-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 94b734e
Showing
16 changed files
with
558 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,70 @@ | ||
name: 'Terraform' | ||
on: | ||
push: | ||
branches: | ||
- main | ||
pull_request: | ||
jobs: | ||
terraform: | ||
name: 'Terraform' | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v3 | ||
- name: Setup Terraform | ||
uses: hashicorp/setup-terraform@v1 | ||
with: | ||
cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }} | ||
- name: Terraform Format | ||
id: fmt | ||
run: terraform fmt -check | ||
- name: Terraform Init | ||
id: init | ||
run: terraform init | ||
env: | ||
TF_WORKSPACE: production | ||
- name: Terraform Validate | ||
id: validate | ||
run: terraform validate -no-color | ||
- name: Terraform Plan | ||
id: plan | ||
if: github.event_name == 'pull_request' | ||
run: terraform plan -no-color -input=false | ||
continue-on-error: true | ||
- name: Update Pull Request | ||
uses: actions/github-script@v6.0.0 | ||
if: github.event_name == 'pull_request' | ||
env: | ||
PLAN: "terraform\n${{ steps.plan.outputs.stdout }}" | ||
with: | ||
github-token: ${{ secrets.GITHUB_TOKEN }} | ||
script: | | ||
const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\` | ||
#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\` | ||
#### Terraform Plan 📖\`${{ steps.plan.outcome }}\` | ||
#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\` | ||
<details><summary>Show Plan</summary> | ||
\`\`\`\n | ||
${process.env.PLAN} | ||
\`\`\` | ||
</details> | ||
*Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`*`; | ||
github.rest.issues.createComment({ | ||
issue_number: context.issue.number, | ||
owner: context.repo.owner, | ||
repo: context.repo.repo, | ||
body: output | ||
}) | ||
- name: Terraform Plan Status | ||
if: steps.plan.outcome == 'failure' | ||
run: exit 1 | ||
- name: Terraform Apply | ||
if: github.ref == 'refs/heads/main' && github.event_name == 'push' | ||
run: terraform apply -auto-approve -input=false | ||
env: | ||
TF_WORKSPACE: production |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,113 @@ | ||
### JetBrains template | ||
# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider | ||
# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839 | ||
|
||
# JetBrains settings | ||
.idea/ | ||
|
||
# User-specific stuff | ||
.idea/**/workspace.xml | ||
.idea/**/tasks.xml | ||
.idea/**/usage.statistics.xml | ||
.idea/**/dictionaries | ||
.idea/**/shelf | ||
|
||
# Generated files | ||
.idea/**/contentModel.xml | ||
|
||
# Sensitive or high-churn files | ||
.idea/**/dataSources/ | ||
.idea/**/dataSources.ids | ||
.idea/**/dataSources.local.xml | ||
.idea/**/sqlDataSources.xml | ||
.idea/**/dynamic.xml | ||
.idea/**/uiDesigner.xml | ||
.idea/**/dbnavigator.xml | ||
|
||
# Gradle | ||
.idea/**/gradle.xml | ||
.idea/**/libraries | ||
|
||
# Gradle and Maven with auto-import | ||
# When using Gradle or Maven with auto-import, you should exclude module files, | ||
# since they will be recreated, and may cause churn. Uncomment if using | ||
# auto-import. | ||
# .idea/artifacts | ||
# .idea/compiler.xml | ||
# .idea/jarRepositories.xml | ||
# .idea/modules.xml | ||
# .idea/*.iml | ||
# .idea/modules | ||
# *.iml | ||
# *.ipr | ||
|
||
# CMake | ||
cmake-build-*/ | ||
|
||
# Mongo Explorer plugin | ||
.idea/**/mongoSettings.xml | ||
|
||
# File-based project format | ||
*.iws | ||
|
||
# IntelliJ | ||
out/ | ||
|
||
# mpeltonen/sbt-idea plugin | ||
.idea_modules/ | ||
|
||
# JIRA plugin | ||
atlassian-ide-plugin.xml | ||
|
||
# Cursive Clojure plugin | ||
.idea/replstate.xml | ||
|
||
# Crashlytics plugin (for Android Studio and IntelliJ) | ||
com_crashlytics_export_strings.xml | ||
crashlytics.properties | ||
crashlytics-build.properties | ||
fabric.properties | ||
|
||
# Editor-based Rest Client | ||
.idea/httpRequests | ||
|
||
# Android studio 3.1+ serialized cache file | ||
.idea/caches/build_file_checksums.ser | ||
|
||
# Created by .ignore support plugin (hsz.mobi) | ||
### Terraform template | ||
# Local .terraform directories | ||
.terraform/ | ||
|
||
# .tfstate files | ||
*.tfstate | ||
*.tfstate.* | ||
|
||
# Crash log files | ||
crash.log | ||
|
||
# Exclude all .tfvars files, which are likely to contain sentitive data, such as | ||
# password, private keys, and other secrets. These should not be part of version | ||
# control as they are data points which are potentially sensitive and subject | ||
# to change depending on the environment. | ||
# | ||
*.tfvars | ||
|
||
# Ignore override files as they are usually used to override resources locally and so | ||
# are not checked in | ||
override.tf | ||
override.tf.json | ||
*_override.tf | ||
*_override.tf.json | ||
|
||
# Include override files you do wish to add to version control using negated pattern | ||
# | ||
# !example_override.tf | ||
|
||
# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan | ||
# example: *tfplan* | ||
|
||
# Ignore CLI configuration files | ||
.terraformrc | ||
terraform.rc | ||
.terraform.lock.hcl |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
.git/ | ||
.github/ | ||
.gitignore | ||
.terraformrc |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
The MIT License (MIT) | ||
|
||
Copyright (c) 2011-2023 Cartographie Nationale des lieux d'inclusion numérique | ||
|
||
Permission is hereby granted, free of charge, to any person obtaining a copy | ||
of this software and associated documentation files (the "Software"), to deal | ||
in the Software without restriction, including without limitation the rights | ||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
copies of the Software, and to permit persons to whom the Software is | ||
furnished to do so, subject to the following conditions: | ||
|
||
The above copyright notice and this permission notice shall be included in | ||
all copies or substantial portions of the Software. | ||
|
||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE | ||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
THE SOFTWARE. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,102 @@ | ||
# API infrastructure | ||
|
||
## À propos | ||
|
||
API infrastructure décrit par le code l'infrastructure à provisionner pour le bon fonctionnement de [l'API de la cartographie nationale des lieux d'inclusion numérique](https://github.com/anct-cartographie-nationale/api-application). | ||
|
||
> Ce dépôt n'est pas utile pour faire fonctionner la Cartographie Nationale en local. | ||
## Table des matières | ||
|
||
- 🪧 [À propos](#à-propos) | ||
- 📦 [Prérequis](#prérequis) | ||
- 🚀 [Installation](#installation) | ||
- 🛠️ [Utilisation](#utilisation) | ||
- 🤝 [Contribution](#contribution) | ||
- 🏗️ [Construit avec](#construit-avec) | ||
- 📝 [Licence](#licence) | ||
|
||
## Prérequis | ||
|
||
- [Docker](https://www.docker.com/) ou [Terraform CLI](https://www.terraform.io/cli) | ||
|
||
## Installation | ||
|
||
La commande suivante permet d'utiliser la ligne de commande terraform via Docker : | ||
```shell | ||
docker run --rm -it --name terraform -v ~/:/root/ -v $(pwd):/workspace -w /workspace hashicorp/terraform:light | ||
``` | ||
|
||
Pour une utilisation simplifiée, il est possible de créer un alias : | ||
```shell | ||
alias terraform='docker run --rm -it --name terraform -v ~/:/root/ -v $(pwd):/workspace -w /workspace hashicorp/terraform:light' | ||
``` | ||
|
||
Avec cet alias, il n'y a plus de différence entre une commande terraform exécutée avec Docker ou avec Terraform CLI. | ||
|
||
## Utilisation | ||
|
||
### Vérifier et corriger la syntaxe des fichiers `.tf` | ||
|
||
```shell | ||
terraform fmt | ||
``` | ||
|
||
### Vérifier la cohérence de l'infrastructure | ||
|
||
```shell | ||
terraform validate | ||
``` | ||
|
||
### Récupérer un jeton d'authentification à Terraform Cloud en local | ||
|
||
```shell | ||
terraform login | ||
``` | ||
|
||
### Initialiser l'état et les plugins en local | ||
|
||
```shell | ||
terraform init | ||
``` | ||
|
||
### Planifier une exécution pour voir les différences avec l'état précédent de l'infrastructure | ||
|
||
```shell | ||
terraform plan | ||
``` | ||
|
||
## Contribution | ||
|
||
### Appliquer la mise à jour de l'infrastructure | ||
|
||
Pour que les modifications de la description de l'infrastructure soient appliquées en production, il suffit de publier les changements sur la branche `main`. | ||
|
||
## Construit avec | ||
|
||
### Langages & Frameworks | ||
|
||
- [Terraform](https://www.terraform.io/) est un outil de description d'infrastructure par le code qui permet de créer et de maintenir une infrastructure de manière sûre et prévisible | ||
|
||
### Outils | ||
|
||
#### CI | ||
|
||
- [Github Actions](https://docs.github.com/en/actions) est l'outil d'intégration et de déploiement continu intégré à GitHub | ||
- L'historique des déploiements est disponible [sous l'onglet Actions](https://github.com/anct-cartographie-nationale/client-infrastructure/actions/) | ||
- Secrets du dépôt : | ||
- `TF_API_TOKEN` : Le token d'api Terraform Cloud de l'équipe Cartographie Nationale qui permet à la CI d'opérer des actions sur Terraform Cloud | ||
|
||
#### Déploiement | ||
|
||
- [Terraform Cloud](https://www.clever-cloud.com/) est la plateforme proposée par HasiCorp pour administrer les modifications d'infrastructure | ||
- Organisation : [cartographie-nationale](https://app.terraform.io/app/cartographie-nationale/workspaces) | ||
- Workspaces : `api-*` | ||
- [api-production](https://app.terraform.io/app/cartographie-nationale/workspaces/api-production) | ||
- [AWS](https://aws.amazon.com/) est la plateforme de services Cloud proposée par Amazon. | ||
- Utilisateur : `cartographie-nationale.client.infrastructure` | ||
- Groupe : `client.deployer` | ||
|
||
## Licence | ||
|
||
Voir le fichier [LICENSE.md](./LICENSE.md) du dépôt. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,58 @@ | ||
resource "aws_apigatewayv2_api" "cartographie_nationale" { | ||
name = "${local.product_information.context.project}-${local.product_information.context.service}" | ||
protocol_type = "HTTP" | ||
} | ||
|
||
resource "aws_apigatewayv2_stage" "cartographie_nationale" { | ||
api_id = aws_apigatewayv2_api.cartographie_nationale.id | ||
|
||
name = "production" | ||
auto_deploy = true | ||
|
||
access_log_settings { | ||
destination_arn = aws_cloudwatch_log_group.api_cartographie_nationale.arn | ||
|
||
format = jsonencode({ | ||
requestId = "$context.requestId" | ||
sourceIp = "$context.identity.sourceIp" | ||
requestTime = "$context.requestTime" | ||
protocol = "$context.protocol" | ||
httpMethod = "$context.httpMethod" | ||
resourcePath = "$context.resourcePath" | ||
routeKey = "$context.routeKey" | ||
status = "$context.status" | ||
responseLength = "$context.responseLength" | ||
integrationErrorMessage = "$context.integrationErrorMessage" | ||
}) | ||
} | ||
} | ||
|
||
#resource "aws_apigatewayv2_integration" "hello_world" { | ||
# api_id = aws_apigatewayv2_api.cartographie_nationale.id | ||
# | ||
# integration_uri = aws_lambda_function.hello_world.invoke_arn | ||
# integration_type = "AWS_PROXY" | ||
# integration_method = "POST" | ||
#} | ||
|
||
#resource "aws_apigatewayv2_route" "hello_world" { | ||
# api_id = aws_apigatewayv2_api.cartographie_nationale.id | ||
# | ||
# route_key = "GET /hello" | ||
# target = "integrations/${aws_apigatewayv2_integration.hello_world.id}" | ||
#} | ||
|
||
resource "aws_cloudwatch_log_group" "api_cartographie_nationale" { | ||
name = "/aws/api_gw/${aws_apigatewayv2_api.cartographie_nationale.name}" | ||
|
||
retention_in_days = 30 | ||
} | ||
|
||
#resource "aws_lambda_permission" "api_cartographie_nationale" { | ||
# statement_id = "AllowExecutionFromAPIGateway" | ||
# action = "lambda:InvokeFunction" | ||
# function_name = aws_lambda_function.hello_world.function_name | ||
# principal = "apigateway.amazonaws.com" | ||
# | ||
# source_arn = "${aws_apigatewayv2_api.cartographie_nationale.execution_arn}/*/*" | ||
#} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,18 @@ | ||
export const handler = async (event) => { | ||
console.log('Event: ', event); | ||
let responseMessage = 'Goodbye, World!'; | ||
|
||
if (event.queryStringParameters && event.queryStringParameters['Name']) { | ||
responseMessage = 'Goodbye, ' + event.queryStringParameters['Name'] + '!'; | ||
} | ||
|
||
return ({ | ||
statusCode: 200, | ||
headers: { | ||
'Content-Type': 'application/json', | ||
}, | ||
body: JSON.stringify({ | ||
message: responseMessage, | ||
}) | ||
}); | ||
} |
Binary file not shown.
Oops, something went wrong.