Skip to content

README.md

Latest commit

 

History

History
102 lines (79 loc) · 3.11 KB

README.md

File metadata and controls

102 lines (79 loc) · 3.11 KB
Raw

infracopilot

Developing

to run CI checks on git push:

git config --local core.hooksPath .githooks/

Run service

Change the auth0 domain in /src/auth_service/token to our dev domain

ensure the following files/keys exist:

  • auth0_client_id.key
  • auth0_client_secret.key
  • azure_openai_api_key.key
  • fga_client_id.key
  • fga_model_id.key
  • fga_secret.key
  • fga_store_id.key

To set these with the bitwarden CLI:

FGA_NOTE=$(bw get item "auth0 fga" | jq -r '.notes' | grep -o '^dev.*')
echo "$FGA_NOTE" | grep 'client id:' | sed 's#.*: ##' > fga_client_id.key
echo "$FGA_NOTE" | grep 'model id:' | sed 's#.*: ##' > fga_model_id.key
echo "$FGA_NOTE" | grep 'secret:' | sed 's#.*: ##' > fga_secret.key
echo "$FGA_NOTE" | grep 'store id:' | sed 's#.*: ##' > fga_store_id.key
unset FGA_NOTE

ensure you have the minio docker container running

docker-compose up
PORT=3000 ENGINE_PATH=/Path/to/klotho/engine/binary IAC_CLI_PATH=/Path/to/klotho/iac/binary  make run

Run Unit tests

make test

Run formatting

make black

Example curls

Create a new architecture

curl -X POST  http://127.0.0.1:3000/architecture -H "Content-Type: application/json" -d '{"name": "arch", "owner": "jordan", "engine_version": "1.0"}'

The id of the new architecture is returned below and used in subsequent requests

{"id":"bb1331b4-e475-49e1-98b8-727aea52ce06"}

Modify an architecture (Send constraints)

curl -X POST "http://127.0.0.1:3000/architecture/$ARCHITECTURE_ID/run?state=$LATEST_STATE" -H "Content-Type: application/json" -d '{"constraints": [{"scope": "application", "operator": "add", "node": "aws:rest_api::api_gateway_01"}]}'

Get an architecture's current state

curl http://127.0.0.1:3000/architecture/$ARCHITECTURE_ID

Export a current architectures iac

curl "http://127.0.0.1:3000/architecture/$ARCHITECTURE_ID/iac?state=$LATEST_STATE"

Debugging

Environment Variables

  • KEEP_TMP - if set to true will keep the tmp directory after a run
  • CAPTURE_ENGINE_FAILURES - if set to true will capture engine and IaC failures in the failures directory
  • APP_LOG_FILE - if set to a path, will log to the file specified

Deploying a dev stack

Architecture: https://app.infracopilot.io/editor/12aa38c5-6b88-4e6a-b9c8-35c9186e6516

  1. pipenv requirements > requirements.txt
  2. npm --prefix deploy install
  3. cd deploy && pulumi up
  • Grab the ifcp_binary_storage_BucketName, ifcp_static_site_BucketName
  • Note: service won't work yet, since the secrets don't exist
  1. make build-frontend (optionally with -dev or -prod)
  2. cd fontend/build && aws s3 sync . s3://{ifcp_static_site_BucketName}
  3. aws secretsmanager put-secret-value --secret-id {} --secret-string {}
  • Upload the 4 secrets according to the environment running: ifcp-fga-client-id, ifcp-fga-model-id, ifcp-fga-secret, ifcp-fga-store-id
  1. cd binaries && aws s3 sync . s3://{ifcp_binary_storage_BucketName}
  2. cd deploy && pulumi up
  • This is mostly just to restart the task. It's probably failing and restarting so it might not be necessary.