eoapi-cdk 5.0.0

package/lib/titiler-pgstac-api/index.js

@@ -0,0 +1,67 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TitilerPgstacApiLambda = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_apigatewayv2_alpha_1 = require("@aws-cdk/aws-apigatewayv2-alpha");
+const aws_apigatewayv2_integrations_alpha_1 = require("@aws-cdk/aws-apigatewayv2-integrations-alpha");
+const constructs_1 = require("constructs");
+class TitilerPgstacApiLambda extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const titilerPgstacEnv = {
+            "CPL_VSIL_CURL_ALLOWED_EXTENSIONS": ".tif,.TIF,.tiff",
+            "GDAL_CACHEMAX": "200",
+            "GDAL_DISABLE_READDIR_ON_OPEN": "EMPTY_DIR",
+            "GDAL_INGESTED_BYTES_AT_OPEN": "32768",
+            "GDAL_HTTP_MERGE_CONSECUTIVE_RANGES": "YES",
+            "GDAL_HTTP_MULTIPLEX": "YES",
+            "GDAL_HTTP_VERSION": "2",
+            "PYTHONWARNINGS": "ignore",
+            "VSI_CACHE": "TRUE",
+            "VSI_CACHE_SIZE": "5000000",
+            "DB_MIN_CONN_SIZE": "1",
+            "DB_MAX_CONN_SIZE": "1",
+            "PGSTAC_SECRET_ARN": props.dbSecret.secretArn,
+        };
+        this.titilerPgstacLambdaFunction = new aws_cdk_lib_1.aws_lambda.Function(this, "lambda", {
+            handler: "handler.handler",
+            runtime: aws_cdk_lib_1.aws_lambda.Runtime.PYTHON_3_10,
+            code: aws_cdk_lib_1.aws_lambda.Code.fromDockerBuild(__dirname, {
+                file: "runtime/Dockerfile",
+                buildArgs: { PYTHON_VERSION: '3.10' },
+            }),
+            timeout: aws_cdk_lib_1.Duration.seconds(30),
+            vpc: props.vpc,
+            vpcSubnets: props.subnetSelection,
+            allowPublicSubnet: true,
+            memorySize: 3008,
+            logRetention: aws_cdk_lib_1.aws_logs.RetentionDays.ONE_WEEK,
+            environment: titilerPgstacEnv,
+        });
+        // grant access to buckets using addToRolePolicy
+        if (props.buckets) {
+            props.buckets.forEach(bucket => {
+                this.titilerPgstacLambdaFunction.addToRolePolicy(new aws_cdk_lib_1.aws_iam.PolicyStatement({
+                    actions: ["s3:GetObject"],
+                    resources: [`arn:aws:s3:::${bucket}/*`],
+                }));
+            });
+        }
+        props.dbSecret.grantRead(this.titilerPgstacLambdaFunction);
+        this.titilerPgstacLambdaFunction.connections.allowTo(props.db, aws_cdk_lib_1.aws_ec2.Port.tcp(5432), "allow connections from titiler");
+        const stacApi = new aws_apigatewayv2_alpha_1.HttpApi(this, `${aws_cdk_lib_1.Stack.of(this).stackName}-titiler-pgstac-api`, {
+            defaultIntegration: new aws_apigatewayv2_integrations_alpha_1.HttpLambdaIntegration("integration", this.titilerPgstacLambdaFunction),
+        });
+        this.url = stacApi.url;
+        new aws_cdk_lib_1.CfnOutput(this, "titiler-pgstac-api-output", {
+            exportName: `${aws_cdk_lib_1.Stack.of(this).stackName}-titiler-pgstac-url`,
+            value: this.url,
+        });
+    }
+}
+exports.TitilerPgstacApiLambda = TitilerPgstacApiLambda;
+_a = JSII_RTTI_SYMBOL_1;
+TitilerPgstacApiLambda[_a] = { fqn: "eoapi-cdk.TitilerPgstacApiLambda", version: "5.0.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/titiler-pgstac-api/runtime/Dockerfile

@@ -0,0 +1,20 @@
+ARG PYTHON_VERSION
+
+FROM --platform=linux/amd64 public.ecr.aws/lambda/python:${PYTHON_VERSION}
+
+WORKDIR /tmp
+RUN python -m pip install pip -U
+
+COPY runtime/requirements.txt requirements.txt
+RUN python -m pip install -r requirements.txt "mangum>=0.14,<0.15" -t /asset
+
+# Reduce package size and remove useless files
+RUN find /asset -type f -name '*.pyc' | while read f; do n=$(echo $f | sed 's/__pycache__\///' | sed 's/.cpython-[0-9]*//'); cp $f $n; done;
+RUN find /asset -type d -name '__pycache__' -print0 | xargs -0 rm -rf
+RUN find /asset -type f -name '*.py' -print0 | xargs -0 rm -f
+RUN find /asset -type d -name 'tests' -print0 | xargs -0 rm -rf
+RUN rm -rdf /asset/numpy/doc/ /asset/boto3* /asset/botocore* /asset/bin /asset/geos_license /asset/Misc
+
+COPY runtime/src/*.py /asset/
+
+CMD ["echo", "hello world"]

package/lib/titiler-pgstac-api/runtime/dev_requirements.txt

@@ -0,0 +1 @@
+uvicorn

package/lib/titiler-pgstac-api/runtime/requirements.txt

@@ -0,0 +1,3 @@
+titiler.pgstac==0.3.3
+boto3>=1.26.139
+psycopg[binary, pool]

package/lib/titiler-pgstac-api/runtime/src/__init__.py

@@ -0,0 +1,3 @@
+"""eoapi.raster."""
+
+__version__ = "0.1.0"

package/lib/titiler-pgstac-api/runtime/src/handler.py

@@ -0,0 +1,23 @@
+"""
+Handler for AWS Lambda.
+"""
+
+import os
+from mangum import Mangum
+from utils import get_secret_dict
+from titiler.pgstac.main import app
+
+pgstac_secret_arn = os.environ["PGSTAC_SECRET_ARN"]
+
+secret = get_secret_dict(pgstac_secret_arn)
+os.environ.update(
+    {
+        "postgres_host": secret["host"],
+        "postgres_dbname": secret["dbname"],
+        "postgres_user": secret["username"],
+        "postgres_pass": secret["password"],
+        "postgres_port": str(secret["port"]),
+    }
+)
+
+handler = Mangum(app)

package/lib/titiler-pgstac-api/runtime/src/utils.py

@@ -0,0 +1,26 @@
+import base64
+import json
+import boto3
+
+
+def get_secret_dict(secret_name: str):
+    """Retrieve secrets from AWS Secrets Manager
+
+    Args:
+        secret_name (str): name of aws secrets manager secret containing database connection secrets
+        profile_name (str, optional): optional name of aws profile for use in debugger only
+
+    Returns:
+        secrets (dict): decrypted secrets in dict
+    """
+
+    # Create a Secrets Manager client
+    session = boto3.session.Session()
+    client = session.client(service_name="secretsmanager")
+
+    get_secret_value_response = client.get_secret_value(SecretId=secret_name)
+
+    if "SecretString" in get_secret_value_response:
+        return json.loads(get_secret_value_response["SecretString"])
+    else:
+        return json.loads(base64.b64decode(get_secret_value_response["SecretBinary"]))

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "eoapi-cdk",
+  "version": "5.0.0",
+  "description": "A set of constructs deploying pgSTAC with CDK",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "jsii",
+    "dev": "run-p dev:*",
+    "dev:build": "jsii --watch",
+    "dev:docgen": "nodemon -w .jsii -e .jsii --exec npm run docgen",
+    "dev:package": "nodemon -w .jsii -e .jsii --exec npm run package",
+    "clean": "git clean -Xdf lib",
+    "package": "jsii-pacmak -v",
+    "docgen": "mkdir -p docs && jsii-docgen -o docs/index.md",
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "semantic-release": "semantic-release"
+  },
+  "keywords": [],
+  "author": {
+    "name": "Anthony Lukach",
+    "email": "anthony@developmentseed.org"
+  },
+  "repository": {
+    "url": "https://github.com/developmentseed/eoapi-cdk.git"
+  },
+  "license": "ISC",
+  "stability": "experimental",
+  "jsii": {
+    "outdir": "dist",
+    "versionFormat": "full",
+    "targets": {
+      "python": {
+        "distName": "eoapi-cdk",
+        "module": "eoapi_cdk"
+      }
+    }
+  },
+  "devDependencies": {
+    "@qiwi/semantic-release-gh-pages-plugin": "^5.2.3",
+    "@semantic-release/changelog": "^6.0.1",
+    "@semantic-release/git": "^10.0.1",
+    "@types/node": "^18.7.23",
+    "jsii": "^1.68.0",
+    "jsii-docgen": "^7.0.119",
+    "jsii-pacmak": "^1.68.0",
+    "nodemon": "^2.0.20",
+    "npm-run-all": "^4.1.5",
+    "prettier": "^2.7.1",
+    "semantic-release": "^19.0.5"
+  },
+  "dependencies": {
+    "@aws-cdk/aws-apigatewayv2-integrations-alpha": "^2.47.0-alpha.0",
+    "@aws-cdk/aws-lambda-python-alpha": "^2.47.0-alpha.0",
+    "aws-cdk-lib": "^2.75.0",
+    "constructs": "^10.1.113"
+  },
+  "peerDependencies": {
+    "aws-cdk-lib": "^2.75.0",
+    "constructs": "^10.1.113"
+  },
+  "release": {
+    "branches": [
+      "main",
+      "next"
+    ],
+    "plugins": [
+      "@semantic-release/commit-analyzer",
+      "@semantic-release/changelog",
+      "@semantic-release/release-notes-generator",
+      [
+        "@semantic-release/npm",
+        {
+          "npmPublish": false
+        }
+      ],
+      "@semantic-release/git",
+      "@semantic-release/github"
+    ]
+  }
+}

package/tox.ini

@@ -0,0 +1,52 @@
+[tox]
+skipsdist = True
+envlist = py39
+
+[testenv]
+extras = test
+envdir = toxenv
+passenv = AWS_DEFAULT_REGION
+commands =
+      pip install flake8 isort black pytest
+      pip install -r ./lib/ingestor-api/runtime/requirements.txt
+      pip install -r ./lib/ingestor-api/runtime/dev_requirements.txt
+      flake8
+      black lib --diff
+      isort lib 
+      python -m pytest -s
+
+
+[flake8]
+ignore = E203, E266, E501, W503, F403, E231
+exclude =
+  node_modules
+  __pycache__
+  .git
+  .tox
+  venv*
+  toxenv*
+  devenv*
+  cdk.out
+  *.egg-info
+max-line-length = 90
+max-complexity = 18
+select = B,C,E,F,W,T4,B9
+
+[black]
+line-length = 90
+exclude =
+  __pycache__
+  .git
+  .tox
+  venv*
+  toxenv*
+  devenv*
+  cdk.out
+  *.egg-info
+
+[isort]
+profile = black
+
+[pytest]
+addopts = -ra -q
+testpaths = lib/ingestor-api