| AWSTemplateFormatVersion: '2010-09-09' |
| Description: Deploy a service into an ECS cluster behind a public load balancer. |
| Parameters: |
| GerritServiceName: |
| Type: String |
| Default: gerrit-master |
| ClusterStackName: |
| Description: Stack name of the ECS cluster to deply the serivces |
| Type: String |
| Default: gerrit-cluster |
| TemplateBucketName: |
| Description: S3 bucket containing cloudformation templates |
| Type: String |
| EnvironmentName: |
| Description: An environment name that will be prefixed to resource names |
| Type: String |
| Default: test |
| DockerImage: |
| Description: Gerrit official Docker image |
| Type: String |
| Default: aws-gerrit/gerrit:latest |
| DockerRegistryUrl: |
| Description: Docker registry URL |
| Type: String |
| DesiredCount: |
| Description: How many instances of this task should we run across our cluster? |
| Type: Number |
| Default: 1 |
| HTTPPort: |
| Description: Gerrit HTTP port |
| Type: Number |
| Default: 8080 |
| HTTPSPort: |
| Description: Gerrit HTTPS port |
| Type: Number |
| Default: 443 |
| SSHPort: |
| Description: Gerrit SSH port |
| Type: Number |
| Default: 29418 |
| CertificateArn: |
| Description: SSL Certificates ARN |
| Type: String |
| HostedZoneName: |
| Description: The route53 HostedZoneName. |
| Type: String |
| Subdomain: |
| Description: The subdomain of the Gerrit cluster |
| Type: String |
| Default: gerrit-master-demo |
| GerritKeyPrefix: |
| Description: Gerrit credentials keys prefix |
| Type: String |
| GerritGitVolume: |
| Description: Gerrit git volume name |
| Type: String |
| Default: gerrit-git |
| GerritDataVolume: |
| Description: Gerrit data volume name |
| Type: String |
| Default: gerrit-data |
| GerritIndexVolume: |
| Description: Gerrit index volume name |
| Type: String |
| Default: gerrit-index |
| GerritLogsVolume: |
| Description: Gerrit logs volume name |
| Type: String |
| Default: gerrit-logs |
| GerritCacheVolume: |
| Description: Gerrit cache volume name |
| Type: String |
| Default: gerrit-cache |
| GerritDbVolume: |
| Description: Gerrit db volume name |
| Type: String |
| Default: gerrit-db |
| GerritRAM: |
| Description: RAM to allocate to the Gerrit container |
| Type: Number |
| Default: 70000 |
| GerritCPU: |
| Description: vCPU to allocate to the Gerrit container |
| Type: Number |
| Default: 10240 |
| GerritHeapLimit: |
| Description: Gerrit Heap limit |
| Type: String |
| Default: 35g |
| JgitCacheSize: |
| Description: JGit cache size |
| Type: String |
| Default: 12g |
| LDAPServer: |
| Description: LDAP server URL |
| Type: String |
| LDAPUsername: |
| Description: Username to bind to the LDAP server with |
| Type: String |
| LDAPAccountBase: |
| Description: Root of the tree containing all user accounts |
| Type: String |
| LDAPGroupBase: |
| Description: Root of the tree containing all group objects |
| Type: String |
| SMTPServer: |
| Description: SMTP server URL |
| Type: String |
| SMTPUser: |
| Description: User name to authenticate with, if required for relay |
| Type: String |
| SMTPDomain: |
| Description: Domain to be used in the From field |
| Type: String |
| |
| Resources: |
| Service: |
| Type: AWS::ECS::Service |
| DependsOn: |
| - HTTPListener |
| - SSHListener |
| Properties: |
| Cluster: |
| Fn::ImportValue: |
| !Join [':', [!Ref 'ClusterStackName', 'ClusterName']] |
| DesiredCount: !Ref DesiredCount |
| TaskDefinition: !Ref TaskDefinition |
| LoadBalancers: |
| - ContainerName: !Ref GerritServiceName |
| ContainerPort: !Ref HTTPPort |
| TargetGroupArn: !Ref HTTPTargetGroup |
| - ContainerName: !Ref GerritServiceName |
| ContainerPort: !Ref SSHPort |
| TargetGroupArn: !Ref SSHTargetGroup |
| |
| TaskDefinition: |
| Type: AWS::ECS::TaskDefinition |
| Properties: |
| Family: !Join ['', [!Ref GerritServiceName, TaskDefinition]] |
| TaskRoleArn: !GetAtt ECSTaskExecutionRoleStack.Outputs.TaskExecutionRoleRef |
| ExecutionRoleArn: !GetAtt ECSTaskExecutionRoleStack.Outputs.TaskExecutionRoleRef |
| NetworkMode: bridge |
| ContainerDefinitions: |
| - Name: !Ref GerritServiceName |
| Essential: true |
| Image: !Sub '${DockerRegistryUrl}/${DockerImage}' |
| Environment: |
| - Name: CANONICAL_WEB_URL |
| Value: !Sub 'https://${Subdomain}.${HostedZoneName}' |
| - Name: HTTPD_LISTEN_URL |
| Value: !Sub 'proxy-https://*:${HTTPPort}/' |
| - Name: AWS_REGION |
| Value: !Ref AWS::Region |
| - Name: GERRIT_KEY_PREFIX |
| Value: !Ref GerritKeyPrefix |
| - Name: GERRIT_HEAP_LIMIT |
| Value: !Ref GerritHeapLimit |
| - Name: JGIT_CACHE_SIZE |
| Value: !Ref JgitCacheSize |
| - Name: LDAP_SERVER |
| Value: !Ref LDAPServer |
| - Name: LDAP_USERNAME |
| Value: !Ref LDAPUsername |
| - Name: LDAP_ACCOUNT_BASE |
| Value: !Ref LDAPAccountBase |
| - Name: LDAP_GROUP_BASE |
| Value: !Ref LDAPGroupBase |
| - Name: SMTP_SERVER |
| Value: !Ref SMTPServer |
| - Name: SMTP_USER |
| Value: !Ref SMTPUser |
| - Name: SMTP_DOMAIN |
| Value: !Ref SMTPDomain |
| MountPoints: |
| - SourceVolume: !Ref GerritGitVolume |
| ContainerPath: /var/gerrit/git |
| - SourceVolume: !Ref GerritDataVolume |
| ContainerPath: /var/gerrit/data |
| - SourceVolume: !Ref GerritIndexVolume |
| ContainerPath: /var/gerrit/index |
| - SourceVolume: !Ref GerritCacheVolume |
| ContainerPath: /var/gerrit/cache |
| - SourceVolume: !Ref GerritDbVolume |
| ContainerPath: /var/gerrit/db |
| - SourceVolume: !Ref GerritLogsVolume |
| ContainerPath: /var/gerrit/logs |
| Cpu: !Ref GerritCPU |
| Memory: !Ref GerritRAM |
| PortMappings: |
| - ContainerPort: !Ref HTTPPort |
| HostPort: !Ref HTTPPort |
| Protocol: tcp |
| - ContainerPort: !Ref SSHPort |
| HostPort: !Ref SSHPort |
| Protocol: tcp |
| LogConfiguration: |
| LogDriver: awslogs |
| Options: |
| awslogs-group: !Ref ClusterStackName |
| awslogs-region: !Ref AWS::Region |
| awslogs-stream-prefix: !Ref EnvironmentName |
| Volumes: |
| - Name: !Ref 'GerritDbVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-db: !Join ['-', [!Ref EnvironmentName, !Ref GerritDbVolume]] |
| - Name: !Ref 'GerritGitVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-git: !Join ['-', [!Ref EnvironmentName, !Ref GerritGitVolume]] |
| - Name: !Ref 'GerritDataVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-data: !Join ['-', [!Ref EnvironmentName, !Ref GerritDataVolume]] |
| - Name: !Ref 'GerritCacheVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-cache: !Join ['-', [!Ref EnvironmentName, !Ref GerritCacheVolume]] |
| - Name: !Ref 'GerritIndexVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-index: !Join ['-', [!Ref EnvironmentName, !Ref GerritIndexVolume]] |
| - Name: !Ref 'GerritLogsVolume' |
| DockerVolumeConfiguration: |
| Scope: shared |
| Autoprovision: true |
| Driver: local |
| Labels: |
| gerrit-logs: !Join ['-', [!Ref EnvironmentName, !Ref GerritLogsVolume]] |
| |
| LoadBalancer: |
| Type: AWS::ElasticLoadBalancingV2::LoadBalancer |
| Properties: |
| Type: network |
| Scheme: internet-facing |
| Subnets: |
| - Fn::ImportValue: |
| !Join [':', [!Ref 'ClusterStackName', 'PublicSubnetOne']] |
| Tags: |
| - Key: Name |
| Value: !Join ['-', [!Ref 'EnvironmentName', !Ref 'GerritServiceName', 'nlb']] |
| |
| HTTPTargetGroup: |
| Type: AWS::ElasticLoadBalancingV2::TargetGroup |
| DependsOn: LoadBalancer |
| Properties: |
| VpcId: |
| Fn::ImportValue: |
| !Join [':', [!Ref 'ClusterStackName', 'VPCId']] |
| Port: !Ref HTTPPort |
| Protocol: TCP |
| |
| HTTPListener: |
| Type: AWS::ElasticLoadBalancingV2::Listener |
| DependsOn: LoadBalancer |
| Properties: |
| Certificates: |
| - CertificateArn: !Ref CertificateArn |
| DefaultActions: |
| - Type: forward |
| TargetGroupArn: !Ref HTTPTargetGroup |
| LoadBalancerArn: !Ref LoadBalancer |
| Port: !Ref HTTPSPort |
| Protocol: TLS |
| |
| SSHTargetGroup: |
| Type: AWS::ElasticLoadBalancingV2::TargetGroup |
| DependsOn: LoadBalancer |
| Properties: |
| VpcId: |
| Fn::ImportValue: |
| !Join [':', [!Ref 'ClusterStackName', 'VPCId']] |
| Port: !Ref SSHPort |
| Protocol: TCP |
| |
| SSHListener: |
| Type: AWS::ElasticLoadBalancingV2::Listener |
| DependsOn: LoadBalancer |
| Properties: |
| DefaultActions: |
| - Type: forward |
| TargetGroupArn: !Ref SSHTargetGroup |
| LoadBalancerArn: !Ref LoadBalancer |
| Port: !Ref SSHPort |
| Protocol: TCP |
| |
| ECSTaskExecutionRoleStack: |
| Type: AWS::CloudFormation::Stack |
| Properties: |
| TemplateURL: https://aws-gerrit-cf-templates.s3.amazonaws.com/cf-gerrit-task-execution-role.yml |
| TimeoutInMinutes: '5' |
| |
| Outputs: |
| PublicLoadBalancerDNSName: |
| Description: The DNS name of the external load balancer |
| Value: !GetAtt 'LoadBalancer.DNSName' |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'PublicLoadBalancerDNSName' ] ] |
| CanonicalHostedZoneID: |
| Description: Canonical Hosted Zone ID |
| Value: !GetAtt 'LoadBalancer.CanonicalHostedZoneID' |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'CanonicalHostedZoneID' ] ] |
| PublicLoadBalancerUrl: |
| Description: The url of the external load balancer |
| Value: !Join ['', ['http://', !GetAtt 'LoadBalancer.DNSName']] |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'PublicLoadBalancerUrl' ] ] |
| HostedZoneName: |
| Description: Route53 Hosted Zone name |
| Value: !Ref HostedZoneName |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'HostedZoneName' ] ] |
| Subdomain: |
| Description: Service DNS subdomain |
| Value: !Ref Subdomain |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'Subdomain' ] ] |
| CanonicalWebUrl: |
| Description: Canonical Web URL |
| Value: !Sub 'https://${Subdomain}.${HostedZoneName}' |
| Export: |
| Name: !Join [ ':', [ !Ref 'AWS::StackName', 'CanonicalWebUrl' ] ] |