@studion/infra-code-blocks 0.0.3 → 0.0.5

package/README.md

@@ -284,6 +284,34 @@ export type WebServerArgs = {
 };
 ```
 
+#### Exec into running ECS task
+
+**Prerequisites**
+
+1. Install the [Session Manager plugin](https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html#install-plugin-macos)
+
+```bash
+$ brew install --cask session-manager-plugin
+```
+
+2. Install jq
+
+```bash
+$ brew install jq
+```
+
+In order to exec into running ECS container run the following command:
+
+```bash
+aws ecs execute-command  \
+  --cluster CLUSTER_NAME \
+  --task $(aws ecs list-tasks --cluster CLUSTER_NAME --family TASK_FAMILY_NAME | jq -r '.taskArns[0] | split("/")[2]') \
+  --command "/bin/sh" \
+  --interactive
+```
+
+Where the `CLUSTER_NAME` is the name of the ECS cluster and `TASK_FAMILY_NAME` is the name of the task family that task belongs to.
+
 ## SSM Connect
 
 The [Database](#database) component deploys a database instance inside a private subnet,
@@ -301,6 +329,11 @@ which enables us to connect to the ec2 instance even though it's inside private
 **Prerequisites**
 
 1. Install the [Session Manager plugin](https://docs.aws.amazon.com/systems-manager/latest/userguide/install-plugin-macos-overview.html#install-plugin-macos)
+
+```bash
+$ brew install --cask session-manager-plugin
+```
+
 2. Generate a new ssh key pair or use the existing one.
 
 ```bash

package/dist/components/ec2-ssm-connect.js

@@ -17,6 +17,18 @@ class Ec2SSMConnect extends pulumi.ComponentResource {
                     toPort: 22,
                     cidrBlocks: ['0.0.0.0/0'],
                 },
+                {
+                    protocol: 'tcp',
+                    fromPort: 80,
+                    toPort: 80,
+                    cidrBlocks: ['0.0.0.0/0'],
+                },
+                {
+                    protocol: 'tcp',
+                    fromPort: 443,
+                    toPort: 443,
+                    cidrBlocks: ['0.0.0.0/0'],
+                },
             ],
             egress: [
                 { protocol: '-1', fromPort: 0, toPort: 0, cidrBlocks: ['0.0.0.0/0'] },
@@ -44,6 +56,21 @@ class Ec2SSMConnect extends pulumi.ComponentResource {
         const ssmProfile = new aws.iam.InstanceProfile(`${name}-ssm-profile`, {
             role: role.name,
         }, { parent: this, dependsOn: [ssmPolicyAttachment] });
+        this.sshKeyPair = new aws.ec2.KeyPair(`${name}-ec2-keypair`, {
+            publicKey: args.sshPublicKey,
+        }, { parent: this });
+        this.ec2 = new aws.ec2.Instance(`${name}-ec2`, {
+            ami: 'ami-067d1e60475437da2',
+            associatePublicIpAddress: false,
+            instanceType: 't2.micro',
+            keyName: this.sshKeyPair.keyName,
+            iamInstanceProfile: ssmProfile.name,
+            subnetId,
+            vpcSecurityGroupIds: [this.ec2SecurityGroup.id],
+            tags: {
+                Name: `${name}-ec2`,
+            },
+        }, { parent: this });
         this.ssmVpcEndpoint = new aws.ec2.VpcEndpoint(`${name}-ssm-vpc-endpoint`, {
             vpcId: args.vpc.vpcId,
             ipAddressType: 'ipv4',
@@ -52,7 +79,7 @@ class Ec2SSMConnect extends pulumi.ComponentResource {
             subnetIds: [subnetId],
             securityGroupIds: [this.ec2SecurityGroup.id],
             privateDnsEnabled: true,
-        }, { parent: this });
+        }, { parent: this, dependsOn: [this.ec2] });
         this.ec2MessagesVpcEndpoint = new aws.ec2.VpcEndpoint(`${name}-ec2messages-vpc-endpoint`, {
             vpcId: args.vpc.vpcId,
             ipAddressType: 'ipv4',
@@ -61,7 +88,7 @@ class Ec2SSMConnect extends pulumi.ComponentResource {
             subnetIds: [subnetId],
             securityGroupIds: [this.ec2SecurityGroup.id],
             privateDnsEnabled: true,
-        }, { parent: this });
+        }, { parent: this, dependsOn: [this.ec2] });
         this.ssmMessagesVpcEndpoint = new aws.ec2.VpcEndpoint(`${name}-ssmmessages-vpc-endpoint`, {
             vpcId: args.vpc.vpcId,
             ipAddressType: 'ipv4',
@@ -70,22 +97,7 @@ class Ec2SSMConnect extends pulumi.ComponentResource {
             subnetIds: [subnetId],
             securityGroupIds: [this.ec2SecurityGroup.id],
             privateDnsEnabled: true,
-        }, { parent: this });
-        this.sshKeyPair = new aws.ec2.KeyPair(`${name}-ec2-keypair`, {
-            publicKey: args.sshPublicKey,
-        }, { parent: this });
-        this.ec2 = new aws.ec2.Instance(`${name}-ec2`, {
-            ami: 'ami-067d1e60475437da2',
-            associatePublicIpAddress: false,
-            instanceType: 't2.micro',
-            keyName: this.sshKeyPair.keyName,
-            iamInstanceProfile: ssmProfile.name,
-            subnetId,
-            vpcSecurityGroupIds: [this.ec2SecurityGroup.id],
-            tags: {
-                Name: `${name}-ec2`,
-            },
-        }, { parent: this });
+        }, { parent: this, dependsOn: [this.ec2] });
         this.registerOutputs();
     }
 }

package/dist/components/web-server.js

@@ -197,7 +197,7 @@ class WebServer extends pulumi.ComponentResource {
                 .apply(([containerName, image, port, environment, logGroup, region]) => {
                 return JSON.stringify([
                     {
-                        readonlyRootFilesystem: true,
+                        readonlyRootFilesystem: false,
                         name: containerName,
                         image,
                         essential: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@studion/infra-code-blocks",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "description": "Studion common infra components",
   "keywords": [
     "infrastructure",