complete incubator resources

.github/workflows/terraform-plan-with-oidc.yaml

@@ -31,15 +31,15 @@ jobs:
           pushd ./terraform-incubator/home-unite-us/dev
           terraform init
           terraform plan -out tf.plan
-          terraform apply tf.plan
+          # terraform apply tf.plan
           popd 
-      - name: Login to Amazon ECR
-        id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
-        with:
-          registries: "035866691871"
-      - name: Push an example image
-        run: |
-          docker pull nginx:alpine
-          docker tag nginx:alpine '035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:nginx-20241002.1'
-          docker push '035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:nginx-20241002.1'
+      # - name: Login to Amazon ECR
+      #   id: login-ecr
+      #   uses: aws-actions/amazon-ecr-login@v2
+      #   with:
+      #     registries: "035866691871"
+      # - name: Push an example image
+      #   run: |
+      #     docker pull nginx:alpine
+      #     docker tag nginx:alpine '035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:nginx-20241002.1'
+      #     docker push '035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:nginx-20241002.1'

terraform-incubator/home-unite-us/dev/main.tf

@@ -5,9 +5,9 @@ terraform {
     }
   }
   backend "s3" {
-    region   = "us-west-2"
-    key      = "incubator/home-unite-us/dev.tfstate"
-    bucket   = "hlfa-incubator-terragrunt"
+    region = "us-west-2"
+    key    = "incubator/home-unite-us/dev.tfstate"
+    bucket = "hlfa-incubator-terragrunt"
   }
 }
 
@@ -16,35 +16,174 @@ provider "aws" {
 }
 
 locals {
-  host_name = "homeunite.us"
-  app_name = "homeuniteus"
-  listener_arn = "arn:aws:elasticloadbalancing:us-west-2:035866691871:listener/app/incubator-prod-lb/7451adf77133ef36/390a225766a4daf3"
+  root_host_name = "homeunite.us"
+  app_name       = "homeuniteus"
+  listener_arn   = "arn:aws:elasticloadbalancing:us-west-2:035866691871:listener/app/incubator-prod-lb/7451adf77133ef36/390a225766a4daf3"
+  vpc_id         = "vpc-0bec93a4d80243845"
+  path_pattens   = ["/*"]
+  subdomains = [
+    "dev",
+    "qa",
+    "incubator"
+  ]
+  host_names = [for subdomain in local.subdomains : "${subdomain}.${local.app_name}"]
+
 }
 
 resource "aws_route53_zone" "main" {
-  name = local.host_name
+  name = local.root_host_name
 }
 
 resource "aws_route53_record" "root_a_record" {
   zone_id = aws_route53_zone.main.zone_id
-  name    = local.host_name
+  name    = local.root_host_name
   type    = "A"
   ttl     = 300
   records = ["18.223.160.58"]
 }
 
 resource "aws_ecr_repository" "this" {
-    image_tag_mutability = "MUTABLE"
-    name                 = local.app_name
-    tags                 = {
-      "Organization" = "Hack for LA"
-    }
+  image_tag_mutability = "MUTABLE"
+  name                 = local.app_name
+  tags = {
+    "Organization" = "Hack for LA"
+  }
 
-    image_scanning_configuration {
-        scan_on_push = true
-    }
+  image_scanning_configuration {
+    scan_on_push = true
+  }
 }
 
 data "aws_lb_listener" "listener" {
   arn = local.listener_arn
+}
+
+
+resource "aws_lb_target_group" "this" {
+  target_type          = "ip"
+  name                 = local.app_name
+  port                 = 80
+  protocol             = "HTTP"
+  vpc_id               = local.vpc_id
+  deregistration_delay = 5
+  stickiness {
+    type = "lb_cookie"
+  }
+  health_check {
+    path                = "/"
+    interval            = 15
+    healthy_threshold   = 3
+    unhealthy_threshold = 2
+    matcher             = "200,302"
+  }
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_lb_listener_rule" "static" {
+  listener_arn = local.listener_arn
+
+  action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.this.arn
+  }
+
+  condition {
+    host_header {
+      values = local.host_names
+    }
+  }
+
+  # Path Pattern condition
+  # dynamic "condition" {
+  #   for_each = length(var.path_patterns) == 0 ? [] : [var.path_patterns]
+
+  #   content {
+  #     path_pattern {
+  #       values = var.path_patterns
+  #     }
+  #   }
+  # }
+}
+
+
+# aws_ecs_task_definition.task:
+resource "aws_ecs_task_definition" "task" {
+  container_definitions = jsonencode(
+    [
+      {
+        cpu = 256
+        environment = [{
+          "name"  = "APP_ENVIRONMENT",
+          "value" = "DEV"
+        }]
+        essential = true
+        image     = "035866691871.dkr.ecr.us-west-2.amazonaws.com/homeuniteus:nginx-20241002.1"
+        logConfiguration = {
+          logDriver = "awslogs"
+          options = {
+            awslogs-group         = "ecs/homeuniteus"
+            awslogs-region        = "us-west-2"
+            awslogs-stream-prefix = "app"
+          }
+        }
+        memoryReservation = 512
+        mountPoints       = []
+        name              = "homeuniteus"
+        portMappings = [
+          {
+            containerPort = 80
+            hostPort      = 13827
+            protocol      = "tcp"
+          },
+        ]
+        readonlyRootFilesystem = false
+        volumesFrom            = []
+      },
+    ]
+  )
+  cpu                = "256"
+  execution_role_arn = "arn:aws:iam::035866691871:role/incubator-prod-ecs-task-role"
+  family             = "homeuniteus"
+  id                 = "homeuniteus"
+  memory             = "512"
+  network_mode       = "awsvpc"
+  requires_compatibilities = [
+    "FARGATE",
+  ]
+  task_role_arn = "arn:aws:iam::035866691871:role/incubator-prod-ecs-task-role"
+}
+
+
+
+resource "aws_ecs_service" "fargate" {
+  name                   = "homeuniteus"
+  cluster                = "arn:aws:ecs:us-west-2:035866691871:cluster/incubator-prod"
+  enable_execute_command = true
+  task_definition        = aws_ecs_task_definition.task.arn
+  launch_type            = "FARGATE"
+  desired_count          = 1
+
+  network_configuration {
+    subnets = [
+      "subnet-03202f3bf9a24c1a5",
+      "subnet-08c26edd1afc2b9d7",
+    ]
+    security_groups  = [aws_security_group.fargate.id]
+    assign_public_ip = true
+  }
+
+  load_balancer {
+    container_name   = local.app_name
+    container_port   = 80
+    target_group_arn = aws_lb_target_group.this.arn
+  }
+
+  depends_on = [aws_lb_target_group.this, aws_lb_listener_rule.static]
+
+  lifecycle {
+    ignore_changes = [desired_count]
+  }
 }