-
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added deployment and hosting with AWS & Firebase
- Loading branch information
Showing
8 changed files
with
829 additions
and
2 deletions.
There are no files selected for viewing
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,160 @@ | ||
| ## Default region for the application | ||
| ifndef AWS_REGION | ||
| override AWS_REGION=us-east-1 | ||
| export AWS_REGION | ||
| endif | ||
|
|
||
| ## Set capabilities for the sam deploy option | ||
| ifndef IAM_CAPABILITIES | ||
| override IAM_CAPABILITIES="CAPABILITY_IAM" | ||
| export IAM_CAPABILITIES | ||
| endif | ||
|
|
||
| ## Raw cloud formation template for the application | ||
| ifndef TEMPLATE_RAW | ||
| override TEMPLATE_RAW=application.yaml | ||
| export TEMPLATE_RAW | ||
| endif | ||
|
|
||
| ## Packaged cloud formation template | ||
| ifndef TEMPLATE_PACKAGED | ||
| override TEMPLATE_PACKAGED=packaged.yaml | ||
| export TEMPLATE_PACKAGED | ||
| endif | ||
|
|
||
| ## Set if defined (alias variable for ease of use) | ||
| ifdef tags | ||
| override AWS_TAGS=$(tags) | ||
| export AWS_TAGS | ||
| endif | ||
|
|
||
| ## Set if defined (alias variable for ease of use) | ||
| ifdef bucket | ||
| override APPLICATION_BUCKET=$(bucket) | ||
| export APPLICATION_BUCKET | ||
| endif | ||
|
|
||
| ## Set if defined (alias variable for ease of use) | ||
| ifdef domain | ||
| override APPLICATION_DOMAIN_NAME=$(domain) | ||
| export APPLICATION_DOMAIN_NAME | ||
| endif | ||
|
|
||
| ## Set if defined (alias variable for ease of use) | ||
| ifdef stage | ||
| override APPLICATION_STAGE_NAME=$(stage) | ||
| export APPLICATION_STAGE_NAME | ||
| endif | ||
|
|
||
| ## Set if defined (alias variable for ease of use) | ||
| ifdef feature | ||
| override APPLICATION_FEATURE_NAME=$(feature) | ||
| export APPLICATION_FEATURE_NAME | ||
| endif | ||
|
|
||
| aws-param-zone: ## Returns the ssm location for the host zone id | ||
| @test $(domain) | ||
| @echo "/$(domain)/zone_id" | ||
|
|
||
| aws-param-certificate: ## Returns the ssm location for the domain ssl certificate id | ||
| @test $(domain) | ||
| @echo "/$(domain)/certificate_id" | ||
|
|
||
| create-env-key: ## Creates a new key in KMS for a new stage | ||
| @test $(APPLICATION_NAME) | ||
| @test $(APPLICATION_STAGE_NAME) | ||
| @$(eval kms_key_id := $(shell aws kms create-key --description "Used to encrypt environment variables for $(APPLICATION_NAME)" --query 'KeyMetadata.KeyId' --output text)) | ||
| @aws kms enable-key-rotation --key-id $(kms_key_id) | ||
| @$(eval param_location := $(shell $(MAKE) env-key-location app=$(APPLICATION_NAME) stage=$(APPLICATION_STAGE_NAME) )) | ||
| @aws kms create-alias --alias-name "alias/$(APPLICATION_NAME)/$(APPLICATION_STAGE_NAME)" --target-key-id $(kms_key_id) | ||
| @$(MAKE) save-param param_name="$(param_location)" param_value=$(kms_key_id) | ||
| @echo "Saved parameter: $(param_location) with key id: $(kms_key_id)" | ||
|
|
||
| create-secret: ## Creates an secret into AWS SecretsManager | ||
| @# Example: make create-secret name='production/test' description='This is a test' secret_value='{\"Key\":\"my_key\",\"Another\":\"value\"}' kms_key_id=b329... | ||
| @test "$(name)" | ||
| @test "$(description)" | ||
| @test "$(secret_value)" | ||
| @test $(kms_key_id) | ||
| @aws secretsmanager create-secret \ | ||
| --name "$(name)" \ | ||
| --description "$(description)" \ | ||
| --kms-key-id $(kms_key_id) \ | ||
| --secret-string "$(secret_value)" | ||
|
|
||
| decrypt: ## Decrypts data using a KMY Key ID (awscli v2) | ||
| @# Example: make decrypt decrypt_value=AQICAHgrSMx+3O7... | ||
| @test "$(decrypt_value)" | ||
| @aws kms decrypt --ciphertext-blob "$(decrypt_value)" --output text --query Plaintext | base64 --decode | ||
|
|
||
| decrypt-deprecated: ## Decrypts data using a KMY Key ID (awscli v1) | ||
| @# Example: make decrypt decrypt_value=AQICAHgrSMx+3O7... | ||
| @test "$(decrypt_value)" | ||
| @echo $(decrypt_value) | base64 --decode >> tempfile | ||
| @aws kms decrypt --ciphertext-blob fileb://tempfile --output text --query Plaintext | base64 --decode | ||
| @rm -rf tempfile | ||
|
|
||
| env-key-location: ## Returns the environment encryption key location | ||
| @test $(app) | ||
| @test $(stage) | ||
| @echo "/$(app)/$(stage)/kms_key_id" | ||
|
|
||
| encrypt: ## Encrypts data using a KMY Key ID (awscli v2) | ||
| @# Example make encrypt kms_key_id=b329... encrypt_value=YourSecret | ||
| @test $(kms_key_id) | ||
| @test "$(encrypt_value)" | ||
| @aws kms encrypt --output text --query CiphertextBlob --key-id $(kms_key_id) --plaintext "$(shell echo "$(encrypt_value)" | base64)" | ||
|
|
||
| invalidate-cache: ## Invalidates a cloudfront cache based on path | ||
| @test $(APPLICATION_DISTRIBUTION_ID) | ||
| @aws cloudfront create-invalidation --distribution-id $(APPLICATION_DISTRIBUTION_ID) --paths "/*" | ||
|
|
||
| package: ## Process the CF template and prepare for deployment | ||
| @SAM_CLI_TELEMETRY=0 sam package \ | ||
| --template-file $(TEMPLATE_RAW) \ | ||
| --output-template-file $(TEMPLATE_PACKAGED) \ | ||
| --s3-bucket $(APPLICATION_BUCKET) \ | ||
| --s3-prefix $(APPLICATION_BUCKET_PREFIX) \ | ||
| --region $(AWS_REGION) | ||
|
|
||
| save-domain-info: ## Saves the zone id and the ssl id for use by CloudFormation | ||
| @test $(domain) | ||
| @test $(zone_id) | ||
| @test $(certificate_id) | ||
| @$(MAKE) save-param param_name="/$(domain)/zone_id" param_value=$(zone_id) | ||
| @$(MAKE) save-param param_name="/$(domain)/certificate_id" param_value=$(certificate_id) | ||
|
|
||
| save-param: ## Saves a plain-text string parameter in SSM | ||
| @# Example: make save-param param_name='test' param_value='This is a test' | ||
| @test "$(param_value)" | ||
| @test "$(param_name)" | ||
| @aws ssm put-parameter --name "$(param_name)" --value "$(param_value)" --type String --overwrite | ||
|
|
||
| save-param-encrypted: ## Saves an encrypted string value as a parameter in SSM | ||
| @# Example: make save-param-encrypted param_name='test' param_value='This is a test' kms_key_id=b329... | ||
| @test "$(param_value)" | ||
| @test "$(param_name)" | ||
| @test $(kms_key_id) | ||
| @aws ssm put-parameter \ | ||
| --type String \ | ||
| --overwrite \ | ||
| --name "$(param_name)" \ | ||
| --value "$(shell $(MAKE) encrypt kms_key_id=$(kms_key_id) encrypt_value="$(param_value)")" | ||
|
|
||
| upload-files: ## Upload/puts files into S3 bucket | ||
| @test "$(source)" | ||
| @test "$(destination)" | ||
| @test $(APPLICATION_BUCKET) | ||
| @aws s3 cp $(source) s3://$(APPLICATION_BUCKET)/$(destination) --recursive | ||
|
|
||
| update-secret: ## Updates an existing secret in AWS SecretsManager | ||
| @# Example: make update-secret name='production/test' secret_value='{\"Key\":\"my_key\",\"Another\":\"value\"}' | ||
| @test "$(name)" | ||
| @test "$(secret_value)" | ||
| @aws secretsmanager update-secret \ | ||
| --secret-id "$(name)" \ | ||
| --secret-string "$(secret_value)" | ||
|
|
||
| teardown: ## Deletes the entire stack | ||
| @test $(APPLICATION_STACK_NAME) | ||
| @aws cloudformation delete-stack --stack-name $(APPLICATION_STACK_NAME) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,41 @@ | ||
|
|
||
| firebase-param-app-id: ## Returns the location of the app_id parameter in SSM | ||
| @$(MAKE) firebase-param-location app=$(app) stage=$(stage) param=app_id | ||
|
|
||
| firebase-param-sender-id: ## Returns the location of the sender_id parameter in SSM | ||
| @$(MAKE) firebase-param-location app=$(app) stage=$(stage) param=sender_id | ||
|
|
||
| firebase-param-project: ## Returns the location of the project-id parameter in SSM | ||
| @$(MAKE) firebase-param-location app=$(app) stage=$(stage) param=project | ||
|
|
||
| firebase-param-location: ## Creates a parameter location (for Firebase details in SSM) | ||
| @test $(app) | ||
| @test $(stage) | ||
| @test $(param) | ||
| @echo "/$(app)/$(stage)/firebase/$(param)" | ||
|
|
||
| firebase-save-project: ## Saves the firebase project information for use by CloudFormation | ||
| @test $(APPLICATION_NAME) | ||
| @test $(APPLICATION_STAGE_NAME) | ||
| @test $(project) | ||
| @test $(sender_id) | ||
| @test $(app_id) | ||
| @$(MAKE) save-param param_name="$(shell $(MAKE) firebase-param-project app=$(APPLICATION_NAME) stage=$(APPLICATION_STAGE_NAME))" param_value=$(project) | ||
| @$(MAKE) save-param param_name="$(shell $(MAKE) firebase-param-sender-id app=$(APPLICATION_NAME) stage=$(APPLICATION_STAGE_NAME))" param_value=$(sender_id) | ||
| @$(MAKE) save-param param_name="$(shell $(MAKE) firebase-param-app-id app=$(APPLICATION_NAME) stage=$(APPLICATION_STAGE_NAME))" param_value=$(app_id) | ||
|
|
||
| firebase-deploy-simple: ## Deploys to firebase with limited flags | ||
| @test "$(project)" | ||
| @test "$(token)" | ||
| @firebase deploy --project $(project) --token $(token) | ||
|
|
||
| firebase-update: ## Update the firebase tools | ||
| @npm i -g firebase-tools | ||
|
|
||
| firebase-set-env: ## Set an environment variable in a firebase project | ||
| @test "$(key)" | ||
| @test "$(value)" | ||
| @firebase functions:config:set $(key)="$(value)" | ||
|
|
||
| firebase-get-env: ## Gets the current environment variables in the associated project | ||
| @firebase functions:config:get |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.