mirror of
https://github.com/ZwareBear/JFrog-Cloud-Installers.git
synced 2026-01-21 07:06:56 -06:00
added Cloud Formation templates for ECS and EKS
This commit is contained in:
Vinay Aggarwal
704
CloudFormation-JCR-ECS/templates/jfrog-jcr6-ecs-existing-vpc.template.yaml
Executable file
704
CloudFormation-JCR-ECS/templates/jfrog-jcr6-ecs-existing-vpc.template.yaml
Executable file
@@ -0,0 +1,704 @@
|
||||
AWSTemplateFormatVersion: '2010-09-09'
|
||||
Description: 'JFrog Artifactory Quick Start Deployment into an Existing VPC (qs-1q037eflr)'
|
||||
Metadata:
|
||||
AWS::CloudFormation::Interface:
|
||||
ParameterGroups:
|
||||
- Label:
|
||||
default: Security configuration
|
||||
Parameters:
|
||||
- KeyPairName
|
||||
- AccessCIDR
|
||||
- RemoteAccessCIDR
|
||||
- Label:
|
||||
default: Network Configuration
|
||||
Parameters:
|
||||
- VPCID
|
||||
- VPCCIDR
|
||||
- PublicSubnet1ID
|
||||
- PublicSubnet2ID
|
||||
- PrivateSubnet1ID
|
||||
- PrivateSubnet2ID
|
||||
- PrivateSubnet1CIDR
|
||||
- PrivateSubnet2CIDR
|
||||
- ELBScheme
|
||||
- Label:
|
||||
default: Bastion Configuration
|
||||
Parameters:
|
||||
- ProvisionBastionHost
|
||||
- BastionInstanceType
|
||||
- BastionOS
|
||||
- BastionRootVolumeSize
|
||||
- BastionEnableTCPForwarding
|
||||
- NumBastionHosts
|
||||
- BastionEnableX11Forwarding
|
||||
- Label:
|
||||
default: ECS Configuration
|
||||
Parameters:
|
||||
- ClusterName
|
||||
- CreateNewECSCluster
|
||||
- InstanceType
|
||||
- VolumeSize
|
||||
- Label:
|
||||
default: JFrog Artifactory Configuration
|
||||
Parameters:
|
||||
- ArtifactoryVersion
|
||||
- NumberOfSecondary
|
||||
- NumberOfEC2Nodes
|
||||
- SMLicensesName
|
||||
- Certificate
|
||||
- CertificateKey
|
||||
- CertificateDomain
|
||||
- ArtifactoryServerName
|
||||
- MasterKey
|
||||
- ExtraJavaOptions
|
||||
- AnsibleVaultPass
|
||||
- Label:
|
||||
default: Amazon RDS Configuration
|
||||
Parameters:
|
||||
- DatabaseName
|
||||
- DatabaseEngine
|
||||
- DatabaseVersion
|
||||
- DatabaseUser
|
||||
- DatabasePassword
|
||||
- DatabaseInstance
|
||||
- DBAllocatedStorage
|
||||
- MultiAZDatabase
|
||||
- Label:
|
||||
default: AWS Quick Start Configuration
|
||||
Parameters:
|
||||
- QSS3BucketName
|
||||
- QSS3KeyPrefix
|
||||
ParameterLabels:
|
||||
KeyPairName:
|
||||
default: SSH key name
|
||||
AccessCIDR:
|
||||
default: Permitted IP range
|
||||
RemoteAccessCIDR:
|
||||
default: Remote access CIDR
|
||||
VPCID:
|
||||
default: VPC ID
|
||||
VPCCIDR:
|
||||
default: VPC CIDR
|
||||
PublicSubnet1ID:
|
||||
default: Public subnet 1 ID
|
||||
PublicSubnet2ID:
|
||||
default: Public subnet 2 ID
|
||||
PrivateSubnet1ID:
|
||||
default: Private subnet 1 ID
|
||||
PrivateSubnet2ID:
|
||||
default: Private subnet 2 ID
|
||||
PrivateSubnet1CIDR:
|
||||
default: Private subnet 1 CIDR
|
||||
PrivateSubnet2CIDR:
|
||||
default: Private subnet 2 CIDR
|
||||
ELBScheme:
|
||||
default: Elastic Load Balancer scheme
|
||||
ProvisionBastionHost:
|
||||
default: Bastion instance
|
||||
BastionInstanceType:
|
||||
default: Bastion instance type
|
||||
BastionRootVolumeSize:
|
||||
default: Bastion root volume size
|
||||
BastionEnableTCPForwarding:
|
||||
default: Bastion enable TCP forwarding
|
||||
BastionEnableX11Forwarding:
|
||||
default: Bastion enable X11 forwarding
|
||||
BastionOS:
|
||||
default: Bastion operating system
|
||||
NumBastionHosts:
|
||||
default: Number of bastion instances
|
||||
ClusterName:
|
||||
default: ECS cluster name
|
||||
CreateNewECSCluster:
|
||||
default: Create new ECS cluster
|
||||
InstanceType:
|
||||
default: EC2 instance type
|
||||
VolumeSize:
|
||||
default: EBS root volume size
|
||||
ArtifactoryVersion:
|
||||
default: Artifactory version
|
||||
NumberOfSecondary:
|
||||
default: Number of secondary instances
|
||||
NumberOfEC2Nodes:
|
||||
default: Number of EC2 nodes
|
||||
SMLicensesName:
|
||||
default: Artifactory licenses secret name
|
||||
Certificate:
|
||||
default: Certificate
|
||||
CertificateKey:
|
||||
default: Certificate key
|
||||
CertificateDomain:
|
||||
default: Certificate domain
|
||||
ArtifactoryServerName:
|
||||
default: Artifactory server name
|
||||
MasterKey:
|
||||
default: Master server key
|
||||
ExtraJavaOptions:
|
||||
default: Extra Java options
|
||||
AnsibleVaultPass:
|
||||
default: Ansible Vault password
|
||||
DatabaseName:
|
||||
default: Database name
|
||||
DatabaseEngine:
|
||||
default: Database engine
|
||||
DatabaseVersion:
|
||||
default: Database version
|
||||
DatabaseUser:
|
||||
default: Database user
|
||||
DatabasePassword:
|
||||
default: Database password
|
||||
DatabaseInstance:
|
||||
default: Database instance type
|
||||
DBAllocatedStorage:
|
||||
default: Database allocated storage
|
||||
MultiAZDatabase:
|
||||
default: High available database
|
||||
QSS3BucketName:
|
||||
default: Quick Start S3 bucket name
|
||||
QSS3KeyPrefix:
|
||||
default: Quick Start S3 key prefix
|
||||
|
||||
Parameters:
|
||||
KeyPairName:
|
||||
Description: The name of an existing public/private key pair, which allows you
|
||||
to securely connect to your instance after it launches.
|
||||
Type: AWS::EC2::KeyPair::KeyName
|
||||
AccessCIDR:
|
||||
Description: The CIDR IP range that is permitted to access Artifactory.
|
||||
We recommend that you set this value to a trusted IP range.
|
||||
For example, you might want to grant only your corporate network access to the software.
|
||||
AllowedPattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/([0-9]|[1-2][0-9]|3[0-2]))$
|
||||
Type: String
|
||||
RemoteAccessCIDR:
|
||||
Description: The remote CIDR range for allowing SSH into the Bastion instance.
|
||||
We recommend that you set this value to a trusted IP range.
|
||||
For example, you might want to grant specific ranges inside your corporate network SSH access.
|
||||
AllowedPattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/([0-9]|[1-2][0-9]|3[0-2]))$
|
||||
Type: String
|
||||
VPCID:
|
||||
Description: The ID of your existing VPC (e.g., vpc-0343606e).
|
||||
Type: "AWS::EC2::VPC::Id"
|
||||
VPCCIDR:
|
||||
Description: The CIDR block for the VPC.
|
||||
AllowedPattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/(1[6-9]|2[0-8]))$
|
||||
ConstraintDescription: CIDR block parameter must be in the form x.x.x.x/16-28
|
||||
Default: 10.0.0.0/16
|
||||
Type: String
|
||||
PublicSubnet1ID:
|
||||
Description: The ID of the public subnet in Availability Zone 1 in your existing VPC (e.g., subnet-z0376dab).
|
||||
Type: "AWS::EC2::Subnet::Id"
|
||||
PublicSubnet2ID:
|
||||
Description: The ID of the public subnet in Availability Zone 2 in your existing VPC (e.g., subnet-a29c3d84).
|
||||
Type: "AWS::EC2::Subnet::Id"
|
||||
PrivateSubnet1ID:
|
||||
Description: The ID of the private subnet in Availability Zone 1 in your existing VPC (e.g., subnet-a0246dcd).
|
||||
Type: "AWS::EC2::Subnet::Id"
|
||||
PrivateSubnet2ID:
|
||||
Description: The ID of the private subnet in Availability Zone 2 in your existing VPC (e.g., subnet-b58c3d67).
|
||||
Type: "AWS::EC2::Subnet::Id"
|
||||
PrivateSubnet1CIDR:
|
||||
Description: The CIDR of the private subnet in Availability Zone 1 in your existing VPC (e.g., 10.0.0.0/19).
|
||||
AllowedPattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/(1[6-9]|2[0-8]))$
|
||||
ConstraintDescription: CIDR block parameter must be in the form x.x.x.x/16-28
|
||||
Default: 10.0.0.0/19
|
||||
Type: String
|
||||
PrivateSubnet2CIDR:
|
||||
Description: The CIDR of the private subnet in Availability Zone 2 in your existing VPC (e.g., 10.0.32.0/19).
|
||||
AllowedPattern: ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/(1[6-9]|2[0-8]))$
|
||||
ConstraintDescription: CIDR block parameter must be in the form x.x.x.x/16-28
|
||||
Default: 10.0.32.0/19
|
||||
Type: String
|
||||
ProvisionBastionHost:
|
||||
Description: Choose Disabled to skip creating a bastion instance. Due to the Artifactory nodes being
|
||||
created in private subnets, the default setting of Enabled this is highly recommended.
|
||||
AllowedValues:
|
||||
- "Enabled"
|
||||
- "Disabled"
|
||||
Default: "Enabled"
|
||||
Type: String
|
||||
BastionInstanceType:
|
||||
Description: The size of the bastion instances.
|
||||
AllowedValues:
|
||||
- t2.nano
|
||||
- t2.micro
|
||||
- t2.small
|
||||
- t2.medium
|
||||
- t2.large
|
||||
- m3.large
|
||||
- m3.xlarge
|
||||
- m3.2xlarge
|
||||
- m4.large
|
||||
- m4.xlarge
|
||||
- m4.2xlarge
|
||||
- m4.4xlarge
|
||||
Default: "t2.micro"
|
||||
Type: String
|
||||
BastionRootVolumeSize:
|
||||
Description: The size of the root volume on the bastion instances.
|
||||
Default: 10
|
||||
Type: Number
|
||||
BastionEnableTCPForwarding:
|
||||
Description: Choose whether to enable TCPForwarding via the bootstrapping of the bastion instance
|
||||
or not.
|
||||
AllowedValues:
|
||||
- "true"
|
||||
- "false"
|
||||
Default: "true"
|
||||
Type: String
|
||||
BastionEnableX11Forwarding:
|
||||
Description: Choose true to enable X11 via the bootstrapping of the bastion host.
|
||||
Setting this value to true will enable X Windows over SSH.
|
||||
X11 forwarding can be very useful but it is also a security risk, so we recommend
|
||||
that you keep the default (false) setting unless required.
|
||||
AllowedValues:
|
||||
- "true"
|
||||
- "false"
|
||||
Default: "false"
|
||||
Type: String
|
||||
BastionOS:
|
||||
Description: The Linux distribution for the Amazon Machine Image (AMI) to be used for the bastion instances.
|
||||
AllowedValues:
|
||||
- "Amazon-Linux-HVM"
|
||||
- "CentOS-7-HVM"
|
||||
- "Ubuntu-Server-14.04-LTS-HVM"
|
||||
- "Ubuntu-Server-16.04-LTS-HVM"
|
||||
- "SUSE-SLES-15-HVM"
|
||||
Default: "Amazon-Linux-HVM"
|
||||
Type: String
|
||||
NumBastionHosts:
|
||||
Description: The number of bastion instances to create.
|
||||
AllowedValues:
|
||||
- '1'
|
||||
- '2'
|
||||
- '3'
|
||||
- '4'
|
||||
Default: '1'
|
||||
Type: String
|
||||
ClusterName:
|
||||
Description: The name for your ECS cluster.
|
||||
Default: JFrog
|
||||
Type: String
|
||||
CreateNewECSCluster:
|
||||
Description: Choose whether to create a new ECS cluster with the name specified in the 'ClusterName' parameter.
|
||||
If you choose Disabled, an ECS cluster with the name specified in the 'CluserName' parameter must already exist.
|
||||
AllowedValues:
|
||||
- "Enabled"
|
||||
- "Disabled"
|
||||
Default: "Enabled"
|
||||
Type: String
|
||||
InstanceType:
|
||||
Description: The EC2 instance type for the Artifactory Docker hosts.
|
||||
AllowedValues:
|
||||
- m4.xlarge
|
||||
- m4.2xlarge
|
||||
- m4.4xlarge
|
||||
- m4.10xlarge
|
||||
ConstraintDescription: Must contain valid instance type.
|
||||
Default: m4.xlarge
|
||||
Type: String
|
||||
VolumeSize:
|
||||
Description: The size in GB of the available storage; the Quick Start will create an
|
||||
Amazon Elastic Block Store (Amazon EBS) volumes of this size.
|
||||
Default: 200
|
||||
Type: Number
|
||||
NumberOfEC2Nodes:
|
||||
Description: The number of EC2 nodes to create for the ECS cluster. There must be
|
||||
enough nodes to run the number of secondaries plus the primary task.
|
||||
AllowedValues:
|
||||
- 3
|
||||
- 4
|
||||
- 5
|
||||
- 6
|
||||
- 7
|
||||
- 8
|
||||
Default: 3
|
||||
Type: Number
|
||||
NumberOfSecondary:
|
||||
Description: The number of secondary Artifactory servers to complete your
|
||||
HA deployment. To fit the Artifactory best practices, the minimum number
|
||||
is two; the maximum is seven. Do not select more than instances than you
|
||||
have licenses for.
|
||||
AllowedValues:
|
||||
- 2
|
||||
- 3
|
||||
- 4
|
||||
- 5
|
||||
- 6
|
||||
- 7
|
||||
Default: 2
|
||||
Type: Number
|
||||
ArtifactoryVersion:
|
||||
Description: The version of Artifactory that you want to deploy into the Quick Start.
|
||||
Please see the release notes to select the version you want to deploy.
|
||||
https://www.jfrog.com/confluence/display/RTF/Release+Notes
|
||||
#AllowedPattern: ^(([0-9]|[1-9][0-9])\.){2}([1-9][0-9]|[0-9])$
|
||||
#ConstraintDescription: A version that matches X.X.X per Artifactory releases.
|
||||
Default: 6.15.0
|
||||
Type: String
|
||||
SMLicensesName:
|
||||
Description: The secret name created in AWS Secrets Manager which contains the Artifactory licenses.
|
||||
Type: String
|
||||
Certificate:
|
||||
Description: The certificate file to be used to terminate SSL.
|
||||
AllowedPattern: ^(-----BEGIN CERTIFICATE-----)\n(.*?\n)+(-----END CERTIFICATE-----)$
|
||||
ConstraintDescription: A Certificate that begins with "-----BEGIN CERTIFICATE----- " and ends with "-----END CERTIFICATE----- "
|
||||
Type: String
|
||||
CertificateKey:
|
||||
Description: The private key for the certificate.
|
||||
AllowedPattern: ^(-----BEGIN [A-Za-z ]+ KEY-----)\n(.*?\n)+(-----END [A-Za-z ]+ KEY-----)$
|
||||
ConstraintDescription: A Private key that begins with "-----BEGIN PRIVATE KEY-----" and ends with "-----END PRIVATE KEY-----"
|
||||
NoEcho: 'true'
|
||||
Type: String
|
||||
CertificateDomain:
|
||||
Description: The domain matching that of the certificate. Ensure that it matches your certificate.
|
||||
AllowedPattern: ^[A-Za-z0-9]+[.A-Za-z0-9]+[A-Za-z0-9]$
|
||||
ConstraintDescription: The domain must not start or end with a '.'
|
||||
Type: String
|
||||
ArtifactoryServerName:
|
||||
Description: The name of your Artifactory server. Ensure that this matches your certificate.
|
||||
Type: String
|
||||
MasterKey:
|
||||
Description: The master key for the Artifactory cluster. Generate a master key by using the command '$openssl rand -hex 16'.
|
||||
AllowedPattern: ^[a-zA-Z0-9]+$
|
||||
MinLength: '1'
|
||||
MaxLength: '64'
|
||||
ConstraintDescription: Only capital or lowercase letters and numbers, with a Max of 64 characters.
|
||||
NoEcho: 'true'
|
||||
Type: String
|
||||
ExtraJavaOptions:
|
||||
Description: Setting Java memory parameters for Artifactory. For more information, see the Artifactory
|
||||
system requirements.
|
||||
https://www.jfrog.com/confluence/display/RTF/System+Requirements#SystemRequirements-RecommendedHardware.
|
||||
Default: -Xmx4g
|
||||
Type: String
|
||||
AnsibleVaultPass:
|
||||
Description: The Ansible Vault password to protect the Artifactory YAML configuration file
|
||||
generated during the Artifactory deployment. This YAML file is stored on the EC2 nodes
|
||||
and secured with this password.
|
||||
NoEcho: 'true'
|
||||
Type: String
|
||||
DatabaseName:
|
||||
Description: The name for your DB instance. The name must be unique across all DB instances
|
||||
owned by your AWS account in the current AWS Region. The DB instance identifier is case-insensitive,
|
||||
but is stored as all lowercase (as in "mydbinstance").
|
||||
AllowedPattern: ^[a-zA-Z]([a-zA-Z0-9])+$
|
||||
MinLength: '1'
|
||||
MaxLength: '60'
|
||||
ConstraintDescription: 1 to 60 alphanumeric characters First character must be a letter.
|
||||
Default: artdb
|
||||
Type: String
|
||||
DatabaseEngine:
|
||||
Description: The database engine that you want to run, currently locked to MySQL.
|
||||
AllowedValues:
|
||||
- MySQL
|
||||
Default: MySQL
|
||||
Type: String
|
||||
DatabaseVersion:
|
||||
Description: The major version of the MySQL database engine you want to run. This is currently locked to MySQL versions
|
||||
supported by Artifactory and RDS.
|
||||
AllowedValues:
|
||||
- 5.5
|
||||
- 5.6
|
||||
- 5.7
|
||||
Default: 5.7
|
||||
Type: String
|
||||
DatabaseUser:
|
||||
Description: The login ID for the master user of your DB instance.
|
||||
MinLength: '1'
|
||||
MaxLength: '16'
|
||||
AllowedPattern: ^[a-zA-Z]([a-zA-Z0-9])+$
|
||||
ConstraintDescription: 1 to 16 alphanumeric characters. First character must be a letter
|
||||
Default: artifactory
|
||||
Type: String
|
||||
DatabasePassword:
|
||||
Description: The password for the Artifactory database user.
|
||||
AllowedPattern: ^[^ \\']+$
|
||||
MinLength: '8'
|
||||
MaxLength: '12'
|
||||
ConstraintDescription: Must be at least 8 and no more than
|
||||
12 characters containing letters and (minimum 1 capital letter), numbers and
|
||||
symbols.
|
||||
NoEcho: 'true'
|
||||
Type: String
|
||||
DatabaseInstance:
|
||||
Description: The size of the database to be deployed as part of the Quick Start.
|
||||
AllowedValues:
|
||||
- db.m3.medium
|
||||
- db.m3.large
|
||||
- db.m3.xlarge
|
||||
- db.m3.2xlarge
|
||||
- db.m4.large
|
||||
- db.m4.xlarge
|
||||
- db.m4.2xlarge
|
||||
- db.m4.10xlarge
|
||||
- db.m4.16xlarge
|
||||
- db.m5.large
|
||||
- db.m5.xlarge
|
||||
- db.m5.2xlarge
|
||||
- db.m5.4xlarge
|
||||
- db.m5.12xlarge
|
||||
- db.m5.24xlarge
|
||||
ConstraintDescription: Must be a valid database Instance Type.
|
||||
Default: db.m4.large
|
||||
Type: String
|
||||
DBAllocatedStorage:
|
||||
Description: The size in GB of the available storage for the database instance.
|
||||
MinValue: 5
|
||||
MaxValue: 1024
|
||||
Default: 10
|
||||
Type: Number
|
||||
MultiAZDatabase:
|
||||
Description: Choose false to create an Amazon RDS instance in a single Availability Zone.
|
||||
ConstraintDescription: True or False
|
||||
AllowedValues:
|
||||
- "true"
|
||||
- "false"
|
||||
Default: "true"
|
||||
Type: String
|
||||
ELBScheme:
|
||||
Description: Choose whether this will be internet facing or internal.
|
||||
AllowedValues:
|
||||
- internal
|
||||
- internet-facing
|
||||
Default: internet-facing
|
||||
Type: String
|
||||
QSS3BucketName:
|
||||
Description: S3 bucket name for the Quick Start assets. This string can include
|
||||
numbers, lowercase letters, uppercase letters, and hyphens (-). It cannot start
|
||||
or end with a hyphen (-).
|
||||
AllowedPattern: ^[0-9a-zA-Z]+([0-9a-zA-Z-]*[0-9a-zA-Z])*$
|
||||
ConstraintDescription: Quick Start bucket name can include numbers, lowercase
|
||||
letters, uppercase letters, and hyphens (-). It cannot start or end with a hyphen
|
||||
(-).
|
||||
Default: aws-quickstart
|
||||
Type: String
|
||||
QSS3KeyPrefix:
|
||||
Description: S3 key prefix for the Quick Start assets. Quick Start key prefix
|
||||
can include numbers, lowercase letters, uppercase letters, hyphens (-), and
|
||||
forward slash (/).
|
||||
AllowedPattern: ^[0-9a-zA-Z-/]*$
|
||||
ConstraintDescription: Quick Start key prefix can include numbers, lowercase letters,
|
||||
uppercase letters, hyphens (-), and forward slash (/).
|
||||
Default: quickstart-jfrog-artifactory/
|
||||
Type: String
|
||||
Conditions:
|
||||
EnableBastion: !Equals [!Ref 'ProvisionBastionHost', 'Enabled']
|
||||
Resources:
|
||||
BastionStack:
|
||||
Condition: EnableBastion
|
||||
Type: AWS::CloudFormation::Stack
|
||||
Properties:
|
||||
TemplateURL: !Sub 'https://${QSS3BucketName}.s3.amazonaws.com/${QSS3KeyPrefix}submodules/quickstart-linux-bastion/templates/linux-bastion.template'
|
||||
Parameters:
|
||||
VPCID: !Ref VPCID
|
||||
PublicSubnet1ID: !Ref PublicSubnet1ID
|
||||
PublicSubnet2ID: !Ref PublicSubnet2ID
|
||||
KeyPairName: !Ref KeyPairName
|
||||
QSS3BucketName: !Ref QSS3BucketName
|
||||
QSS3KeyPrefix: !Sub '${QSS3KeyPrefix}submodules/quickstart-linux-bastion/'
|
||||
RemoteAccessCIDR: !Ref RemoteAccessCIDR
|
||||
BastionInstanceType: !Ref BastionInstanceType
|
||||
RootVolumeSize: !Ref BastionRootVolumeSize
|
||||
BastionAMIOS: !Ref BastionOS
|
||||
EnableTCPForwarding: !Ref BastionEnableTCPForwarding
|
||||
EnableX11Forwarding: !Ref BastionEnableX11Forwarding
|
||||
NumBastionHosts: !Ref NumBastionHosts
|
||||
ArtifactoryCoreInfraStack:
|
||||
Type: AWS::CloudFormation::Stack
|
||||
Properties:
|
||||
TemplateURL: !Sub "https://${QSS3BucketName}.s3.amazonaws.com/${QSS3KeyPrefix}templates/jfrog-artifactory-core-infrastructure.template.yaml"
|
||||
Parameters:
|
||||
VPCID: !Ref VPCID
|
||||
VPCCIDR: !Ref VPCCIDR
|
||||
PrivateSubnet1CIDR: !Ref PrivateSubnet1CIDR
|
||||
PrivateSubnet2CIDR: !Ref PrivateSubnet2CIDR
|
||||
PrivateSubnet3CIDR: !Ref PrivateSubnet2CIDR # This should end up in no new rule but required for EKS
|
||||
SubnetIds: !Join [ ",", [ !Ref PrivateSubnet1ID, !Ref PrivateSubnet2ID ]]
|
||||
DBAllocatedStorage: !Ref DBAllocatedStorage
|
||||
MultiAZDatabase: !Ref MultiAZDatabase
|
||||
DatabaseEngine: !Ref DatabaseEngine
|
||||
DatabaseVersion: !Ref DatabaseVersion
|
||||
DatabaseUser: !Ref DatabaseUser
|
||||
DatabasePassword: !Ref DatabasePassword
|
||||
DatabaseInstance: !Ref DatabaseInstance
|
||||
DatabaseName: !Ref DatabaseName
|
||||
ArtifactoryELB:
|
||||
Type: AWS::ElasticLoadBalancingV2::LoadBalancer
|
||||
Properties:
|
||||
IpAddressType: ipv4
|
||||
Name: ArtifactoryELB
|
||||
Scheme: !Ref ELBScheme
|
||||
Subnets:
|
||||
- !Ref PublicSubnet1ID
|
||||
- !Ref PublicSubnet2ID
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: artifactory-ELB
|
||||
Type: network
|
||||
ArtifactoryTargetGroup:
|
||||
Type: AWS::ElasticLoadBalancingV2::TargetGroup
|
||||
Properties:
|
||||
HealthCheckEnabled: True
|
||||
HealthCheckIntervalSeconds: 30
|
||||
HealthCheckProtocol: TCP
|
||||
HealthCheckTimeoutSeconds: 10
|
||||
HealthyThresholdCount: 3
|
||||
Name: Artifactory
|
||||
Port: 443
|
||||
Protocol: TCP
|
||||
#Tags:
|
||||
# - !Ref DeploymentTag
|
||||
TargetType: instance
|
||||
UnhealthyThresholdCount: 3
|
||||
VpcId: !Ref VPCID
|
||||
ArtifactoryELBListener:
|
||||
Type: AWS::ElasticLoadBalancingV2::Listener
|
||||
Properties:
|
||||
DefaultActions:
|
||||
- TargetGroupArn: !Ref ArtifactoryTargetGroup
|
||||
Type: forward
|
||||
LoadBalancerArn: !Ref ArtifactoryELB
|
||||
Port: 443
|
||||
Protocol: TCP
|
||||
ArtifactoryELBSG:
|
||||
Type: AWS::EC2::SecurityGroup
|
||||
Properties:
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: artifactory-ELB-sg
|
||||
GroupDescription: SG for ELB Ingress from outside and egress to instances
|
||||
VpcId: !Ref VPCID
|
||||
SecurityGroupIngress:
|
||||
- IpProtocol: tcp
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
CidrIp: !Ref AccessCIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 443
|
||||
ToPort: 443
|
||||
CidrIp: !Ref AccessCIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: !Ref AccessCIDR
|
||||
SecurityGroupEgress:
|
||||
- IpProtocol: tcp
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 443
|
||||
ToPort: 443
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: 0.0.0.0/0
|
||||
ArtifactoryEC2SG:
|
||||
Type: AWS::EC2::SecurityGroup
|
||||
Properties:
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: artifactory-ec2-instances-sg
|
||||
GroupDescription: SG for EC2 instances (also permits SSH access from the bastion host)
|
||||
VpcId: !Ref VPCID
|
||||
SecurityGroupIngress:
|
||||
- IpProtocol: tcp
|
||||
FromPort: 22
|
||||
ToPort: 22
|
||||
CidrIp: !Ref VPCCIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
CidrIp: !Ref VPCCIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 443
|
||||
ToPort: 443
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: !Ref PrivateSubnet1CIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: !Ref PrivateSubnet2CIDR
|
||||
SecurityGroupEgress:
|
||||
- IpProtocol: tcp
|
||||
FromPort: 22
|
||||
ToPort: 22
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 443
|
||||
ToPort: 443
|
||||
CidrIp: 0.0.0.0/0
|
||||
- IpProtocol: tcp
|
||||
FromPort: 3306
|
||||
ToPort: 3306
|
||||
CidrIp: !Ref PrivateSubnet1CIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 3306
|
||||
ToPort: 3306
|
||||
CidrIp: !Ref PrivateSubnet2CIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: !Ref PrivateSubnet1CIDR
|
||||
- IpProtocol: tcp
|
||||
FromPort: 8081
|
||||
ToPort: 8081
|
||||
CidrIp: !Ref PrivateSubnet2CIDR
|
||||
ArtifactoryECSBuild:
|
||||
Type: AWS::CloudFormation::Stack
|
||||
Properties:
|
||||
TemplateURL: !Sub 'https://${QSS3BucketName}.s3.amazonaws.com/${QSS3KeyPrefix}templates/jfrog-jcr6-ecs-ec2.template.yaml'
|
||||
Parameters:
|
||||
PrivateSubnet1ID: !Ref PrivateSubnet1ID
|
||||
PrivateSubnet2ID: !Ref PrivateSubnet2ID
|
||||
ClusterName: !Ref ClusterName
|
||||
CreateNewECSCluster: !Ref CreateNewECSCluster
|
||||
MinScalingNodes: !Ref NumberOfEC2Nodes
|
||||
MaxScalingNodes: !Ref NumberOfEC2Nodes
|
||||
KeyPairName: !Ref KeyPairName
|
||||
InstanceType: !Ref InstanceType
|
||||
VolumeSize: !Ref VolumeSize
|
||||
DeploymentTag: Artifactory
|
||||
NumberOfSecondary: !Ref NumberOfSecondary
|
||||
ArtifactoryLicense1: !Sub '{{resolve:secretsmanager:${SMLicensesName}:SecretString:ArtifactoryLicense1}}'
|
||||
ArtifactoryLicense2: !Sub '{{resolve:secretsmanager:${SMLicensesName}:SecretString:ArtifactoryLicense2}}'
|
||||
ArtifactoryLicense3: !Sub '{{resolve:secretsmanager:${SMLicensesName}:SecretString:ArtifactoryLicense3}}'
|
||||
ArtifactoryLicense4: !Sub '{{resolve:secretsmanager:${SMLicensesName}:SecretString:ArtifactoryLicense4}}'
|
||||
CertificateDomain: !Ref CertificateDomain
|
||||
ArtifactoryServerName: !Ref ArtifactoryServerName
|
||||
ArtifactoryIAMAcessKey: !GetAtt ArtifactoryCoreInfraStack.Outputs.IAMAcessKey
|
||||
SecretAccessKey: !GetAtt ArtifactoryCoreInfraStack.Outputs.SecretAccessKey
|
||||
ArtifactoryS3Bucket: !GetAtt ArtifactoryCoreInfraStack.Outputs.S3Bucket
|
||||
ArtifactoryDBEndpointAddress: !GetAtt ArtifactoryCoreInfraStack.Outputs.ArtifactoryDBEndpointAddress
|
||||
CertificateKey: !Ref CertificateKey
|
||||
Certificate: !Ref Certificate
|
||||
DBType: mysql
|
||||
DatabaseName: !Ref DatabaseName
|
||||
DatabaseUser: !Ref DatabaseUser
|
||||
DatabasePassword: !Ref DatabasePassword
|
||||
MasterKey: !Ref MasterKey
|
||||
ExtraJavaOptions: !Ref ExtraJavaOptions
|
||||
ArtifactoryVersion: !Ref ArtifactoryVersion
|
||||
SecurityGroups: !Ref ArtifactoryEC2SG
|
||||
ArtifactoryTargetGroupArn: !Ref ArtifactoryTargetGroup
|
||||
AnsibleVaultPass: !Ref AnsibleVaultPass
|
||||
QSS3BucketName: !Ref QSS3BucketName
|
||||
QSS3KeyPrefix: !Ref QSS3KeyPrefix
|
||||
|
||||
Outputs:
|
||||
ArtifactoryUrl:
|
||||
Description: URL of the ELB to access Artifactory
|
||||
Value: !Sub "https://${ArtifactoryELB.DNSName}"
|
||||
BastionIP:
|
||||
Value: !If
|
||||
- EnableBastion
|
||||
- !GetAtt BastionStack.Outputs.EIP1
|
||||
- ""
|
||||
Reference in New Issue
Block a user