CDK-lite-template.yaml

AWSTemplateFormatVersion: 2010-09-09
Description: >-
  Create resources and deploy Conduktor
  As per: https://docs.conduktor.io/platform/installation/get-started/AWS/

  This template will assume you have a VPC (+subnet),Security Group, RDS Database and a ECS cluster running!

  This template will deploy the following:
  - Service (Fargate)
  - Service Task
  - Log group for your service
  - IAM (ECS Task Execution Role)

  **Please fill the values below**

Parameters:
  ClusterArn:
    Type: String
    AllowedPattern: arn:aws:ecs:.*:.*:cluster/.*
    Description: The ARN value for your cluster

  SecurityGroup:
    Type: String
    AllowedPattern: sg-.*
    Description: The Security Group to have access to this ECS service

  Subnet:
    Type: String
    AllowedPattern: subnet-.*
    Description: The Subnet you want to use for this ECS service

  DatabaseName:
    Type: String
    AllowedPattern: .+
    Description: The name of the database

  DatabaseUsername:
    Type: String
    AllowedPattern: .+
    Description: The username for the database

  DatabasePassword:
    Type: String
    AllowedPattern: .+
    Description: The password for the database

  DatabaseEndpoint:
    Type: String
    AllowedPattern: .*:.*:.*:.*:.*
    Description: The endpoint for the database
    
Resources:
  ECSService:    
    Type: AWS::ECS::Service
    Properties: 
      Cluster: !Ref ClusterArn
      DesiredCount: 1
      LaunchType: FARGATE
      NetworkConfiguration:
        AwsvpcConfiguration:
          AssignPublicIp: ENABLED
          SecurityGroups: 
            - !Ref SecurityGroup
          Subnets: 
            - !Ref Subnet
      TaskDefinition: !Ref 'ECSTaskDefinition'
      ServiceName: !Sub ${AWS::StackName}-conduktor-ecs-service
  
ECSTaskDefinition:
    Type: 'AWS::ECS::TaskDefinition'
    Properties:
      Family: conduktor-console
      RequiresCompatibilities:
        - FARGATE
      NetworkMode: awsvpc
      ExecutionRoleArn: !Ref ECSTaskExecutionRole
      Cpu: '2048'
      Memory: '4096'
      RuntimePlatform:
        CpuArchitecture: X86_64
        OperatingSystemFamily: LINUX
      ContainerDefinitions:
        - Name: conduktor-console
          Image: conduktor/conduktor-console:1.25.1
          Essential: true
          Environment:
            - Name: CDK_DATABASE_HOST
              Value: !Ref DatabaseEndpoint
            - Name: CDK_MONITORING_ALERT-MANAGER-URL
              Value: http://localhost:9010/
            - Name: CDK_MONITORING_CORTEX-URL
              Value: http://localhost:9009/
            - Name: CDK_DATABASE_PORT
              Value: '5432'
            - Name: CDK_DATABASE_USERNAME
              Value: !Ref 'DatabaseUsername'
            - Name: CDK_DATABASE_PASSWORD
              Value: !Ref 'DatabasePassword'
            - Name: CDK_MONITORING_CALLBACK-URL
              Value: http://localhost:8080/monitoring/api/
            - Name: CDK_DATABASE_NAME
              Value: !Ref DatabaseName
            - Name: CDK_MONITORING_NOTIFICATIONS-CALLBACK-URL
              Value: http://localhost:8080
          PortMappings:
            - Name: console-8080-tcp
              ContainerPort: 8080
              HostPort: 8080
              Protocol: tcp
          HealthCheck:
            Command: ['CMD-SHELL',
                    'curl --fail http://localhost:${CDK_LISTENING_PORT:-8080}/platform/api/modules/health/live']
            Interval: 5
            Retries: 2
            Timeout: 3
          LogConfiguration:
            LogDriver: awslogs
            Options:
              awslogs-region: !Ref AWS::Region
              awslogs-group: !Ref LogGroup
              awslogs-stream-prefix: ecs
        - Name: conduktor-monitoring
          Image: conduktor/conduktor-console-cortex:1.25.1
          Environment:
            - Name: CDK_CONSOLE-URL
              Value: http://localhost:8080
          PortMappings:
              - Name: conduktor-cortex-9090-tcp
                ContainerPort: 9090
                HostPort: 9090
              - Name:  conduktor-cortex-9010-tcp
                ContainerPort: 9010
                HostPort: 9010
              - Name: conduktor-cortex-9009-tcp
                ContainerPort: 9009
                HostPort: 9009
          HealthCheck:
            Command: ['CMD-SHELL',
                    'curl --fail http://localhost:${CDK_LISTENING_PORT:-8080}/platform/api/modules/health/live']
            Interval: 5
            Retries: 2
            Timeout: 3
          LogConfiguration:
            LogDriver: awslogs
            Options:
              awslogs-region: !Ref AWS::Region
              awslogs-group: !Ref LogGroup
              awslogs-stream-prefix: ecs

  LogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: Sub ${AWS::StackName}-conduktor-lite
      Tags:
        - Key: Name
          Value: ConduktorConsoleLogGroup

  ECSTaskExecutionRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Statement:
          - Effect: Allow
            Principal:
              Service: ecs-tasks.amazonaws.com
            Action: 'sts:AssumeRole'
      ManagedPolicyArns:
      # https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonECSTaskExecutionRolePolicy.html
        - 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'
      Tags:
        - Key: Name
          Value: ConduktorConsoleECSTaskExecutionRole