integ.codepipeline.ts

import cdk = require("aws-cdk-lib");
import { Construct } from 'constructs';
import codecommit = require("aws-cdk-lib/aws-codecommit");
import codebuild = require("aws-cdk-lib/aws-codebuild");
import codepipeline = require("aws-cdk-lib/aws-codepipeline");
import codepipeline_actions = require("aws-cdk-lib/aws-codepipeline-actions");
import iam = require("aws-cdk-lib/aws-iam");
import ecr = require("aws-cdk-lib/aws-ecr");
import sns = require("aws-cdk-lib/aws-sns");
import sns_subscriptions = require("aws-cdk-lib/aws-sns-subscriptions");
import targets = require("aws-cdk-lib/aws-events-targets");
import yaml = require('js-yaml');
import fs = require('fs');

export interface EksIntegCodePipelineDeployStackProps extends cdk.StackProps {
  readonly name?: string;
  readonly codecommit_repo?: string;
  readonly codecommit_branch?: string;
  readonly codebuild_project?: string;
  readonly codepipeline_name?: string;
  readonly notifications_email?: string;
}

export class EksIntegCodePipelineDeployStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props: EksIntegCodePipelineDeployStackProps) {
    super(scope, id, props);

    const name = 'game-2048'
// -------------------------------------------------------------
// ### buildspec.yml
// version: 0.2
// env:
//   variables:
//     ECR_URI: "<your-ecr-repo-uri>"
// phases:
//   install:·
//     runtime-versions:·
//       docker: 18
//   build:
//     commands:
//       - $(aws ecr get-login --no-include-email --region us-east-1)
//       - docker build -t ecr-image-sample:latest .
//       - docker tag ecr-image-sample:latest ${ECR_URI}:latest
//       - docker push $ECR_URI
// artifacts:
//   files:
//     - '**/*'
// -------------------------------------------------------------
// ### Dockerfile
// FROM python:3.7-alpine
// COPY . /srv
// RUN pip install -r /srv/requirements.txt
// CMD [ "sh", "-c", "python /srv/app.py" ]
// EXPOSE 80
// -------------------------------------------------------------
// ### app.py
// from flask import Flask
//
// app = Flask(__name__)
//
// @app.route('/')
// def hello_world():
//     return 'Hello, World!'
//
// if __name__ == "__main__":
//     app.run(host='0.0.0.0', port=80, threaded=True)
// -------------------------------------------------------------

    const ecrRepository = new ecr.Repository(this, "image", {
      repositoryName: 'amazon-eks-' + name
    });

    /**
     * CodeCommit: create repository
    **/
    const codecommitRepository = new codecommit.Repository(this, "source", {
      repositoryName: name
    });

    const kubectlExecutionRole = iam.Role.fromRoleArn(this, 'amazon-eks-kubectl-role', "arn:aws:iam::" + this.account + ":role/AmazonEksKubectlRole")

    /**
     * CodeBuild:
     * 1. create codebuild project
     * 2. create policy of ECR and Codecommit
    **/
    const codebuildProject = new codebuild.PipelineProject(this, "build", {
        projectName: name,
        role: kubectlExecutionRole,
        buildSpec: codebuild.BuildSpec.fromObject(
            yaml.load(
                fs.readFileSync(
                    'samples/src/kubernetes/deploy-eks-game2048.yml',
                    'utf8'
                )
            ) as Record<string, any>[]
        ),
        environment: {
            computeType: codebuild.ComputeType.SMALL,
            buildImage: codebuild.LinuxBuildImage.AMAZON_LINUX_2_3,
            privileged: true,
            environmentVariables: {
                AWS_ACCOUNT_ID: {
                    type: codebuild.BuildEnvironmentVariableType.PLAINTEXT,
                    value: cdk.Aws.ACCOUNT_ID
                },
                IMAGE_URI: {
                    type: codebuild.BuildEnvironmentVariableType.PLAINTEXT,
                    value: ecrRepository.repositoryUri
                },
                EKS_CLUSTER_NAME: {
                    type: codebuild.BuildEnvironmentVariableType.PLAINTEXT,
                    value: 'eks-sample'
                }
            }
        }
    });

    codecommitRepository.onCommit('OnCommit', {
        target: new targets.CodeBuildProject(codebuildProject),
    });
    ecrRepository.grantPullPush(codebuildProject.role!);

    /**
     * CodePipeline:
     * 1. create codebuild project
     * 2. create policy of ECR and Codecommit
    **/

    // trigger of `CodeCommitTrigger.POLL`
    const sourceOutput = new codepipeline.Artifact();
    const sourceAction = new codepipeline_actions.CodeCommitSourceAction({
      actionName: "Source-CodeCommit",
      branch: props.codecommit_branch ?? 'main',
      trigger: codepipeline_actions.CodeCommitTrigger.POLL,
      repository: codecommitRepository,
      output: sourceOutput
    });

    // when codecommit input then action of codebuild
    const buildOutput = new codepipeline.Artifact();
    const buildAction = new codepipeline_actions.CodeBuildAction({
      actionName: "Build",
      input: sourceOutput,
      outputs: [
        buildOutput
      ],
      project: codebuildProject
    });

    // create pipeline, and then add both codecommit and codebuild
    const pipeline = new codepipeline.Pipeline(this, "pipeline", {
      pipelineName: props.codepipeline_name ?? name + '-pipeline'
    });
    pipeline.addStage({
      stageName: "Source",
      actions: [sourceAction]
    });
    pipeline.addStage({
      stageName: "Build",
      actions: [buildAction]
    });

    /**
     * SNS: Monitor pipeline state change then notifiy
    **/
    if ( props.notifications_email ) {
      const pipelineSnsTopic = new sns.Topic(this, 'pipeline-stage-change');
      pipelineSnsTopic.addSubscription(new sns_subscriptions.EmailSubscription(props.notifications_email))
      pipeline.onStateChange("PipelineStateChange", {
        target: new targets.SnsTopic(pipelineSnsTopic),
        description: 'Listen for codepipeline change events',
        eventPattern: {
          detail: {
            state: [ 'FAILED', 'SUCCEEDED', 'STOPPED' ]
          }
        }
      });
    }

    /**
     * Output:
     * - CodeCommit clone path of HTTP and SSH
     * - ECR Repository URI
    **/
    new cdk.CfnOutput(this, 'CodeCommitCloneUrlHttp', {
      description: 'CodeCommit Repo CloneUrl HTTP',
      value: codecommitRepository.repositoryCloneUrlHttp
    });

    new cdk.CfnOutput(this, 'CodeCommitCloneUrlSsh', {
      description: 'CodeCommit Repo CloneUrl SSH',
      value: codecommitRepository.repositoryCloneUrlSsh
    });

    new cdk.CfnOutput(this, 'EcrRepositoryUri', {
      description: 'ECR Repository URI',
      value: ecrRepository.repositoryUri
    });
  }
}