implemented aws.#Config and aws/cloudformation packages in stdlib
Signed-off-by: Sam Alba <sam.alba@gmail.com>
This commit is contained in:
Sam Alba
parent
98a06c67d2
commit
64ab495c82
10
stdlib/aws/aws.cue
Normal file
10
stdlib/aws/aws.cue
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
package aws
|
||||||
|
|
||||||
|
#Config: {
|
||||||
|
// AWS region
|
||||||
|
region: string
|
||||||
|
// AWS access key
|
||||||
|
accessKey: string // FIXME: should be a secret
|
||||||
|
// AWS secret key
|
||||||
|
secretKey: string // FIXME: should be a secret
|
||||||
|
}
|
||||||
101
stdlib/aws/cloudformation/cloudformation.cue
Normal file
101
stdlib/aws/cloudformation/cloudformation.cue
Normal file
@ -0,0 +1,101 @@
|
|||||||
|
package cloudformation
|
||||||
|
|
||||||
|
import (
|
||||||
|
"encoding/json"
|
||||||
|
|
||||||
|
"dagger.io/dagger"
|
||||||
|
"dagger.io/alpine"
|
||||||
|
"dagger.io/aws"
|
||||||
|
)
|
||||||
|
|
||||||
|
// AWS CloudFormation Stack
|
||||||
|
#Stack: {
|
||||||
|
|
||||||
|
// AWS Config
|
||||||
|
config: aws.#Config
|
||||||
|
|
||||||
|
// Source is the Cloudformation template (JSON/YAML string)
|
||||||
|
source: string
|
||||||
|
|
||||||
|
// Stackname is the cloudformation stack
|
||||||
|
stackName: string
|
||||||
|
|
||||||
|
// Stack parameters
|
||||||
|
parameters: [string]: _
|
||||||
|
|
||||||
|
// Behavior when failure to create/update the Stack
|
||||||
|
onFailure: *"DO_NOTHING" | "ROLLBACK" | "DELETE"
|
||||||
|
|
||||||
|
// Timeout for waiting for the stack to be created/updated (in minutes)
|
||||||
|
timeout: *10 | uint
|
||||||
|
|
||||||
|
// Never update the stack if already exists
|
||||||
|
neverUpdate: *false | bool
|
||||||
|
|
||||||
|
#files: {
|
||||||
|
"/entrypoint.sh": #Code
|
||||||
|
"/src/template.json": source
|
||||||
|
if len(parameters) > 0 {
|
||||||
|
"/src/parameters.json": json.Marshal(
|
||||||
|
[ for key, val in parameters {
|
||||||
|
ParameterKey: "\(key)"
|
||||||
|
ParameterValue: "\(val)"
|
||||||
|
}])
|
||||||
|
"/src/parameters_overrides.json": json.Marshal([ for key, val in parameters {"\(key)=\(val)"}])
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
outputs: {
|
||||||
|
[string]: string
|
||||||
|
|
||||||
|
#dagger: compute: [
|
||||||
|
dagger.#Load & {
|
||||||
|
from: alpine.#Image & {
|
||||||
|
package: bash: "=5.1.0-r0"
|
||||||
|
package: jq: "=1.6-r1"
|
||||||
|
package: "aws-cli": "=1.18.177-r0"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
dagger.#Mkdir & {
|
||||||
|
path: "/src"
|
||||||
|
},
|
||||||
|
for dest, content in #files {
|
||||||
|
dagger.#WriteFile & {
|
||||||
|
"dest": dest
|
||||||
|
"content": content
|
||||||
|
}
|
||||||
|
},
|
||||||
|
dagger.#Exec & {
|
||||||
|
args: [
|
||||||
|
"/bin/bash",
|
||||||
|
"--noprofile",
|
||||||
|
"--norc",
|
||||||
|
"-eo",
|
||||||
|
"pipefail",
|
||||||
|
"/entrypoint.sh",
|
||||||
|
]
|
||||||
|
env: {
|
||||||
|
AWS_CONFIG_FILE: "/cache/aws/config"
|
||||||
|
AWS_ACCESS_KEY_ID: config.accessKey
|
||||||
|
AWS_SECRET_ACCESS_KEY: config.secretKey
|
||||||
|
AWS_DEFAULT_REGION: config.region
|
||||||
|
AWS_REGION: config.region
|
||||||
|
AWS_DEFAULT_OUTPUT: "json"
|
||||||
|
AWS_PAGER: ""
|
||||||
|
if neverUpdate {
|
||||||
|
NEVER_UPDATE: "true"
|
||||||
|
}
|
||||||
|
STACK_NAME: stackName
|
||||||
|
TIMEOUT: "\(timeout)"
|
||||||
|
ON_FAILURE: onFailure
|
||||||
|
}
|
||||||
|
dir: "/src"
|
||||||
|
mount: "/cache/aws": "cache"
|
||||||
|
},
|
||||||
|
dagger.#Export & {
|
||||||
|
source: "/outputs.json"
|
||||||
|
format: "json"
|
||||||
|
},
|
||||||
|
]
|
||||||
|
}
|
||||||
|
}
|
||||||
108
stdlib/aws/cloudformation/code.cue
Normal file
108
stdlib/aws/cloudformation/code.cue
Normal file
@ -0,0 +1,108 @@
|
|||||||
|
package cloudformation
|
||||||
|
|
||||||
|
#Code: #"""
|
||||||
|
set +o pipefail
|
||||||
|
|
||||||
|
aws cloudformation validate-template --template-body file:///src/template.json
|
||||||
|
parameters=""
|
||||||
|
|
||||||
|
function getOutputs() {
|
||||||
|
aws cloudformation describe-stacks \
|
||||||
|
--stack-name "$STACK_NAME" \
|
||||||
|
--query 'Stacks[].Outputs' \
|
||||||
|
--output json \
|
||||||
|
| jq '.[] | map( { (.OutputKey|tostring): .OutputValue } ) | add' \
|
||||||
|
> /outputs.json
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check if the stack exists
|
||||||
|
aws cloudformation describe-stacks --stack-name "$STACK_NAME" 2>/dev/null || {
|
||||||
|
if [ -f /src/parameters.json ]; then
|
||||||
|
parameters="--parameters file:///src/parameters.json"
|
||||||
|
cat /src/parameters.json
|
||||||
|
fi
|
||||||
|
|
||||||
|
aws cloudformation create-stack \
|
||||||
|
--stack-name "$STACK_NAME" \
|
||||||
|
--template-body "file:///src/template.json" \
|
||||||
|
--capabilities CAPABILITY_IAM \
|
||||||
|
--on-failure "$ON_FAILURE" \
|
||||||
|
--timeout-in-minutes "$TIMEOUT" \
|
||||||
|
$parameters \
|
||||||
|
|| {
|
||||||
|
# Create failed, display errors
|
||||||
|
aws cloudformation describe-stack-events \
|
||||||
|
--stack-name "$STACK_NAME" \
|
||||||
|
--max-items 10 \
|
||||||
|
| >&2 jq '.StackEvents[] | select((.ResourceStatus | contains("FAILED")) or (.ResourceStatus | contains("ERROR"))) | ("===> ERROR: " + .LogicalResourceId + ": " + .ResourceStatusReason)'
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
aws cloudformation wait stack-create-complete \
|
||||||
|
--stack-name "$STACK_NAME"
|
||||||
|
|
||||||
|
getOutputs
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# In case there is an action already in progress, we wait for the corresponding action to complete
|
||||||
|
wait_action=""
|
||||||
|
stack_status=$(aws cloudformation describe-stacks --stack-name "$STACK_NAME" | jq -r '.Stacks[].StackStatus')
|
||||||
|
case "$stack_status" in
|
||||||
|
"CREATE_FAILED")
|
||||||
|
echo "Deleting previous failed stack..."
|
||||||
|
aws cloudformation delete-stack --stack-name "$STACK_NAME"
|
||||||
|
aws cloudformation wait stack-delete-complete --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
"CREATE_IN_PROGRESS")
|
||||||
|
echo "Stack create already in progress, waiting..."
|
||||||
|
aws cloudformation wait stack-create-complete --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
"UPDATE_IN_PROGRESS")
|
||||||
|
# Cancel update to avoid stacks stuck in deadlock (re-apply then works)
|
||||||
|
echo "Stack update already in progress, waiting..."
|
||||||
|
aws cloudformation cancel-update-stack --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
"ROLLBACK_IN_PROGRESS")
|
||||||
|
echo "Stack rollback already in progress, waiting..."
|
||||||
|
aws cloudformation wait stack-rollback-complete --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
"DELETE_IN_PROGRESS")
|
||||||
|
echo "Stack delete already in progress, waiting..."
|
||||||
|
aws cloudformation wait stack-delete-complete --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
"UPDATE_COMPLETE_CLEANUP_IN_PROGRESS")
|
||||||
|
echo "Stack update almost completed, waiting..."
|
||||||
|
aws cloudformation wait stack-update-complete --stack-name "$STACK_NAME" || true
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
[ -n "$NEVER_UPDATE" ] && {
|
||||||
|
getOutputs
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# Stack exists, trigger an update via `deploy`
|
||||||
|
if [ -f /src/parameters_overrides.json ]; then
|
||||||
|
parameters="--parameter-overrides file:///src/parameters_overrides.json"
|
||||||
|
cat /src/parameters_overrides.json
|
||||||
|
fi
|
||||||
|
echo "Deploying stack $STACK_NAME"
|
||||||
|
aws cloudformation deploy \
|
||||||
|
--stack-name "$STACK_NAME" \
|
||||||
|
--template-file "/src/template.json" \
|
||||||
|
--capabilities CAPABILITY_IAM \
|
||||||
|
--no-fail-on-empty-changeset \
|
||||||
|
$parameters \
|
||||||
|
|| {
|
||||||
|
# Deploy failed, display errors
|
||||||
|
echo "Failed to deploy stack $STACK_NAME"
|
||||||
|
aws cloudformation describe-stack-events \
|
||||||
|
--stack-name "$STACK_NAME" \
|
||||||
|
--max-items 10 \
|
||||||
|
| >&2 jq '.StackEvents[] | select((.ResourceStatus | contains("FAILED")) or (.ResourceStatus | contains("ERROR"))) | ("===> ERROR: " + .LogicalResourceId + ": " + .ResourceStatusReason)'
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
getOutputs
|
||||||
|
"""#
|
||||||
Reference in New Issue
Block a user