DevFW-CICD/spring-petclinic
12
0
Fork 1
mirror of https://github.com/spring-projects/spring-petclinic.git synced 2025-05-05 08:32:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update main.tf [skip ci]

Browse source 
Pulling from dockerhub instead of ECR
This commit is contained in:
adhl-0216 2025-04-03 20:42:19 +00:00 committed by GitHub
parent 1dab2b7f8f
commit 15ebe2c3f3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
.github/workflows/terraform/main.tf vendored
View file

@ -10,13 +10,11 @@ variable "environment" {
type = string type = string
} }
# ECR Repository (shared across environments) variable "dockerhub_username" {
resource "aws_ecr_repository" "petclinic" { type = string
name = "mtu/petclinic"
} }
# ECS Clusters # ECS Clusters
# TODO: update cluster
resource "aws_ecs_cluster" "staging_cluster" { resource "aws_ecs_cluster" "staging_cluster" {
count = var.environment == "staging" ? 1 : 0 count = var.environment == "staging" ? 1 : 0
name = "petclinic-staging-cluster" name = "petclinic-staging-cluster"
@ -28,7 +26,6 @@ resource "aws_ecs_cluster" "prod_cluster" {
} }
# CloudWatch Log Group # CloudWatch Log Group
# TODO: update cluster
resource "aws_cloudwatch_log_group" "petclinic_logs" { resource "aws_cloudwatch_log_group" "petclinic_logs" {
name = "/ecs/petclinic-${var.environment}" name = "/ecs/petclinic-${var.environment}"
retention_in_days = 30 retention_in_days = 30
@ -62,13 +59,14 @@ resource "aws_ecs_task_definition" "petclinic_task" {
family = "petclinic-task-${var.environment}" family = "petclinic-task-${var.environment}"
network_mode = "awsvpc" network_mode = "awsvpc"
requires_compatibilities = ["FARGATE"] requires_compatibilities = ["FARGATE"]
cpu = "256" cpu = "256" # Compatible with small instance type
memory = "512" memory = "512" # Compatible with small instance type
execution_role_arn = aws_iam_role.ecs_task_execution_role.arn execution_role_arn = aws_iam_role.ecs_task_execution_role.arn
task_role_arn = aws_iam_role.ecs_task_execution_role.arn # Use LabRole equivalent
container_definitions = jsonencode([{ container_definitions = jsonencode([{
name = "petclinic" name = "petclinic"
image = "215262883158.dkr.ecr.us-east-1.amazonaws.com/mtu/petclinic:${var.image_tag}" image = "${var.dockerhub_username}/petclinic:${var.image_tag}"
portMappings = [{ portMappings = [{
containerPort = 8080 containerPort = 8080
hostPort = 8080 hostPort = 8080
@ -88,21 +86,20 @@ resource "aws_ecs_task_definition" "petclinic_task" {
resource "aws_ecs_service" "petclinic_service" { resource "aws_ecs_service" "petclinic_service" {
name = "petclinic-service-${var.environment}" name = "petclinic-service-${var.environment}"
cluster = var.environment == "staging" ? aws_ecs_cluster.staging_cluster[0].id : aws_ecs_cluster.prod_cluster[0].id cluster = var.environment == "staging" ? aws_ecs_cluster.staging_cluster[0].id : aws_ecs_cluster.prod_cluster[0].id
task_definition task_definition = aws_ecs_task_definition.petclinic_task.arn
desired_count = 1 desired_count = 1
launch_type = "FARGATE" launch_type = "FARGATE"
network_configuration { network_configuration {
subnets = ["subnet-12345678"] # Replace with your subnet IDs subnets = ["subnet-12345678"] # Replace with your Learner Lab subnet IDs
security_groups = ["sg-12345678"] # Replace with your security group ID security_groups = ["sg-12345678"] # Replace with your Learner Lab security group ID
assign_public_ip = true assign_public_ip = true
} }
} }
# IAM Role for ECS Task Execution # IAM Role for ECS Task Execution (LabRole assumed)
# TODO: use lab role (?)
resource "aws_iam_role" "ecs_task_execution_role" { resource "aws_iam_role" "ecs_task_execution_role" {
name = "ecsTaskExecutionRole-${var.environment}" name = "LabRole" # Must match Learner Lab's LabRole name
assume_role_policy = jsonencode({ assume_role_policy = jsonencode({
Version = "2012-10-17" Version = "2012-10-17"
Statement = [{ Statement = [{
@ -113,6 +110,8 @@ resource "aws_iam_role" "ecs_task_execution_role" {
} }
}] }]
}) })
# Note: In Learner Lab, this role already exists; Terraform might fail if it tries to recreate it
# Use an existing role reference instead if needed (see below)
} }
resource "aws_iam_role_policy_attachment" "ecs_task_execution_role_policy" { resource "aws_iam_role_policy_attachment" "ecs_task_execution_role_policy" {