/{{serviceName}}-service-server.conf
+
+sudo systemctl restart supervisor
+
+php $service_dir/artisan glico:healthcare:microservice:discovery

package/dist/scripts/post-deployment-mysql.sh

@@ -0,0 +1,22 @@
+# install MySQL
+sudo apt install mariadb-server -y
+
+# make MySQL service/daemon
+sudo systemctl enable mariadb
+
+# start MySQL
+sudo systemctl start mariadb
+
+# setup/configure MySQL
+mysql_root_password=$(aws ssm get-parameter --name ${ssm_global_parameter_path}MYSQL_ROOT_PASSWORD --with-decryption --query "Parameter.Value" --output text)
+mysql_root_user=root
+microservices_db_password=$(aws ssm get-parameter --name ${ssm_global_parameter_path}MICROSERVICES_DB_PASSWORD --with-decryption --query "Parameter.Value" --output text)
+microservices_db_user=microservices
+sudo mysql -e "SET PASSWORD FOR '$mysql_root_user'@'localhost' = PASSWORD('$mysql_root_password');"
+sudo mysql -e "CREATE USER '$microservices_db_user'@'localhost' IDENTIFIED BY '$microservices_db_password'; GRANT ALL PRIVILEGES ON *.* TO '$microservices_db_user'@'localhost' WITH GRANT OPTION;"
+sudo mysql -e "CREATE USER '$microservices_db_user'@'%' IDENTIFIED BY '$microservices_db_password'; GRANT ALL PRIVILEGES ON *.* TO '$microservices_db_user'@'%' WITH GRANT OPTION;"
+sudo mysql -e "FLUSH PRIVILEGES;"
+sudo sed -i "s/bind-address.*/bind-address = 0.0.0.0/" /etc/mysql/mariadb.conf.d/50-server.cnf
+
+# restart MySQL
+sudo systemctl restart mariadb

package/dist/scripts/post-deployment-notification-service.sh

@@ -0,0 +1,5 @@
+sudo curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
+sudo apt install nodejs -y
+
+sudo cp $configuration_dir/ssm.env .env
+npm install

package/dist/scripts/post-deployment-portal.sh

@@ -0,0 +1,32 @@
+# install nginx
+sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -y
+curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
+gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
+echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx
+sudo apt update -y
+sudo apt install nginx npm -y
+
+# create .env
+sudo echo "DEPLOYED_ENV={{envName}}" >> $configuration_dir/local.env
+sudo cat $configuration_dir/global-ssm.env >> .env
+sudo cat $configuration_dir/service-ssm.env >> .env
+sudo cat $configuration_dir/local.env >> .env
+
+# copy appropriate server_name.conf based on env
+cat $service_dir/nginx/portal/server_name.{{envName}}.conf | sudo tee $service_dir/nginx/portal/server_name.conf
+
+# remove default virtual host
+sudo rm -rf /etc/nginx/sites-enabled/default /etc/nginx/conf.d/default.conf
+
+# create symlinks
+sudo ln -sf $service_dir/nginx/portal /etc/nginx/portal
+sudo ln -sf $service_dir/nginx/conf.d/portal.conf /etc/nginx/conf.d/portal.conf
+
+# install dependencies and generate static files
+cd $service_dir
+sudo npm i
+sudo NODE_OPTIONS="--max-old-space-size=2048 NUXT_TELEMETRY_DISABLED=1" npm run generate
+
+# start nginx server
+sudo systemctl restart nginx

package/dist/scripts/post-deployment-redis.sh

@@ -0,0 +1,9 @@
+sudo apt install lsb-release curl gpg -y
+curl -fsSL https://packages.redis.io/gpg | sudo gpg --dearmor -o /usr/share/keyrings/redis-archive-keyring.gpg
+sudo chmod 644 /usr/share/keyrings/redis-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] https://packages.redis.io/deb $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/redis.list
+sudo apt update -y
+sudo apt install redis -y
+sudo sed -i 's/bind 127.0.0.1/bind 0.0.0.0/g' /etc/redis/redis.conf
+sudo sed -i 's/protected-mode yes/protected-mode no/g' /etc/redis/redis.conf
+sudo systemctl restart redis-server

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@glicogh/healthcare-cdk",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "CDK automations",
   "bin": {
     "cdk": "bin/cdk.js"
   },
   "scripts": {
-    "build": "rm -rf ./dist && tsc",
+    "build": "rm -rf ./dist && tsc && cp -r ./scripts ./dist/scripts",
     "watch": "tsc -w",
     "test": "jest",
     "cdk": "cdk",
-    "pub": "npm run build && npm publish"
+    "ship": "npm run build && npm publish"
   },
   "main": "dist/index.js",
   "devDependencies": {