bringing down the API

Signed-off-by: Irving Popovetsky <[email protected]>

Author: irvingpop

terraform/alb.tf

@@ -39,6 +39,11 @@ resource "aws_security_group" "lb_security_group" {
 resource "aws_lb" "ecs" {
   name_prefix     = "oc"
   security_groups = [aws_security_group.lb_security_group.id]
+  access_logs {
+    bucket  = "oc-alb-logs"
+    enabled = true
+    prefix  = "2025"
+  }
 
   load_balancer_type = "application"
   internal           = false

terraform/apps.tf

@@ -19,58 +19,58 @@ resource "aws_iam_role_policy_attachment" "ecs_task_execution_role_attach" {
 ################################################################################
 
 # Backend Prod
-module "python_backend_prod" {
-  source = "./python_backend"
+# module "python_backend_prod" {
+#   source = "./python_backend"
 
-  env                 = "prod"
-  vpc_id              = data.aws_vpc.use2.id
-  logs_group          = aws_cloudwatch_log_group.ecslogs.name
-  ecs_cluster_id      = module.ecs.cluster_id
-  task_execution_role = data.aws_iam_role.ecs_task_execution_role.arn
-  image_tag           = "master"
-}
+#   env                 = "prod"
+#   vpc_id              = data.aws_vpc.use2.id
+#   logs_group          = aws_cloudwatch_log_group.ecslogs.name
+#   ecs_cluster_id      = module.ecs.cluster_id
+#   task_execution_role = data.aws_iam_role.ecs_task_execution_role.arn
+#   image_tag           = "master"
+# }
 
-resource "aws_lb_listener_rule" "python_backend_prod" {
-  listener_arn = aws_lb_listener.default_https.arn
+# resource "aws_lb_listener_rule" "python_backend_prod" {
+#   listener_arn = aws_lb_listener.default_https.arn
 
-  action {
-    type             = "forward"
-    target_group_arn = module.python_backend_prod.lb_tg_arn
-  }
+#   action {
+#     type             = "forward"
+#     target_group_arn = module.python_backend_prod.lb_tg_arn
+#   }
 
-  condition {
-    host_header {
-      values = ["backend.operationcode.org", "api.operationcode.org"]
-    }
-  }
-}
+#   condition {
+#     host_header {
+#       values = ["backend.operationcode.org", "api.operationcode.org"]
+#     }
+#   }
+# }
 
 # Backend Staging
-module "python_backend_staging" {
-  source = "./python_backend"
+# module "python_backend_staging" {
+#   source = "./python_backend"
 
-  env                 = "staging"
-  vpc_id              = data.aws_vpc.use2.id
-  logs_group          = aws_cloudwatch_log_group.ecslogs.name
-  ecs_cluster_id      = module.ecs.cluster_id
-  task_execution_role = data.aws_iam_role.ecs_task_execution_role.arn
-  image_tag           = "staging"
-}
+#   env                 = "staging"
+#   vpc_id              = data.aws_vpc.use2.id
+#   logs_group          = aws_cloudwatch_log_group.ecslogs.name
+#   ecs_cluster_id      = module.ecs.cluster_id
+#   task_execution_role = data.aws_iam_role.ecs_task_execution_role.arn
+#   image_tag           = "staging"
+# }
 
-resource "aws_lb_listener_rule" "python_backend_staging" {
-  listener_arn = aws_lb_listener.default_https.arn
+# resource "aws_lb_listener_rule" "python_backend_staging" {
+#   listener_arn = aws_lb_listener.default_https.arn
 
-  action {
-    type             = "forward"
-    target_group_arn = module.python_backend_staging.lb_tg_arn
-  }
+#   action {
+#     type             = "forward"
+#     target_group_arn = module.python_backend_staging.lb_tg_arn
+#   }
 
-  condition {
-    host_header {
-      values = ["backend-staging.operationcode.org", "api.staging.operationcode.org"]
-    }
-  }
-}
+#   condition {
+#     host_header {
+#       values = ["backend-staging.operationcode.org", "api.staging.operationcode.org"]
+#     }
+#   }
+# }
 
 # Redirector for shut down sites
 resource "aws_lb_listener_rule" "shutdown_sites_redirector" {
@@ -91,9 +91,10 @@ resource "aws_lb_listener_rule" "shutdown_sites_redirector" {
     host_header {
       values = [
         "resources.operationcode.org",
-        "resources.staging.operationcode.org",
         "resources-staging.operationcode.org",
-        "pybot.staging.operationcode.org",
+        "api.operationcode.org",
+        "backend-staging.operationcode.org",
+        "api.staging.operationcode.org",
       ]
     }
   }

terraform/asg.tf

@@ -37,7 +37,7 @@ module "autoscaling" {
     {
       delete_on_termination       = true
       device_index                = 0
-      associate_public_ip_address = false
+      associate_public_ip_address = true
       security_groups             = [module.autoscaling_sg.security_group_id]
     }
   ]

terraform/pybot/main.tf

@@ -52,6 +52,14 @@ resource "aws_ecs_task_definition" "pybot" {
         }
       }
 
+      # healthCheck = {
+      #   command     = ["CMD-SHELL", "wget -q http://localhost:5000/health || exit 1"]
+      #   interval    = 30
+      #   timeout     = 5
+      #   retries     = 3
+      #   startPeriod = 60
+      # }
+
       secrets = local.secrets_env
 
       mountPoints = []

terraform/python_backend/main.tf

@@ -53,6 +53,13 @@ resource "aws_ecs_task_definition" "python_backend" {
         }
       }
 
+      # healthCheck = {
+      #   command     = ["CMD-SHELL", "wget -q http://localhost:8000/healthz || exit 1"]
+      #   interval    = 30
+      #   timeout     = 5
+      #   retries     = 3
+      #   startPeriod = 60
+      # }
 
       environment = [
         {