setup cloudfront cdn for htan-files

Author: zainasir

docs/kubernetes-deployment-with-gitops/argocd.md

@@ -11,10 +11,13 @@ Argo CD dashboard can be accessed in multiple ways.
 ### Public Instance
 For some of our clusters, we have attached the Argo CD dashboard to a public domain. See table below for the list of apps that have Argo CD instances publicly available.
 
-{.compact}
-| App        | Argo CD URL                                            |
-|------------|--------------------------------------------------------|
-| cBioPortal | [argocd.cbioportal.org](https://argocd.cbioportal.org) |
+
+| App                 | Environment | Argo CD URL                                                                        |
+|---------------------|-------------|------------------------------------------------------------------------------------|
+| cBioPortal Public   | Prod        | [argocd.cbioportal.org](https://argocd.cbioportal.org)                             |
+| cBioPortal Internal | Dev         | [argocd.cbioportal.dev.aws.mskcc.org](https://argocd.cbioportal.dev.aws.mskcc.org) |
+| OncoKB Internal     | Prod        | [argocd.oncokb.aws.mskcc.org](https://argocd.oncokb.aws.mskcc.org)                 |
+| OncoKB Internal     | Dev         | [argocd.oncokb.dev.aws.mskcc.org](https://argocd.oncokb.dev.aws.mskcc.org)         |
 
 ### Port-Forwarding
 By default, all ArgoCD installations come with a built-in dashboard that you can access by port-forwarding. You will need `kubectl` and access to the cluster for this method.

iac/aws/203403084713/shared/service-catalog/.terraform.lock.hcl

@@ -0,0 +1,27 @@
+resource "aws_servicecatalog_provisioned_product" "htan_files_s3_cdn" {
+  name                     = "htan_files_s3_cdn"
+  product_id               = "prod-5ghnhr2n5wnx4"
+  provisioning_artifact_id = "pa-wupvv4plqlhoa"
+  path_id                  = "lpv3-bgiovxbn4vdko"
+
+  provisioning_parameters {
+    key   = "DomainName"
+    value = "htan.assets.cbioportal.org"
+  }
+
+  provisioning_parameters {
+    key   = "ACMCertificateArn"
+    value = "arn:aws:acm:us-east-1:203403084713:certificate/b3a29c0f-0e1a-4b58-b4ba-32d38492a16a"
+  }
+
+  provisioning_parameters {
+    key   = "Environment"
+    value = "prod"
+  }
+
+  # Block non-MSKCC IPs
+  provisioning_parameters {
+    key   = "Block"
+    value = "false"
+  }
+}

iac/aws/203403084713/shared/service-catalog/main.tf

@@ -0,0 +1,25 @@
+terraform {
+  required_version = ">= 1.10.4"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+
+  backend "s3" {
+    bucket       = "k8s-terraform-state-storage-203403084713"
+    key          = "terraform/203403084713/service-catalog.tfstate"
+    region       = "us-east-1"
+    use_lockfile = false
+  }
+}
+
+provider "aws" {
+  region  = var.AWS_REGION
+  profile = var.AWS_PROFILE
+  default_tags {
+    tags = var.AWS_DEFAULT_TAGS
+  }
+}

iac/aws/203403084713/shared/service-catalog/terraform.tf

@@ -0,0 +1,22 @@
+variable "AWS_PROFILE" {
+  description = "AWS cli profile"
+  type        = string
+  ephemeral   = true
+  default     = "default"
+}
+
+variable "AWS_REGION" {
+  description = "AWS cli region"
+  type        = string
+  default     = "us-east-1"
+}
+
+variable "AWS_DEFAULT_TAGS" {
+  description = "Set of default tags that get added to all resources"
+  type        = map(string)
+  default = {
+    cdsi-owner = "[email protected]"
+    cdsi-app   = "cbioportal"
+    cdsi-team  = "data-visualization"
+  }
+}