ACK Test Infrastructure CDK

Useful commands

• npm run build compile typescript to js
• npm run watch watch for changes and compile
• npm run test perform the jest unit tests
• cdk deploy deploy this stack to your default AWS account/region
• cdk diff compare deployed stack with current state
• cdk synth emits the synthesized CloudFormation template

Deploying the CDK

To deploy the CDK stacks, you must have the appropriate permissions to create the CloudFormation stack and associated resources in a given AWS account.

You will also need to manually create and configure a GitHub app for Prow as documented here.

Once the GitHub app is configured, you will need three data elements from the app's settings page to pass to the CDK deployment:

• The app ID
• The app's private RSA key (in PEM format)
• The app's configured webhook secret
  • NOTE: you can generate a valid value for this using openssl rand -hex 20

Use the following command to deploy the stack with the included requirements:

export GITHUB_PAT=<your personal access token>
export GITHUB_APP_ID=<App ID from GH app settings>
export GITHUB_APP_PRIVATE_KEY=<GitHub app private RSA key in PEM format>
export GITHUB_APP_CLIENT_ID=<Client ID from GH app settings>
export GITHUB_APP_WEBHOOK_SECRET=<Webhook secret from GH app settings>
export LOGS_BUCKET=<S3 bucket name for logs> # Optional
export LOGS_BUCKET_IMPORT=false # NOTE: optional, use this and set to true if you want to import an existing bucket
export HOSTED_ZONE_ID=<Your Route53 HostedZone> # The hosted zone used for your cluster ingress domain

export AWS_DEFAULT_REGION=us-west-2

cd test-infra/infra
cdk bootstrap
cdk deploy

or, via command line arguments:

export AWS_DEFAULT_REGION=us-west-2

cd test-infra/infra
cdk bootstrap
cdk deploy --all \
           -c pat="<personal access token>" \
           -c app_id="<GitHub app ID>" \
           -c client_id="<GitHub app client ID>" \
           -c app_private_key="<GitHub app private RSA key in PEM format>" \
           -c app_webhook_secret="<GitHub app webhook secret>" \
           -c logs_bucket="<S3 bucket name for logs>" \
           -c logs_bucket_import=<true|false> \
           -c hosted_zone_id="<Route53 hostedzone ID>"

An example:

export AWS_DEFAULT_REGION=us-west-2
cd $GOPATH/src/github.com/aws-controllers-k8s/test-infra/infra
cdk bootstrap
cdk deploy --all -c pat="12345" -c app_id="123456" -c client_id="12345" \
    -c app_private_key="$(cat ./github_app_cert.pem)" \
    -c app_webhook_secret="081d23f783c016e91950c92a4fe4f87bfe61ca8b" \
    -c logs_bucket="ack-prow-logs-1234567890"
    -c hosted_zone_id="Z0123456789ABCDEFGHIJ"