@rio-cloud/cdk-v2-constructs 6.13.4 → 6.15.0-alpha.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +226 -41
- package/docs/API.md +174 -13
- package/docs/changelog.md +21 -0
- package/lib/contributions/team-transport-two/pipeline/buildspecs.d.ts +5 -0
- package/lib/contributions/team-transport-two/pipeline/buildspecs.js +191 -0
- package/lib/contributions/team-transport-two/pipeline/pipeline-stack.d.ts +55 -2
- package/lib/contributions/team-transport-two/pipeline/pipeline-stack.js +123 -37
- package/package.json +5 -4
- package/version.json +1 -1
- package/lib/contributions/team-transport-two/pipeline/buildspecs/buildspec-vulnerability-checks.yaml +0 -23
- package/lib/contributions/team-transport-two/pipeline/buildspecs/buildspec.yaml +0 -61
- package/lib/contributions/team-transport-two/pipeline/buildspecs/buildspec_infrastructure.yaml +0 -14
- package/lib/contributions/team-transport-two/pipeline/buildspecs/buildspec_kafka.yaml +0 -64
|
@@ -1,61 +0,0 @@
|
|
|
1
|
-
version: '0.2'
|
|
2
|
-
env:
|
|
3
|
-
parameter-store:
|
|
4
|
-
SERVICE_KEYSTORE_PASSWORD: /config/${SERVICE_NAME}/service-keystore-password
|
|
5
|
-
LICENSE_BUCKET_NAME: /config/oss-licenses/bucket-name
|
|
6
|
-
ACCOUNT_NAME: /config/account/name
|
|
7
|
-
phases:
|
|
8
|
-
install:
|
|
9
|
-
runtime-versions:
|
|
10
|
-
java: corretto17
|
|
11
|
-
nodejs: 20
|
|
12
|
-
pre_build:
|
|
13
|
-
commands:
|
|
14
|
-
- (echo "Build triggered by commit " && git log --pretty=format:"%h%x09%an%x09%s" -n 1 ) | tr -d "\n"
|
|
15
|
-
build:
|
|
16
|
-
commands:
|
|
17
|
-
# Keep this echo statement for identifying the default buildspec in our test
|
|
18
|
-
- echo "Using standard gradle build spec..."
|
|
19
|
-
|
|
20
|
-
# BUILD AND TEST
|
|
21
|
-
- ./gradlew clean build
|
|
22
|
-
|
|
23
|
-
# LICENSE CHECKING
|
|
24
|
-
- set -u; aws s3 cp s3://${LICENSE_BUCKET_NAME}/whitelist-gradle.txt licenses/approved_licenses.txt
|
|
25
|
-
- ./gradlew checkLicenses
|
|
26
|
-
- set -u; aws s3 cp licenses/licenses.txt s3://${LICENSE_BUCKET_NAME}/reports/${ACCOUNT_NAME}/${SERVICE_NAME}.txt
|
|
27
|
-
|
|
28
|
-
# SELF CERT SIGNING
|
|
29
|
-
- set -u; keytool -genkey -alias InternalServiceCertificate -keyalg RSA -keystore containerfiles/service-keystore.p12 -validity 3650 -storetype PKCS12 -dname "CN=internal.service.${SERVICE_NAME}.${HOSTED_ZONE}, OU=Logistics, O=Rio, L=Munich, ST=BY, C=DE" -keypass ${SERVICE_KEYSTORE_PASSWORD} -storepass ${SERVICE_KEYSTORE_PASSWORD}
|
|
30
|
-
|
|
31
|
-
# DOCKER IMAGE BUILD
|
|
32
|
-
- ./gradlew jibBuildTar --quiet
|
|
33
|
-
|
|
34
|
-
# npm synth action
|
|
35
|
-
- cd infrastructure
|
|
36
|
-
- npm ci
|
|
37
|
-
# mute stdout of cdk synth to not dump the resulting Cfn template in logs
|
|
38
|
-
- npm run cdk synth 1> /dev/null
|
|
39
|
-
|
|
40
|
-
# In pipeline: Error parsing reference: is not a valid repository/tag: invalid reference format.
|
|
41
|
-
# workaround due to https://github.com/aws/aws-cdk/issues/18044',
|
|
42
|
-
- find ./ -type f -name "*DeployApplicationStacks*.assets.json" -print0 | xargs -0 sed --in-place 's|docker load -i asset.|docker load -i ../asset.|g'
|
|
43
|
-
|
|
44
|
-
- cd ..
|
|
45
|
-
post_build:
|
|
46
|
-
commands:
|
|
47
|
-
- (echo "Build triggered by commit " && git log --pretty=format:"%h%x09%an%x09%s" -n 1 ) | tr -d "\n"
|
|
48
|
-
reports:
|
|
49
|
-
JunitTestResults:
|
|
50
|
-
files:
|
|
51
|
-
- '**/*'
|
|
52
|
-
base-directory: build/test-results
|
|
53
|
-
|
|
54
|
-
cache:
|
|
55
|
-
paths:
|
|
56
|
-
- /cert/**/*
|
|
57
|
-
- /root/.cache/**/*
|
|
58
|
-
- /root/.gradle/caches/**/*
|
|
59
|
-
- /root/.gradle/wrapper/**/*
|
|
60
|
-
- /root/google-cloud-tools-java/jib/**/*
|
|
61
|
-
- target/jib-cache/**/*
|
|
@@ -1,64 +0,0 @@
|
|
|
1
|
-
version: '0.2'
|
|
2
|
-
env:
|
|
3
|
-
parameter-store:
|
|
4
|
-
SERVICE_KEYSTORE_PASSWORD: /config/${SERVICE_NAME}/service-keystore-password
|
|
5
|
-
CREATE_AND_SIGN_CERTIFICATE_SCRIPT_S3_LOCATION: /config/kafka-integration/create-and-sign-certificate-script-s3-location
|
|
6
|
-
LICENSE_BUCKET_NAME: /config/oss-licenses/bucket-name
|
|
7
|
-
ACCOUNT_NAME: /config/account/name
|
|
8
|
-
phases:
|
|
9
|
-
install:
|
|
10
|
-
runtime-versions:
|
|
11
|
-
java: corretto17
|
|
12
|
-
nodejs: 20
|
|
13
|
-
commands:
|
|
14
|
-
- yum install --assumeyes libxcrypt-compat # workaround for create-and-sign-certificate
|
|
15
|
-
build:
|
|
16
|
-
commands:
|
|
17
|
-
# Keep this echo statement for identifying the default buildspec in our test
|
|
18
|
-
- echo "Using standard gradle build spec..."
|
|
19
|
-
|
|
20
|
-
# BUILD AND TEST
|
|
21
|
-
- ./gradlew clean build
|
|
22
|
-
|
|
23
|
-
# LICENSE CHECKING
|
|
24
|
-
- set -u; aws s3 cp s3://${LICENSE_BUCKET_NAME}/whitelist-gradle.txt licenses/approved_licenses.txt
|
|
25
|
-
- ./gradlew checkLicenses
|
|
26
|
-
- set -u; aws s3 cp licenses/licenses.txt s3://${LICENSE_BUCKET_NAME}/reports/${ACCOUNT_NAME}/${SERVICE_NAME}.txt
|
|
27
|
-
|
|
28
|
-
# SELF CERT SIGNING
|
|
29
|
-
- set -u; keytool -genkey -alias InternalServiceCertificate -keyalg RSA -keystore containerfiles/service-keystore.p12 -validity 3650 -storetype PKCS12 -dname "CN=internal.service.${SERVICE_NAME}.${HOSTED_ZONE}, OU=Logistics, O=Rio, L=Munich, ST=BY, C=DE" -keypass ${SERVICE_KEYSTORE_PASSWORD} -storepass ${SERVICE_KEYSTORE_PASSWORD}
|
|
30
|
-
|
|
31
|
-
# KAFKA CERT
|
|
32
|
-
- set -u; aws s3 cp --quiet s3://${CREATE_AND_SIGN_CERTIFICATE_SCRIPT_S3_LOCATION} create-and-sign-certificate
|
|
33
|
-
- chmod +x create-and-sign-certificate
|
|
34
|
-
- set -u; ./create-and-sign-certificate --keystore-password ${SERVICE_KEYSTORE_PASSWORD} --fqdn ${SERVICE_NAME}.${HOSTED_ZONE}
|
|
35
|
-
- cp /cert/certificate.p12 containerfiles/kafka-keystore.p12
|
|
36
|
-
|
|
37
|
-
# DOCKER IMAGE BUILD
|
|
38
|
-
- ./gradlew jibBuildTar --quiet
|
|
39
|
-
|
|
40
|
-
# npm synth action
|
|
41
|
-
- cd infrastructure
|
|
42
|
-
- npm ci
|
|
43
|
-
# mute stdout of cdk synth to not dump the resulting Cfn template in logs
|
|
44
|
-
- npm run cdk synth 1> /dev/null
|
|
45
|
-
|
|
46
|
-
# In pipeline: Error parsing reference: is not a valid repository/tag: invalid reference format.
|
|
47
|
-
# workaround due to https://github.com/aws/aws-cdk/issues/18044',
|
|
48
|
-
- find ./ -type f -name "*DeployApplicationStacks*.assets.json" -print0 | xargs -0 sed --in-place 's|docker load -i asset.|docker load -i ../asset.|g'
|
|
49
|
-
|
|
50
|
-
- cd ..
|
|
51
|
-
reports:
|
|
52
|
-
JunitTestResults:
|
|
53
|
-
files:
|
|
54
|
-
- '**/*'
|
|
55
|
-
base-directory: build/test-results
|
|
56
|
-
|
|
57
|
-
cache:
|
|
58
|
-
paths:
|
|
59
|
-
- /cert/**/*
|
|
60
|
-
- /root/.cache/**/*
|
|
61
|
-
- /root/.gradle/caches/**/*
|
|
62
|
-
- /root/.gradle/wrapper/**/*
|
|
63
|
-
- /root/google-cloud-tools-java/jib/**/*
|
|
64
|
-
- target/jib-cache/**/*
|