Initial migration to CDK (#2808)

* Add cdk package which uses the Gateway cloudformation yaml

* Update riffraff to use synthesized Cloudformation JSON

* Exclude CDK from root jest, prettier, and eslint

* Synth CDK in CI

* Update CDK test snapshot

.eslintrc.json

@@ -57,5 +57,6 @@
 		"react": {
 			"version": "detect"
 		}
-	}
+	},
+	"ignorePatterns": ["cdk/"]
 }

.github/workflows/ci.yml

@@ -30,4 +30,4 @@ jobs:
             identity-gateway:
               - identity-gateway.zip
             gateway-cloudformation:
-              - cloudformation.yaml
+              - cdk/cdk.out

.prettierignore

@@ -4,3 +4,6 @@ build
 .ratelimit.schema.json
 scripts/okta/okta-login.js
 pnpm-lock.yaml
+
+# TODO: Shared prettier config between Gateway and CDK? Monorepo?
+cdk/

cdk/.gitignore

@@ -0,0 +1,11 @@
+*.js
+!jest.config.js
+!jest.setup.js
+!.eslintrc.js
+*.d.ts
+node_modules
+dist
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out

cdk/README.md

@@ -0,0 +1,5 @@
+# Infrastructure
+
+This directory defines the components to be deployed to AWS.
+
+See [`package.json`](./package.json) for a list of available scripts.

cdk/bin/cdk.ts

@@ -0,0 +1,15 @@
+import 'source-map-support/register';
+import { GuRoot } from '@guardian/cdk/lib/constructs/root';
+import { IdentityGateway } from '../lib/identity-gateway';
+
+const app = new GuRoot();
+new IdentityGateway(app, 'IdentityGateway-euwest-1-PROD', {
+	stack: 'identity',
+	stage: 'PROD',
+	env: { region: 'eu-west-1' },
+});
+new IdentityGateway(app, 'IdentityGateway-euwest-1-CODE', {
+	stack: 'identity',
+	stage: 'CODE',
+	env: { region: 'eu-west-1' },
+});

cdk/cdk.json

@@ -0,0 +1,7 @@
+{
+  "app": "npx ts-node bin/cdk.ts",
+  "context": {
+    "aws-cdk:enableDiffNoFail": "true",
+    "@aws-cdk/core:stackRelativeExports": "true"
+  }
+}

cdk/jest.setup.js

@@ -0,0 +1 @@
+jest.mock("@guardian/cdk/lib/constants/tracking-tag");