Initial app-cluster module development.

.gitignore

@@ -0,0 +1,10 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+**/.idea/*
+.idea
+.idea/workspace.xml

configuration/app_ecs_service_role.tpl

@@ -0,0 +1,14 @@
+{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "ecs.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

configuration/app_ecs_task_definition_magento2.tpl

@@ -0,0 +1,95 @@
+ [
+    {
+      "name": "magento2",
+      "image": "${data.aws_ecr_repository.magento2.repository_url}",
+      "mountPoints": [
+        {
+          "containerPath": "/var/www/html/pub/media",
+          "sourceVolume": "media",
+          "readOnly": null
+        }
+      ],
+      "essential": true,
+      "environment": [
+        {
+          "name": "ENVIRONMENT",
+          "value": "${terraform.workspace}"
+        },
+        {
+          "name": "MAGE_MODE",
+          "value": "production"
+        },
+        {
+          "name": "CACHE_PREFIX",
+          "value": "1_"
+        },
+        {
+          "name": "MYSQL_HOST",
+          "value": "${aws_route53_record.db.fqdn}"
+        },
+        {
+          "name": "MYSQL_DATABASE",
+          "value": "${var.env_mysql_database}"
+        },
+        {
+          "name": "MYSQL_USER",
+          "value": "${var.env_mysql_user}"
+        },
+        {
+          "name": "MYSQL_PASSWORD",
+          "value": "${lookup(var.rds_password, terraform.workspace)}"
+        },
+        {
+          "name": "REDIS_CACHE_HOST",
+          "value": "${aws_route53_record.redis_cache.fqdn}"
+        },
+        {
+          "name": "REDIS_SESSION_HOST",
+          "value": "${aws_route53_record.redis_session.fqdn}"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "${terraform.workspace}-app",
+          "awslogs-region": "us-east-1",
+          "awslogs-stream-prefix": "magento2"
+        }
+      },
+      "cpu": 0,
+      "memoryReservation": 768
+    },
+    {
+      "name": "nginx",
+      "volumesFrom": [
+        {
+          "readOnly": true,
+          "sourceContainer": "magento2"
+        }
+      ],
+      "portMappings": [
+        {
+          "hostPort": 80,
+          "containerPort": 80,
+          "protocol": "tcp"
+        }
+      ],
+      "essential": true,
+      "environment": [],
+      "links": [
+        "magento2:phpfpm"
+      ],
+      "image": "${data.aws_ecr_repository.nginx.repository_url}",
+      "command": [],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "${terraform.workspace}-app",
+          "awslogs-region": "us-east-1",
+          "awslogs-stream-prefix": "nginx"
+        }
+      },
+      "cpu": 0,
+      "memoryReservation": 512
+    }
+  ]

configuration/app_ecs_task_role.tpl

@@ -0,0 +1,13 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}

configuration/ecs_autoscale_role.tpl

@@ -0,0 +1,14 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "application-autoscaling.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

configuration/ecs_role.tpl

@@ -0,0 +1,15 @@
+{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "ecs.amazonaws.com",
+          "ec2.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

configuration/logs-policy.tpl

@@ -0,0 +1,15 @@
+{
+  "Id": "${var.project_name}-${terraform.workspace}-logs-policy",
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "Stmt1484671540333",
+      "Action": "s3:PutObject",
+      "Effect": "Allow",
+      "Resource": "arn:aws:s3:::${var.project_name}-${terraform.workspace}-logs/*",
+      "Principal": {
+        "AWS": "arn:aws:iam::${lookup(var.default_log_account_ids, var.aws_region)}:root"
+      }
+    }
+  ]
+}

modules/app-cluster/aws/ecs-service/app_ecs_service_role.tpl

@@ -0,0 +1,14 @@
+{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "ecs.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

modules/app-cluster/aws/ecs-service/app_ecs_task_definition_magento2.tpl

@@ -0,0 +1,95 @@
+ [
+    {
+      "name": "magento2",
+      "image": "${data.aws_ecr_repository.magento2.repository_url}",
+      "mountPoints": [
+        {
+          "containerPath": "/var/www/html/pub/media",
+          "sourceVolume": "media",
+          "readOnly": null
+        }
+      ],
+      "essential": true,
+      "environment": [
+        {
+          "name": "ENVIRONMENT",
+          "value": "${terraform.workspace}"
+        },
+        {
+          "name": "MAGE_MODE",
+          "value": "production"
+        },
+        {
+          "name": "CACHE_PREFIX",
+          "value": "1_"
+        },
+        {
+          "name": "MYSQL_HOST",
+          "value": "${aws_route53_record.db.fqdn}"
+        },
+        {
+          "name": "MYSQL_DATABASE",
+          "value": "${var.env_mysql_database}"
+        },
+        {
+          "name": "MYSQL_USER",
+          "value": "${var.env_mysql_user}"
+        },
+        {
+          "name": "MYSQL_PASSWORD",
+          "value": "${lookup(var.rds_password, terraform.workspace)}"
+        },
+        {
+          "name": "REDIS_CACHE_HOST",
+          "value": "${aws_route53_record.redis_cache.fqdn}"
+        },
+        {
+          "name": "REDIS_SESSION_HOST",
+          "value": "${aws_route53_record.redis_session.fqdn}"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "${terraform.workspace}-app",
+          "awslogs-region": "us-east-1",
+          "awslogs-stream-prefix": "magento2"
+        }
+      },
+      "cpu": 0,
+      "memoryReservation": 768
+    },
+    {
+      "name": "nginx",
+      "volumesFrom": [
+        {
+          "readOnly": true,
+          "sourceContainer": "magento2"
+        }
+      ],
+      "portMappings": [
+        {
+          "hostPort": 80,
+          "containerPort": 80,
+          "protocol": "tcp"
+        }
+      ],
+      "essential": true,
+      "environment": [],
+      "links": [
+        "magento2:phpfpm"
+      ],
+      "image": "${data.aws_ecr_repository.nginx.repository_url}",
+      "command": [],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "${terraform.workspace}-app",
+          "awslogs-region": "us-east-1",
+          "awslogs-stream-prefix": "nginx"
+        }
+      },
+      "cpu": 0,
+      "memoryReservation": 512
+    }
+  ]

modules/app-cluster/aws/ecs-service/app_ecs_task_role.tpl

@@ -0,0 +1,13 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}

modules/app-cluster/aws/ecs-service/ecs_autoscale_role.tpl

@@ -0,0 +1,14 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "application-autoscaling.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

modules/app-cluster/aws/ecs-service/ecs_role.tpl

@@ -0,0 +1,15 @@
+{
+  "Version": "2008-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": [
+          "ecs.amazonaws.com",
+          "ec2.amazonaws.com"
+        ]
+      },
+      "Effect": "Allow"
+    }
+  ]
+}

modules/app-cluster/aws/ecs-service/logs-policy.tpl

@@ -0,0 +1,15 @@
+{
+  "Id": "${var.project_name}-${terraform.workspace}-logs-policy",
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "Stmt1484671540333",
+      "Action": "s3:PutObject",
+      "Effect": "Allow",
+      "Resource": "arn:aws:s3:::${var.project_name}-${terraform.workspace}-logs/*",
+      "Principal": {
+        "AWS": "arn:aws:iam::${lookup(var.default_log_account_ids, var.aws_region)}:root"
+      }
+    }
+  ]
+}