Added CDK deployment strategy (#9152)

* Added CDK deployment strategy * Fixed typo in error handling * Pylint doesn't like using e as a variable name * Update .pre-commit-config.yaml * Fixed exclude configu.yaml * Excluded file from prettier * Correctly ignored prettier config yaml * Addressing some minor issues * Allow deploying without specifying spoke accounts ; correct ConsoleMe case for resource names and descriptions * Updated user role creator statement * Docker image configurable to build current branch * Updated documentation for recommended deployment * Fixed linter comments * Elaborated regarding configuration parameters * Fixed config file typo in the README * Fixed physical resource ids * Dropped support for credential plugin to simplify flow for now * Fixed physical resource ids * Fixed physical resource ids * Fixed get main account from configuration file * Linter stuff Co-authored-by: Curtis <castrapel@users.noreply.github.com> Co-authored-by: ConsoleMe <ccastrapel@netflix.com>
Netflix · Jul 8, 2021 · 7d34bd7 · 7d34bd7
1 parent 0eed023
commit 7d34bd7
Show file tree

Hide file tree

Showing 34 changed files with 2,433 additions and 5 deletions.
diff --git a/.dockerignore b/.dockerignore
@@ -25,6 +25,12 @@ wheels/
 *.egg
 MANIFEST
 
+# Deployment
+terraform/
+cdk/
+packer/
+cdk.out
+
 # PyInstaller
 #  Usually these files are written by a python script from a template
 #  before PyInstaller builds the exe, so as to inject date/other infos into it.

diff --git a/.gitignore b/.gitignore
@@ -1,11 +1,12 @@
 ### Terraform ###
-# Local .terraform directories
+# Local deployment directories (.terraform, cdk)
 **/.terraform/*
 *.tfstate
 *.tfstate.*
 crash.log
 terraform.tfvars
 state.tf
+cdk.out/
 consoleme.tar.gz
 consoleme.zip
 
@@ -139,4 +140,4 @@ consoleme.tar.gz
 
 # Config
 consoleme.yaml
-
+cdk/config.yaml
diff --git a/.isort.cfg b/.isort.cfg
@@ -1,6 +1,6 @@
 [settings]
 known_first_party=consoleme,consoleme_default_plugins
-known_third_party = aiozipkin,asgiref,atlassian,bcrypt,billiard,bleach,boto3,botocore,celery,click,click_log,cloudaux,cryptography,dateutil,deepdiff,ed25519,elasticsearch,email_validator,furl,git,google,googleapiclient,jsonschema,jwt,logmatic,marshmallow,mock,mockredis,moto,okta_jwt,onelogin,pandas,parliament,password_strength,pip,pkg_resources,policy_sentry,policyuniverse,pydantic,pytest,pytz,questionary,redis,redislite,requests,retrying,ruamel,sentry_sdk,setuptools,simplejson,tenacity,tornado,ujson,uvloop,validate_email,yaml
+known_third_party = aiozipkin,asgiref,atlassian,aws_cdk,bcrypt,billiard,bleach,boto3,botocore,celery,cfnresponse,click,click_log,cloudaux,constants,cryptography,dateutil,deepdiff,ed25519,elasticsearch,email_validator,furl,git,google,googleapiclient,jsonschema,jwt,logmatic,marshmallow,mock,mockredis,moto,nested_stacks,okta_jwt,onelogin,pandas,parliament,password_strength,pip,pkg_resources,policy_sentry,policyuniverse,pydantic,pytest,pytz,questionary,redis,redislite,requests,retrying,ruamel,sentry_sdk,setuptools,simplejson,tenacity,tornado,ujson,uvloop,validate_email,yaml
 multi_line_output=3
 include_trailing_comma=True
 balanced_wrapping=True

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -7,6 +7,7 @@ repos:
       - id: check-ast
       - id: check-case-conflict
       - id: check-yaml
+        exclude: "cdk/resources/create_config_lambda/config.yaml"
   - repo: https://gitlab.com/pycqa/flake8
     rev: 3.8.4
     hooks:

diff --git a/.prettierignore b/.prettierignore
@@ -1,2 +1,5 @@
 # Ignore all HTML files:
-*.html
+*.html
+
+# Ignore config lambda yaml file:
+cdk/resources/create_config_lambda/config.yaml
diff --git a/cdk/Pipfile b/cdk/Pipfile
@@ -0,0 +1,12 @@
+[[source]]
+url = 'https://pypi.python.org/simple'
+verify_ssl = true
+
+[dev-packages]
+consoleme_ecs_service = {editable = true,path = "cdk"}
+
+[packages]
+boto3 = "*"
+
+[requires]
+python_version = "3"