feat: add ECS task definition, Dockerfile, and GitHub Actions workflow for deployment

Author: rminnett

.aws/task-definition.json

@@ -0,0 +1,57 @@
+{
+  "family": "fiesta-api",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "512",
+  "memory": "1024",
+  "executionRoleArn": "arn:aws:iam::752700849402:role/ecsTaskExecutionRole",
+  "taskRoleArn": "arn:aws:iam::752700849402:role/ecsTaskRole",
+  "containerDefinitions": [
+    {
+      "name": "fiesta-api",
+      "image": "752700849402.dkr.ecr.us-west-2.amazonaws.com/earthref/fiesta-api:latest",
+      "essential": true,
+      "portMappings": [
+        {
+          "containerPort": 3000,
+          "protocol": "tcp"
+        }
+      ],
+      "environment": [
+        {
+          "name": "NODE_ENV",
+          "value": "production"
+        }
+      ],
+      "secrets": [
+        {
+            "name": "OS_NODE",
+            "valueFrom": "arn:aws:secretsmanager:us-west-2:752700849402:secret:fiesta/OS_NODE"
+        },
+        {
+            "name": "S3_ACCESS_KEY_ID",
+            "valueFrom": "arn:aws:secretsmanager:us-west-2:752700849402:secret:fiesta/S3_ACCESS_KEY_ID"
+        },
+        {
+            "name": "S3_SECRET_ACCESS_KEY",
+            "valueFrom": "arn:aws:secretsmanager:us-west-2:752700849402:secret:fiesta/S3_SECRET_ACCESS_KEY"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/fiesta-api",
+          "awslogs-region": "us-west-2",
+          "awslogs-stream-prefix": "ecs"
+        }
+      },
+      "healthCheck": {
+        "command": ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:3000/v1/health-check || exit 1"],
+        "interval": 30,
+        "timeout": 5,
+        "retries": 3,
+        "startPeriod": 60
+      }
+    }
+  ]
+}

.dockerignore

@@ -0,0 +1,16 @@
+node_modules
+npm-debug.log
+dist
+.git
+.gitignore
+.env
+.env.local
+.env.*.local
+README.md
+.vscode
+.DS_Store
+downloads
+docs
+*.log
+coverage
+.nyc_output

.github/workflows/deploy-ecs.yml

@@ -0,0 +1,67 @@
+name: Deploy to Amazon ECS
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+
+env:
+  AWS_REGION: us-west-2                           # Set your AWS region
+  ECR_REPOSITORY: fiesta-api                      # Set your ECR repository name
+  ECS_SERVICE: fiesta-api-service                 # Set your ECS service name
+  ECS_CLUSTER: fiesta-api-cluster                 # Set your ECS cluster name
+  ECS_TASK_DEFINITION: .aws/task-definition.json  # Path to task definition
+  CONTAINER_NAME: fiesta-api                      # Container name in task definition
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v4
+      with:
+        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        aws-region: ${{ env.AWS_REGION }}
+
+    - name: Login to Amazon ECR
+      id: login-ecr
+      uses: aws-actions/amazon-ecr-login@v2
+
+    - name: Build, tag, and push image to Amazon ECR
+      id: build-image
+      env:
+        ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+        IMAGE_TAG: ${{ github.sha }}
+      run: |
+        # Build a docker container and push it to ECR
+        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
+        docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+        docker tag $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG $ECR_REGISTRY/$ECR_REPOSITORY:latest
+        docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
+        echo "image=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" >> $GITHUB_OUTPUT
+
+    - name: Fill in the new image ID in the Amazon ECS task definition
+      id: task-def
+      uses: aws-actions/amazon-ecs-render-task-definition@v1
+      with:
+        task-definition: ${{ env.ECS_TASK_DEFINITION }}
+        container-name: ${{ env.CONTAINER_NAME }}
+        image: ${{ steps.build-image.outputs.image }}
+
+    - name: Deploy Amazon ECS task definition
+      uses: aws-actions/amazon-ecs-deploy-task-definition@v2
+      with:
+        task-definition: ${{ steps.task-def.outputs.task-definition }}
+        service: ${{ env.ECS_SERVICE }}
+        cluster: ${{ env.ECS_CLUSTER }}
+        wait-for-service-stability: true

Dockerfile

@@ -0,0 +1,40 @@
+# Build stage
+FROM node:14-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install all dependencies (including devDependencies for build)
+RUN npm ci
+
+# Copy source code
+COPY . .
+
+# Build the application
+RUN npm run build
+
+# Production stage
+FROM node:14-alpine
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install only production dependencies
+RUN npm ci --production
+
+# Copy built application from builder stage
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/.platform ./.platform
+
+# Expose the port the app runs on (adjust if different)
+EXPOSE 3000
+
+# Set NODE_ENV to production
+ENV NODE_ENV=production
+
+# Start the application
+CMD ["npm", "start"]

src/v1/libs/es.ts

@@ -11,7 +11,7 @@ const _ = deepdash(lodash);
 const indexes = { MagIC: 'magic' };
 const usersIndex = 'er_users';
 const client = new Client({
-	node: process.env.ES_NODE,
+    node: process.env.OS_NODE,
 });
 
 function sleep(ms = 0) {

src/vNext/libs/es.ts

@@ -7,7 +7,7 @@ const _ = deepdash(lodash);
 
 const usersIndex = 'er_users';
 const client = new Client({
-	node: process.env.ES_NODE,
+    node: process.env.OS_NODE,
 });
 
 function sleep(ms = 0) {