changes

Author: marcoacierno

.github/workflows/deploy.yml

@@ -299,6 +299,15 @@ jobs:
         id: buildx
         if: ${{ steps.image.outputs.image_exists == 0 }}
         uses: docker/setup-buildx-action@v3
+      - name: Get vars
+        id: vars
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        run: |
+          cms_hostname="${aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ env.TF_WORKSPACE }}/pycon-frontend/cms-hostname}"
+          echo "CMS_HOSTNAME=$cms_hostname" >> "$GITHUB_OUTPUT"
+
+          conference_code="${aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ env.TF_WORKSPACE }}/pycon-frontend/conference-code}"
+          echo "CONFERENCE_CODE=$conference_code" >> "$GITHUB_OUTPUT"
       - name: Build and push
         if: ${{ steps.image.outputs.image_exists == 0 }}
         uses: docker/build-push-action@v6
@@ -314,8 +323,8 @@ jobs:
           platforms: linux/arm64
           build-args: |
             API_URL_SERVER=https://${{ fromJSON('["pastaporto-", ""]')[github.ref == 'refs/heads/main'] }}admin.pycon.it
-            CMS_HOSTNAME=${{ vars.CMS_HOSTNAME }}
-            CONFERENCE_CODE=${{ vars.CONFERENCE_CODE }}
+            CMS_HOSTNAME=${{ steps.vars.outputs.cms_hostname }}
+            CONFERENCE_CODE=${{ steps.vars.outputs.conference_code }}
 
   deploy-fe:
     runs-on: ubuntu-latest

infrastructure/applications/applications.tf

@@ -34,6 +34,17 @@ module "pycon_backend" {
   }
 }
 
+module "pycon_frontend" {
+  source       = "./pycon_frontend"
+  cluster_id = module.cluster.cluster_id
+  logs_group_name = module.cluster.logs_group_name
+
+  providers = {
+    aws    = aws
+    aws.us = aws.us
+  }
+}
+
 module "clamav" {
   source       = "./clamav"
   cluster_id = module.cluster.cluster_id

infrastructure/applications/cluster/cloudfront.tf

@@ -1,5 +1,6 @@
 locals {
-  pycon_web_domain  = local.is_prod ? "admin.pycon.it" : "${terraform.workspace}-admin.pycon.it"
+  pycon_admin_domain  = local.is_prod ? "admin.pycon.it" : "${terraform.workspace}-admin.pycon.it"
+  pycon_frontend_domain  = local.is_prod ? "frontend.pycon.it" : "${terraform.workspace}-frontend.pycon.it"
   pretix_web_domain = local.is_prod ? "tickets.pycon.it" : "${terraform.workspace}-tickets.pycon.it"
 }
 
@@ -23,8 +24,9 @@ resource "aws_cloudfront_distribution" "application" {
   comment             = "${terraform.workspace} server"
   wait_for_deployment = false
   aliases = [
-    local.pycon_web_domain,
-    local.pretix_web_domain
+    local.pycon_admin_domain,
+    local.pretix_web_domain,
+    local.pycon_frontend_domain
   ]
 
   origin {

infrastructure/applications/cluster/domains.tf

@@ -4,7 +4,19 @@ data "aws_route53_zone" "zone" {
 
 resource "aws_route53_record" "web_pycon" {
   zone_id = data.aws_route53_zone.zone.zone_id
-  name    = local.pycon_web_domain
+  name    = local.pycon_admin_domain
+  type    = "A"
+
+  alias {
+    name                   = aws_cloudfront_distribution.application.domain_name
+    zone_id                = aws_cloudfront_distribution.application.hosted_zone_id
+    evaluate_target_health = false
+  }
+}
+
+resource "aws_route53_record" "web_frontend" {
+  zone_id = data.aws_route53_zone.zone.zone_id
+  name    = local.pycon_frontend_domain
   type    = "A"
 
   alias {

infrastructure/applications/pycon_frontend/repo.tf

@@ -1,9 +1,9 @@
-resource "aws_ecr_repository" "repo" {
+data "aws_ecr_repository" "repo" {
   name = "pythonit/pycon-frontend"
 }
 
 data "aws_ecr_image" "image" {
-  repository_name = data.aws_ecr_repository.be_repo.name
+  repository_name = data.aws_ecr_repository.repo.name
   image_tag       = data.external.githash.result.githash
 }
 

infrastructure/applications/pycon_frontend/secrets.tf

@@ -0,0 +1,8 @@
+module "secrets" {
+  source  = "../../components/secrets"
+  service = "pycon-frontend"
+}
+
+module "common_secrets" {
+  source = "../../components/secrets"
+}

infrastructure/applications/pycon_frontend/task.tf

@@ -0,0 +1,75 @@
+locals {
+  is_prod = terraform.workspace == "production"
+  alias   = local.is_prod ? "frontend.pycon.it" : "${terraform.workspace}-frontend.pycon.it"
+}
+
+resource "aws_ecs_task_definition" "pycon_frontend" {
+  family = "pythonit-${terraform.workspace}-pycon-frontend"
+
+  container_definitions = jsonencode([
+    {
+      name              = "frontend"
+      image             = "${data.aws_ecr_repository.repo.repository_url}@${data.aws_ecr_image.image.image_digest}"
+      memoryReservation = 400
+      essential         = true
+
+      dockerLabels = {
+        "traefik.enable"                        = "true"
+        "traefik.http.routers.frontend.rule" = "Host(`${local.alias}`)"
+      }
+
+      environment = [
+        {
+          name  = "CMS_HOSTNAME"
+          value = module.secrets.value.cms_hostname
+        },
+        {
+          name  = "CONFERENCE_CODE"
+          value = module.secrets.value.conference_code
+        },
+      ]
+
+      portMappings = [
+        {
+          containerPort = 3000
+          hostPort      = 0
+        },
+      ]
+
+      mountPoints = []
+
+      logConfiguration = {
+        logDriver = "awslogs"
+        options = {
+          "awslogs-group"         = var.logs_group_name
+          "awslogs-region"        = "eu-central-1"
+          "awslogs-stream-prefix" = "frontend"
+        }
+      }
+
+      healthCheck = {
+        retries = 3
+        command = [
+          "CMD-SHELL",
+          "echo 1"
+        ]
+        timeout  = 3
+        interval = 10
+      }
+
+      stopTimeout = 300
+    }
+  ])
+
+  requires_compatibilities = []
+  tags                     = {}
+}
+
+resource "aws_ecs_service" "frontend" {
+  name                               = "frontend"
+  cluster                            = var.cluster_id
+  task_definition                    = aws_ecs_task_definition.pycon_frontend.arn
+  desired_count                      = 1
+  deployment_minimum_healthy_percent = 100
+  deployment_maximum_percent         = 200
+}