token-injectable-docker-builder 1.13.3 → 2.0.0

package/lib/index.js

@@ -1,404 +1,8 @@
 "use strict";
-var _a, _b;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TokenInjectableDockerBuilder = exports.TokenInjectableDockerBuilderProvider = void 0;
-const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
-const crypto = require("crypto");
-const fs = require("fs");
-const path = require("path");
-const aws_cdk_lib_1 = require("aws-cdk-lib");
-const aws_codebuild_1 = require("aws-cdk-lib/aws-codebuild");
-const aws_ecr_1 = require("aws-cdk-lib/aws-ecr");
-const aws_ecs_1 = require("aws-cdk-lib/aws-ecs");
-const aws_iam_1 = require("aws-cdk-lib/aws-iam");
-const aws_kms_1 = require("aws-cdk-lib/aws-kms");
-const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
-const aws_s3_assets_1 = require("aws-cdk-lib/aws-s3-assets");
-const custom_resources_1 = require("aws-cdk-lib/custom-resources");
-const constructs_1 = require("constructs");
-const PROVIDER_SINGLETON_ID = 'TokenInjectableDockerBuilderProvider';
-/**
- * Shared provider for `TokenInjectableDockerBuilder` instances.
- *
- * Creates the onEvent and isComplete Lambda functions once per stack.
- * Each builder instance registers its CodeBuild project ARN so the
- * shared Lambdas have permission to start builds and read logs.
- */
-class TokenInjectableDockerBuilderProvider extends constructs_1.Construct {
-    /**
-     * Get or create the singleton provider for this stack.
-     * All `TokenInjectableDockerBuilder` instances in the same stack
-     * share a single pair of Lambda functions.
-     */
-    static getOrCreate(scope, props) {
-        const stack = aws_cdk_lib_1.Stack.of(scope);
-        const existing = stack.node.tryFindChild(PROVIDER_SINGLETON_ID);
-        if (existing)
-            return existing;
-        return new TokenInjectableDockerBuilderProvider(stack, PROVIDER_SINGLETON_ID, props);
-    }
-    constructor(scope, id, props) {
-        super(scope, id);
-        this.onEventHandlerFunction = new aws_lambda_1.Function(this, 'OnEventHandler', {
-            runtime: aws_lambda_1.Runtime.NODEJS_22_X,
-            code: aws_lambda_1.Code.fromAsset(path.resolve(__dirname, '../onEvent')),
-            handler: 'onEvent.handler',
-            timeout: aws_cdk_lib_1.Duration.minutes(15),
-        });
-        this.onEventHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-            actions: [
-                'logs:CreateLogGroup',
-                'logs:PutRetentionPolicy',
-                'logs:DeleteLogGroup',
-            ],
-            resources: ['arn:aws:logs:*:*:log-group:/docker-builder/*'],
-        }));
-        this.isCompleteHandlerFunction = new aws_lambda_1.Function(this, 'IsCompleteHandler', {
-            runtime: aws_lambda_1.Runtime.NODEJS_22_X,
-            code: aws_lambda_1.Code.fromAsset(path.resolve(__dirname, '../isComplete')),
-            handler: 'isComplete.handler',
-            timeout: aws_cdk_lib_1.Duration.minutes(15),
-        });
-        this.isCompleteHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-            actions: [
-                'codebuild:BatchGetBuilds',
-                'codebuild:ListBuildsForProject',
-                'logs:GetLogEvents',
-                'logs:DescribeLogStreams',
-                'logs:DescribeLogGroups',
-            ],
-            resources: ['*'],
-        }));
-        const provider = new custom_resources_1.Provider(this, 'Provider', {
-            onEventHandler: this.onEventHandlerFunction,
-            isCompleteHandler: this.isCompleteHandlerFunction,
-            queryInterval: props?.queryInterval ?? aws_cdk_lib_1.Duration.seconds(30),
-        });
-        this.serviceToken = provider.serviceToken;
-    }
-    /**
-     * Grant the shared Lambdas permission to start builds for a specific
-     * CodeBuild project and pull/push to its ECR repository.
-     */
-    registerProject(project, ecrRepo, encryptionKey) {
-        this.onEventHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-            actions: ['codebuild:StartBuild'],
-            resources: [project.projectArn],
-        }));
-        ecrRepo.grantPullPush(this.onEventHandlerFunction);
-        ecrRepo.grantPullPush(this.isCompleteHandlerFunction);
-        if (encryptionKey) {
-            encryptionKey.grantEncryptDecrypt(this.onEventHandlerFunction);
-            encryptionKey.grantEncryptDecrypt(this.isCompleteHandlerFunction);
-        }
-    }
-}
-exports.TokenInjectableDockerBuilderProvider = TokenInjectableDockerBuilderProvider;
-_a = JSII_RTTI_SYMBOL_1;
-TokenInjectableDockerBuilderProvider[_a] = { fqn: "token-injectable-docker-builder.TokenInjectableDockerBuilderProvider", version: "1.13.3" };
-/**
- * A CDK construct to build and push Docker images to an ECR repository using
- * CodeBuild and Lambda custom resources, **then** retrieve the final image tag
- * so that ECS/Lambda references use the exact digest.
- */
-class TokenInjectableDockerBuilder extends constructs_1.Construct {
-    /**
-     * Creates a new `TokenInjectableDockerBuilder`.
-     *
-     * @param scope The scope in which to define this construct.
-     * @param id The scoped construct ID.
-     * @param props Configuration for building and pushing the Docker image.
-     */
-    constructor(scope, id, props) {
-        super(scope, id);
-        const { path: sourcePath, buildArgs, dockerLoginSecretArn, vpc, securityGroups, subnetSelection, installCommands, preBuildCommands, kmsEncryption = false, completenessQueryInterval, exclude, file: dockerFile, cacheDisabled = false, buildLogGroup: buildLogGroupProp, platform = 'linux/amd64', provider: sharedProvider, ecrPullThroughCachePrefixes, retainBuildLogs = false, maxImageCount, } = props;
-        // Optionally define a KMS key for ECR encryption if requested
-        let encryptionKey;
-        if (kmsEncryption) {
-            encryptionKey = new aws_kms_1.Key(this, 'EcrEncryptionKey', {
-                enableKeyRotation: true,
-            });
-        }
-        // Create an ECR repository (optionally with KMS encryption).
-        //
-        // SAFETY: We deliberately do NOT delete tagged images by default.
-        // Lambda functions pin images by digest internally; deleting an in-use
-        // tagged image makes the Lambda's next config update fail with
-        // "Image ID cannot be found". Users can opt-in to maxImageCount, but
-        // it carries a strong warning in the prop docs.
-        this.ecrRepository = new aws_ecr_1.Repository(this, 'ECRRepository', {
-            lifecycleRules: [
-                {
-                    rulePriority: 1,
-                    description: 'Remove untagged images after 30 days',
-                    tagStatus: aws_ecr_1.TagStatus.UNTAGGED,
-                    maxImageAge: aws_cdk_lib_1.Duration.days(30),
-                },
-                ...(maxImageCount !== undefined ? [{
-                        rulePriority: 2,
-                        description: `(OPT-IN, UNSAFE) Keep only ${maxImageCount} most recent tagged images`,
-                        tagStatus: aws_ecr_1.TagStatus.ANY,
-                        maxImageCount,
-                    }] : []),
-            ],
-            encryption: kmsEncryption ? aws_ecr_1.RepositoryEncryption.KMS : aws_ecr_1.RepositoryEncryption.AES_256,
-            encryptionKey: kmsEncryption ? encryptionKey : undefined,
-            imageScanOnPush: true,
-        });
-        let effectiveExclude = exclude;
-        if (!effectiveExclude) {
-            const dockerignorePath = path.join(sourcePath, '.dockerignore');
-            if (fs.existsSync(dockerignorePath)) {
-                const fileContent = fs.readFileSync(dockerignorePath, 'utf8');
-                effectiveExclude = fileContent
-                    .split('\n')
-                    .map((line) => line.trim())
-                    .filter((line) => line.length > 0 && !line.startsWith('#'));
-            }
-        }
-        // Ensure the target Dockerfile is never excluded (handles globs like "Dockerfile*")
-        const dockerFileName = dockerFile ?? 'Dockerfile';
-        if (effectiveExclude) {
-            effectiveExclude = effectiveExclude.filter((pattern) => {
-                const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&');
-                const regex = new RegExp(`^${escaped.replace(/\*/g, '.*').replace(/\?/g, '.')}$`, 'i');
-                return !regex.test(dockerFileName);
-            });
-        }
-        // Generate an ephemeral tag for CodeBuild
-        const imageTag = crypto.randomUUID();
-        // Wrap the source folder as an S3 asset for CodeBuild to use
-        const sourceAsset = new aws_s3_assets_1.Asset(this, 'SourceAsset', {
-            path: sourcePath,
-            exclude: effectiveExclude,
-        });
-        // Convert buildArgs to a CLI-friendly string
-        const buildArgsString = buildArgs
-            ? Object.entries(buildArgs)
-                .map(([k, v]) => `--build-arg ${k}=${v}`)
-                .join(' ')
-            : '';
-        const dockerFileFlag = dockerFile ? `-f $CODEBUILD_SRC_DIR/${dockerFile}` : '';
-        // Optional DockerHub login, if a secret ARN is provided
-        const dockerLoginCommands = dockerLoginSecretArn
-            ? [
-                'echo "Retrieving Docker credentials..."',
-                'apt-get update -y && apt-get install -y jq',
-                `DOCKER_USERNAME=$(aws secretsmanager get-secret-value --secret-id ${dockerLoginSecretArn} --query SecretString --output text | jq -r .username)`,
-                `DOCKER_PASSWORD=$(aws secretsmanager get-secret-value --secret-id ${dockerLoginSecretArn} --query SecretString --output text | jq -r .password)`,
-                'echo "Logging in to Docker Hub..."',
-                'echo $DOCKER_PASSWORD | docker login --username $DOCKER_USERNAME --password-stdin',
-            ]
-            : ['echo "No Docker credentials. Skipping Docker Hub login."'];
-        const buildxInstallCommands = cacheDisabled
-            ? []
-            : [
-                'echo "Setting up Docker buildx for ECR layer cache..."',
-                'docker buildx create --driver docker-container --name ecr-cache-builder --use 2>/dev/null || docker buildx use ecr-cache-builder',
-            ];
-        const platformFlag = `--platform ${platform}`;
-        // --provenance=false --sbom=false: Docker Buildx v0.10+ adds attestations by default,
-        // producing OCI image indexes that AWS Lambda does not support. Disable them for Lambda/ECS compatibility.
-        const buildCommand = cacheDisabled
-            ? `docker build ${platformFlag} ${dockerFileFlag} ${buildArgsString} -t $ECR_REPO_URI:${imageTag} $CODEBUILD_SRC_DIR`
-            : `docker buildx build --push ${platformFlag} --provenance=false --sbom=false --cache-from type=registry,ref=$ECR_REPO_URI:cache --cache-to type=registry,ref=$ECR_REPO_URI:cache,mode=max,image-manifest=true ${dockerFileFlag} ${buildArgsString} -t $ECR_REPO_URI:${imageTag} $CODEBUILD_SRC_DIR`;
-        const buildSpecObj = {
-            version: '0.2',
-            phases: {
-                install: {
-                    commands: [
-                        'echo "Beginning install phase..."',
-                        ...(installCommands ?? []),
-                        ...buildxInstallCommands,
-                    ],
-                },
-                pre_build: {
-                    commands: [
-                        ...(preBuildCommands ?? []),
-                        ...dockerLoginCommands,
-                        'echo "Retrieving AWS Account ID..."',
-                        'export ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)',
-                        'echo "Logging into Amazon ECR..."',
-                        'aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin $ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com',
-                    ],
-                },
-                build: {
-                    commands: [
-                        `echo "Building Docker image with tag ${imageTag}..."`,
-                        buildCommand,
-                    ],
-                },
-                ...(cacheDisabled && {
-                    post_build: {
-                        commands: [
-                            `echo "Pushing Docker image with tag ${imageTag}..."`,
-                            `docker push $ECR_REPO_URI:${imageTag}`,
-                        ],
-                    },
-                }),
-            },
-        };
-        const isArm = platform === 'linux/arm64';
-        const codeBuildImage = isArm
-            ? aws_codebuild_1.LinuxArmBuildImage.AMAZON_LINUX_2_STANDARD_3_0
-            : aws_codebuild_1.LinuxBuildImage.STANDARD_7_0;
-        // Create the CodeBuild project
-        const codeBuildProject = new aws_codebuild_1.Project(this, 'CodeBuildProject', {
-            source: aws_codebuild_1.Source.s3({
-                bucket: sourceAsset.bucket,
-                path: sourceAsset.s3ObjectKey,
-            }),
-            environment: {
-                buildImage: codeBuildImage,
-                privileged: true,
-            },
-            environmentVariables: {
-                ECR_REPO_URI: { value: this.ecrRepository.repositoryUri },
-            },
-            buildSpec: aws_codebuild_1.BuildSpec.fromObject(buildSpecObj),
-            ...(buildLogGroupProp && {
-                logging: {
-                    cloudWatch: {
-                        logGroup: buildLogGroupProp,
-                    },
-                },
-            }),
-            vpc,
-            securityGroups,
-            subnetSelection,
-        });
-        // Grant CodeBuild permission to write to the retained build logs group
-        if (retainBuildLogs) {
-            const stack = aws_cdk_lib_1.Stack.of(this);
-            codeBuildProject.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: [
-                    'logs:CreateLogGroup',
-                    'logs:CreateLogStream',
-                    'logs:PutLogEvents',
-                ],
-                resources: [
-                    `arn:aws:logs:${stack.region}:${stack.account}:log-group:/docker-builder/${codeBuildProject.projectName}`,
-                    `arn:aws:logs:${stack.region}:${stack.account}:log-group:/docker-builder/${codeBuildProject.projectName}:*`,
-                ],
-            }));
-        }
-        // Grant CodeBuild the ability to interact with ECR
-        this.ecrRepository.grantPullPush(codeBuildProject);
-        codeBuildProject.addToRolePolicy(new aws_iam_1.PolicyStatement({
-            actions: [
-                'ecr:GetAuthorizationToken',
-                'ecr:GetDownloadUrlForLayer',
-                'ecr:BatchCheckLayerAvailability',
-                'ecr:BatchGetImage',
-            ],
-            resources: ['*'],
-        }));
-        if (ecrPullThroughCachePrefixes && ecrPullThroughCachePrefixes.length > 0) {
-            const stack = aws_cdk_lib_1.Stack.of(this);
-            codeBuildProject.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: [
-                    'ecr:BatchGetImage',
-                    'ecr:GetDownloadUrlForLayer',
-                    'ecr:BatchCheckLayerAvailability',
-                    'ecr:BatchImportUpstreamImage',
-                    'ecr:CreateRepository',
-                ],
-                resources: ecrPullThroughCachePrefixes.map((prefix) => `arn:aws:ecr:${stack.region}:${stack.account}:repository/${prefix}/*`),
-            }));
-        }
-        if (dockerLoginSecretArn) {
-            codeBuildProject.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: ['secretsmanager:GetSecretValue'],
-                resources: [dockerLoginSecretArn],
-            }));
-        }
-        // Conditionally grant KMS encrypt/decrypt if a key is used
-        if (encryptionKey) {
-            encryptionKey.grantEncryptDecrypt(codeBuildProject.role);
-        }
-        // Resolve the service token: shared provider or per-instance Lambdas
-        let serviceToken;
-        if (sharedProvider) {
-            sharedProvider.registerProject(codeBuildProject, this.ecrRepository, encryptionKey);
-            serviceToken = sharedProvider.serviceToken;
-        }
-        else {
-            const onEventHandlerFunction = new aws_lambda_1.Function(this, 'OnEventHandlerFunction', {
-                runtime: aws_lambda_1.Runtime.NODEJS_22_X,
-                code: aws_lambda_1.Code.fromAsset(path.resolve(__dirname, '../onEvent')),
-                handler: 'onEvent.handler',
-                timeout: aws_cdk_lib_1.Duration.minutes(15),
-            });
-            onEventHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: ['codebuild:StartBuild'],
-                resources: [codeBuildProject.projectArn],
-            }));
-            onEventHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: [
-                    'logs:CreateLogGroup',
-                    'logs:PutRetentionPolicy',
-                    'logs:DeleteLogGroup',
-                ],
-                resources: ['arn:aws:logs:*:*:log-group:/docker-builder/*'],
-            }));
-            const isCompleteHandlerFunction = new aws_lambda_1.Function(this, 'IsCompleteHandlerFunction', {
-                runtime: aws_lambda_1.Runtime.NODEJS_22_X,
-                code: aws_lambda_1.Code.fromAsset(path.resolve(__dirname, '../isComplete')),
-                environment: {
-                    IMAGE_TAG: imageTag,
-                },
-                handler: 'isComplete.handler',
-                timeout: aws_cdk_lib_1.Duration.minutes(15),
-            });
-            isCompleteHandlerFunction.addToRolePolicy(new aws_iam_1.PolicyStatement({
-                actions: [
-                    'codebuild:BatchGetBuilds',
-                    'codebuild:ListBuildsForProject',
-                    'logs:GetLogEvents',
-                    'logs:DescribeLogStreams',
-                    'logs:DescribeLogGroups',
-                ],
-                resources: ['*'],
-            }));
-            if (encryptionKey) {
-                encryptionKey.grantEncryptDecrypt(onEventHandlerFunction);
-                encryptionKey.grantEncryptDecrypt(isCompleteHandlerFunction);
-            }
-            this.ecrRepository.grantPullPush(onEventHandlerFunction);
-            this.ecrRepository.grantPullPush(isCompleteHandlerFunction);
-            const provider = new custom_resources_1.Provider(this, 'CustomResourceProvider', {
-                onEventHandler: onEventHandlerFunction,
-                isCompleteHandler: isCompleteHandlerFunction,
-                queryInterval: completenessQueryInterval ?? aws_cdk_lib_1.Duration.seconds(30),
-            });
-            serviceToken = provider.serviceToken;
-        }
-        // Custom Resource that triggers the CodeBuild and waits for completion
-        const buildTriggerResource = new aws_cdk_lib_1.CustomResource(this, 'BuildTriggerResource', {
-            serviceToken,
-            properties: {
-                ProjectName: codeBuildProject.projectName,
-                ImageTag: imageTag,
-                Trigger: sourceAsset.assetHash,
-                RetainBuildLogs: retainBuildLogs ? 'true' : 'false',
-            },
-        });
-        buildTriggerResource.node.addDependency(codeBuildProject);
-        // Retrieve the final Docker image tag from Data.ImageTag.
-        // SAFETY: We reference by tag (not digest) here. The lifecycle policy
-        // above never deletes tagged images, so the digest behind this tag is
-        // guaranteed to remain in ECR for the life of the repository — even
-        // after rollbacks. (Digest references would be more robust against
-        // manual deletion, but CDK's L2 constructs don't accept tokenized
-        // digest values cleanly, so we keep the simpler tag form.)
-        const imageTagRef = buildTriggerResource.getAttString('ImageTag');
-        this.containerImage = aws_ecs_1.ContainerImage.fromEcrRepository(this.ecrRepository, imageTagRef);
-        this.dockerImageCode = aws_lambda_1.DockerImageCode.fromEcr(this.ecrRepository, {
-            tagOrDigest: imageTagRef,
-        });
-    }
-}
-exports.TokenInjectableDockerBuilder = TokenInjectableDockerBuilder;
-_b = JSII_RTTI_SYMBOL_1;
-TokenInjectableDockerBuilder[_b] = { fqn: "token-injectable-docker-builder.TokenInjectableDockerBuilder", version: "1.13.3" };
-//# sourceMappingURL=data:application/json;base64,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
+exports.TokenInjectableDockerBuilderProvider = exports.TokenInjectableDockerBuilder = void 0;
+var builder_1 = require("./builder");
+Object.defineProperty(exports, "TokenInjectableDockerBuilder", { enumerable: true, get: function () { return builder_1.TokenInjectableDockerBuilder; } });
+var provider_1 = require("./provider");
+Object.defineProperty(exports, "TokenInjectableDockerBuilderProvider", { enumerable: true, get: function () { return provider_1.TokenInjectableDockerBuilderProvider; } });
+//# sourceMappingURL=data:application/json;base64,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

package/lib/provider.d.ts

@@ -0,0 +1,63 @@
+import { Duration } from 'aws-cdk-lib';
+import { Project } from 'aws-cdk-lib/aws-codebuild';
+import { Repository } from 'aws-cdk-lib/aws-ecr';
+import { Key } from 'aws-cdk-lib/aws-kms';
+import { Construct } from 'constructs';
+/**
+ * Options for creating a `TokenInjectableDockerBuilderProvider`.
+ */
+export interface TokenInjectableDockerBuilderProviderProps {
+    /**
+     * How often the provider polls for build completion.
+     *
+     * @default Duration.seconds(30)
+     */
+    readonly queryInterval?: Duration;
+}
+/**
+ * Shared provider for `TokenInjectableDockerBuilder` instances.
+ *
+ * Creates the onEvent and isComplete Lambda functions once per stack.
+ * Each builder instance registers its CodeBuild project ARN so the
+ * shared Lambdas have permission to start builds and read logs.
+ */
+export declare class TokenInjectableDockerBuilderProvider extends Construct {
+    /**
+     * Get or create the singleton provider for this stack.
+     * All `TokenInjectableDockerBuilder` instances in the same stack
+     * share a single pair of Lambda functions.
+     */
+    static getOrCreate(scope: Construct, props?: TokenInjectableDockerBuilderProviderProps): TokenInjectableDockerBuilderProvider;
+    /** The service token used by CustomResource instances. */
+    readonly serviceToken: string;
+    private readonly onEventHandlerFunction;
+    private readonly isCompleteHandlerFunction;
+    private replicationFn?;
+    private replicationCr?;
+    private readonly replicationSpecs;
+    private constructor();
+    /**
+     * Grant the shared Lambdas permission to start builds for a specific
+     * CodeBuild project and pull/push to its ECR repository.
+     */
+    registerProject(project: Project, ecrRepo: Repository, encryptionKey?: Key): void;
+    /**
+     * Register a builder's replica regions with the singleton's replication-config
+     * custom resource. Multiple builders contribute specs; the CR merges them into
+     * a single registry-wide configuration on every deploy.
+     *
+     * Also grants the `isComplete` Lambda permission to BatchGetImage on each
+     * replica region's repo so it can poll for replication availability.
+     */
+    registerReplication(repoName: string, replicaRegions: string[]): void;
+    private ensureReplicationCr;
+    /**
+     * Enforce ECR registry replication caps at synth time so users get a clear
+     * error before deploy. Caps are per-registry (per AWS account), not
+     * per-stack — but this construct can only see specs registered through
+     * its own singletons. Cross-stack/cross-app rules outside this construct
+     * are invisible here; the replication CR will still surface those at
+     * deploy time via the ECR API's own error.
+     */
+    private assertReplicationCapsWithinLimits;
+}