ksaito1125/cloudformation-resource-type

镜像概述

这是一个为Concourse CI实现的最小化CloudFormation资源类型镜像，旨在帮助用户在Concourse流水线中集成AWS CloudFormation的操作，实现CloudFormation资源的自动化管理。

核心功能

• 支持在Concourse流水线中定义CloudFormation资源类型
• 实现Concourse资源必需的check、in、out操作逻辑
• 允许配置AWS区域、访问密钥、CA证书等参数
• 通过流水线put操作部署CloudFormation堆栈，支持指定堆栈名、模板文件及参数

使用场景

• 在Concourse CI流程中自动化AWS CloudFormation堆栈的创建、更新或删除
• 将CloudFormation资源管理集成到持续集成/持续部署（CI/CD） pipeline中，提升云资源部署效率

配置说明

资源类型与资源定义

在Concourse流水线配置文件中，按以下方式定义资源类型和资源：

yaml
resource_types:
  - name: cloudformation
    type: docker-image
    source:
      repository: ksaito1125/cloudformation-resource-type
      tag: work
resources:
  - name: test-concourse-1
    type: cloudformation
    source:
      region_name: ap-northeast-1
      access_key_id: {{aws_access_key_id}}
      secret_access_key: {{aws_secret_access_key}}
      cacert: http://www.iss.toshiba.co.jp/services/ss/ca/manual/certificate/toshibaca.cer

流水线put操作参数

在流水线的put步骤中，指定CloudFormation相关参数：

yaml
- put: test-concourse-1
  params:
    cloudformation_file: out/sg.yaml
    stack_name: test-concourse-1
    parameters:
      Port: 82
      Host: server1

容器构建与测试

使用以下命令进行镜像构建和功能测试：

bash
make test

测试执行示例：

bash
$ make test
docker build -t sample-resource-type .
Sending build context to Docker daemon   85.5kB
Step 1/2 : FROM alpine:3.7
 ---> 3fd9065eaf02
Step 2/2 : COPY assets /opt/resource
 ---> Using cache
 ---> 6f403114ce46
Successfully built 6f403114ce46
Successfully tagged sample-resource-type:latest
docker run -it --rm docker.xuanyuan.run/sample-resource-type sh -c "echo aaa | /opt/resource/check"
[
  { "ref": "61cbef" },
  { "ref": "d74e01" },
  { "ref": "7154fe" }
]
docker run -it --rm docker.xuanyuan.run/sample-resource-type sh -c "echo aaa | /opt/resource/in"
{
  "version": { "ref": "61cebf" },
  "metadata": [
    { "name": "commit", "value": "61cebf" },
    { "name": "author", "value": "Hulk Hogan" }
  ]
}
docker run -it --rm docker.xuanyuan.run/sample-resource-type sh -c "echo aaa | /opt/resource/out"
{
  "version": { "ref": "61cebf" },
  "metadata": [
    { "name": "commit", "value": "61cebf" },
    { "name": "author", "value": "Mick Foley" }
  ]
}
$

Concourse流水线测试

将镜像推送到DockerHub后，通过以下命令在Concourse中测试流水线：

bash
make it

执行示例：

bash
$ make it
fly -t test set-pipeline -n -p sample-resource-type -c pipeline.yaml
configuration updated
fly -t test unpause-pipeline -p sample-resource-type
unpaused 'sample-resource-type'
fly -t test trigger-job -w -j sample-resource-type/sample
started sample-resource-type/sample #9

succeeded
fly -t test intercept -j sample-resource-type/sample sh
1: build #8, step: sample-resource, type: put
2: build #9, step: sample-resource, type: get
3: build #9, step: sample-resource, type: put
choose a container: