feat: make device UI own project

cdk/apps/ContinuousDeployment.ts

@@ -5,10 +5,17 @@ export class ContinuousDeploymentApp extends CloudFormation.App {
 	public constructor(props: {
 		stackId: string
 		bifravstStackId: string
-		owner: string
-		repo: string
-		branch: string
-		app: {
+		bifravstAWS: {
+			owner: string
+			repo: string
+			branch: string
+		}
+		webApp: {
+			owner: string
+			repo: string
+			branch: string
+		}
+		deviceUI: {
 			owner: string
 			repo: string
 			branch: string

cdk/cloudformation-cd.ts

@@ -12,10 +12,16 @@ const pjson = JSON.parse(
 new ContinuousDeploymentApp({
 	stackId: `${STACK_ID}-continuous-deployment`,
 	bifravstStackId: STACK_ID,
-	...extractRepoAndOwner(pjson.repository.url),
-	branch: pjson.deploy.branch || 'saga',
-	app: {
-		...extractRepoAndOwner(pjson.deploy.app.repository),
-		branch: pjson.deploy.app.branch || 'saga',
+	bifravstAWS: {
+		...extractRepoAndOwner(pjson.repository.url),
+		branch: pjson.deploy.branch || 'saga',
+	},
+	webApp: {
+		...extractRepoAndOwner(pjson.deploy.webApp.repository),
+		branch: pjson.deploy.webApp.branch || 'saga',
+	},
+	deviceUI: {
+		...extractRepoAndOwner(pjson.deploy.deviceUI.repository),
+		branch: pjson.deploy.deviceUI.branch || 'saga',
 	},
 }).synth()

cdk/resources/WebAppCD.ts

@@ -0,0 +1,204 @@
+import * as CloudFormation from '@aws-cdk/core'
+import * as IAM from '@aws-cdk/aws-iam'
+import * as CodeBuild from '@aws-cdk/aws-codebuild'
+import * as CodePipeline from '@aws-cdk/aws-codepipeline'
+import * as SSM from '@aws-cdk/aws-ssm'
+import * as S3 from '@aws-cdk/aws-s3'
+
+/**
+ * This sets up the continuous delivery for a web-app
+ */
+export class WebAppCD extends CloudFormation.Construct {
+	public constructor(
+		parent: CloudFormation.Stack,
+		id: string,
+		properties: {
+			bifravstAWS: {
+				owner: string
+				repo: string
+				branch: string
+			}
+			webApp: {
+				owner: string
+				repo: string
+				branch: string
+			}
+			bifravstStackId: string
+			githubToken: SSM.IStringParameter
+			buildSpec: string
+		},
+	) {
+		super(parent, id)
+
+		const {
+			bifravstStackId,
+			bifravstAWS,
+			webApp,
+			githubToken,
+			buildSpec,
+		} = properties
+
+		const codeBuildRole = new IAM.Role(this, 'CodeBuildRole', {
+			assumedBy: new IAM.ServicePrincipal('codebuild.amazonaws.com'),
+			inlinePolicies: {
+				rootPermissions: new IAM.PolicyDocument({
+					statements: [
+						new IAM.PolicyStatement({
+							resources: ['*'],
+							actions: ['*'],
+						}),
+					],
+				}),
+			},
+		})
+
+		const project = new CodeBuild.CfnProject(this, 'CodeBuildProject', {
+			name: id,
+			source: {
+				type: 'CODEPIPELINE',
+				buildSpec,
+			},
+			serviceRole: codeBuildRole.roleArn,
+			artifacts: {
+				type: 'CODEPIPELINE',
+			},
+			environment: {
+				type: 'LINUX_CONTAINER',
+				computeType: 'BUILD_GENERAL1_LARGE',
+				image: 'aws/codebuild/standard:2.0',
+				environmentVariables: [
+					{
+						name: 'STACK_ID',
+						value: bifravstStackId,
+					},
+				],
+			},
+		})
+		project.node.addDependency(codeBuildRole)
+
+		const bucket = new S3.Bucket(this, 'bucket', {
+			removalPolicy: CloudFormation.RemovalPolicy.DESTROY,
+		})
+
+		const pipelineRole = new IAM.Role(this, 'CodePipelineRole', {
+			assumedBy: new IAM.ServicePrincipal('codepipeline.amazonaws.com'),
+			inlinePolicies: {
+				controlCodeBuild: new IAM.PolicyDocument({
+					statements: [
+						new IAM.PolicyStatement({
+							resources: [project.attrArn],
+							actions: ['codebuild:*'],
+						}),
+					],
+				}),
+				writeToCDBucket: new IAM.PolicyDocument({
+					statements: [
+						new IAM.PolicyStatement({
+							resources: [bucket.bucketArn, `${bucket.bucketArn}/*`],
+							actions: ['s3:*'],
+						}),
+					],
+				}),
+			},
+		})
+
+		const pipeline = new CodePipeline.CfnPipeline(this, 'CodePipeline', {
+			roleArn: pipelineRole.roleArn,
+			artifactStore: {
+				type: 'S3',
+				location: bucket.bucketName,
+			},
+			name: id,
+			stages: [
+				{
+					name: 'Source',
+					actions: [
+						{
+							name: 'BifravstAWSSourceCode',
+							actionTypeId: {
+								category: 'Source',
+								owner: 'ThirdParty',
+								version: '1',
+								provider: 'GitHub',
+							},
+							outputArtifacts: [
+								{
+									name: 'BifravstAWS',
+								},
+							],
+							configuration: {
+								Branch: bifravstAWS.branch,
+								Owner: bifravstAWS.owner,
+								Repo: bifravstAWS.repo,
+								OAuthToken: githubToken.stringValue,
+							},
+						},
+						{
+							name: 'WebAppSourceCode',
+							actionTypeId: {
+								category: 'Source',
+								owner: 'ThirdParty',
+								version: '1',
+								provider: 'GitHub',
+							},
+							outputArtifacts: [
+								{
+									name: 'WebApp',
+								},
+							],
+							configuration: {
+								Branch: webApp.branch,
+								Owner: webApp.owner,
+								Repo: webApp.repo,
+								OAuthToken: githubToken.stringValue,
+							},
+						},
+					],
+				},
+				{
+					name: 'Deploy',
+					actions: [
+						{
+							name: 'DeployWebApp',
+							inputArtifacts: [{ name: 'BifravstAWS' }, { name: 'WebApp' }],
+							actionTypeId: {
+								category: 'Build',
+								owner: 'AWS',
+								version: '1',
+								provider: 'CodeBuild',
+							},
+							configuration: {
+								ProjectName: project.name,
+								PrimarySource: 'BifravstAWS',
+							},
+							outputArtifacts: [
+								{
+									name: 'BuildId',
+								},
+							],
+						},
+					],
+				},
+			],
+		})
+		pipeline.node.addDependency(pipelineRole)
+
+		new CodePipeline.CfnWebhook(this, 'webhook', {
+			name: `${id}-InvokePipelineFromGitHubChange`,
+			targetPipeline: id,
+			targetPipelineVersion: 1,
+			targetAction: 'Source',
+			filters: [
+				{
+					jsonPath: '$.ref',
+					matchEquals: `refs/heads/${webApp.branch}`,
+				},
+			],
+			authentication: 'GITHUB_HMAC',
+			authenticationConfiguration: {
+				secretToken: githubToken.stringValue,
+			},
+			registerWithThirdParty: false,
+		})
+	}
+}

cdk/resources/WebAppHosting.ts

@@ -0,0 +1,72 @@
+import * as CloudFormation from '@aws-cdk/core'
+import * as CloudFront from '@aws-cdk/aws-cloudfront'
+import * as S3 from '@aws-cdk/aws-s3'
+
+/**
+ * This sets up the web hosting for a web app
+ */
+export class WebAppHosting extends CloudFormation.Resource {
+	public readonly bucket: S3.IBucket
+	public readonly distribution: CloudFront.CfnDistribution
+
+	public constructor(parent: CloudFormation.Stack, id: string) {
+		super(parent, id)
+
+		this.bucket = new S3.Bucket(this, 'bucket', {
+			publicReadAccess: true,
+			cors: [
+				{
+					allowedHeaders: ['*'],
+					allowedMethods: [S3.HttpMethods.GET],
+					allowedOrigins: ['*'],
+					exposedHeaders: ['Date'],
+					maxAge: 3600,
+				},
+			],
+			removalPolicy: CloudFormation.RemovalPolicy.DESTROY,
+			websiteIndexDocument: 'index.html',
+			websiteErrorDocument: 'error.html',
+		})
+
+		this.distribution = new CloudFront.CfnDistribution(
+			this,
+			'websiteDistribution',
+			{
+				distributionConfig: {
+					enabled: true,
+					priceClass: 'PriceClass_100',
+					defaultRootObject: 'index.html',
+					defaultCacheBehavior: {
+						allowedMethods: ['HEAD', 'GET', 'OPTIONS'],
+						cachedMethods: ['HEAD', 'GET'],
+						compress: true,
+						forwardedValues: {
+							queryString: true,
+							headers: [
+								'Access-Control-Request-Headers',
+								'Access-Control-Request-Method',
+								'Origin',
+							],
+						},
+						smoothStreaming: false,
+						targetOriginId: 'S3',
+						viewerProtocolPolicy: 'redirect-to-https',
+					},
+					ipv6Enabled: true,
+					viewerCertificate: {
+						cloudFrontDefaultCertificate: true,
+					},
+					origins: [
+						{
+							domainName: `${this.bucket.bucketName}.s3-website.${parent.region}.amazonaws.com`,
+							id: 'S3',
+							customOriginConfig: {
+								originProtocolPolicy: 'http-only',
+							},
+						},
+					],
+				},
+			},
+		)
+	}
+}