Jon Chery
e1be05287b
---ci--- project: acdl phase: 39 milestone: v1.9 status: execute ---/ci--- Phase 39 — design-doc-refresh-and-p1-1-parameterization: Design docs (REQ-100, REQ-101): - hitl_matrix_design.md: 'dev-only spike'/'v1.2 wires the gates' framing replaced with v1.9 wired-gates reality; 8-concern matrix marked implemented (offline-testable subset + signed evidence artifacts, D-084); v1.9 wiring section cross-references hitl_gates.py + attestation_matrix.py; approver_dr noted. - audit_ledger_design.md: outbox marked shipped+production since v1.8; S3 Object Lock + JWS + async worker + DLQ + daily checkpoints clearly labeled 'Deferred to a future milestone (D-083)'; RPO/RTO table updated; approver fields note v1.9 hitl_gates.attest. P1-1 adapter parameterization (REQ-102, D-085): - ecs-service interface.json: desired_count (default 1), launch_type (FARGATE), family (app) inputs added. - alb interface.json: load_balancer_type (application), target_type (ip). - adapter.py: hardcoded defaults replaced with inputs.get(<name>, <default>); hardcoded 'acdl-microservice-rt'/'acdl-microservice-igw' Name tags derive from the VPC name input. - contract_resolver.py: child_input_map routes wires to the sub-resource that declares the input (desired_count → aws:ecs:service, family → aws:ecs:task_definition, target_type → targetgroup, etc.). - microservice composition.json: wires added for the new inputs. Tests: +21 (test_p1_1_adapter_parameterization.py, test_design_docs_current.py). 371 passed; run_ci.sh green; run_platform.sh --check-only green; v1.1 S3 regression preserved.
120 lines
3.4 KiB
JSON
120 lines
3.4 KiB
JSON
{
|
|
"name": "ecs-service",
|
|
"version": "1.0.0",
|
|
"kind": "l1",
|
|
"type": "aws:ecs:task_definition",
|
|
"description": "ECS Fargate service primitive (substrate-agnostic stack types aws:ecs:task_definition + aws:ecs:service; the Terraform adapter translates to aws_ecs_task_definition/aws_ecs_service).",
|
|
"inputs": {
|
|
"image": {
|
|
"type": "string",
|
|
"description": "ECR image URL for the task container.",
|
|
"required": true
|
|
},
|
|
"port": {
|
|
"type": "number",
|
|
"description": "Container port the service listens on.",
|
|
"required": true
|
|
},
|
|
"cpu": {
|
|
"type": "number",
|
|
"description": "Task CPU units (Fargate).",
|
|
"required": false,
|
|
"default": 256
|
|
},
|
|
"memory": {
|
|
"type": "number",
|
|
"description": "Task memory (MiB, Fargate).",
|
|
"required": false,
|
|
"default": 512
|
|
},
|
|
"env": {
|
|
"type": "string",
|
|
"description": "Environment variables as a JSON map string (optional).",
|
|
"required": false
|
|
},
|
|
"cluster_arn": {
|
|
"type": "arn",
|
|
"description": "ECS cluster ARN (ref to ecs-cluster).",
|
|
"required": true
|
|
},
|
|
"subnets": {
|
|
"type": "string",
|
|
"description": "Comma-separated subnet ids (ref to vpc).",
|
|
"required": true
|
|
},
|
|
"security_group": {
|
|
"type": "string",
|
|
"description": "Security group id for the service ENIs.",
|
|
"required": true
|
|
},
|
|
"lb_target_group_arn": {
|
|
"type": "arn",
|
|
"description": "Optional ALB target group ARN (ref to alb).",
|
|
"required": false
|
|
},
|
|
"region": {
|
|
"type": "string",
|
|
"description": "AWS region the service is created in.",
|
|
"required": true
|
|
},
|
|
"kms_key_arn": {
|
|
"type": "string",
|
|
"description": "ARN of the CMK for CloudWatch log group encryption; if absent, uses managed key.",
|
|
"required": false
|
|
},
|
|
"desired_count": {
|
|
"type": "number",
|
|
"description": "Desired number of ECS task replicas (Fargate).",
|
|
"required": false,
|
|
"default": 1
|
|
},
|
|
"launch_type": {
|
|
"type": "string",
|
|
"description": "ECS launch type (FARGATE or EC2).",
|
|
"required": false,
|
|
"default": "FARGATE"
|
|
},
|
|
"family": {
|
|
"type": "string",
|
|
"description": "ECS task definition family name.",
|
|
"required": false,
|
|
"default": "app"
|
|
}
|
|
},
|
|
"outputs": {
|
|
"service_arn": {
|
|
"type": "arn",
|
|
"description": "The ECS service ARN."
|
|
},
|
|
"task_def_arn": {
|
|
"type": "arn",
|
|
"description": "The ECS task definition ARN."
|
|
}
|
|
},
|
|
"nfrs": {
|
|
"encryption_enabled": {
|
|
"type": "boolean",
|
|
"description": "Enable CloudWatch log group encryption.",
|
|
"default": true
|
|
},
|
|
"deletion_protection": {
|
|
"type": "boolean",
|
|
"description": "Prevent resource destruction via Terraform lifecycle prevent_destroy",
|
|
"default": true
|
|
}
|
|
},
|
|
"resources": [
|
|
{
|
|
"type": "aws:ecs:task_definition",
|
|
"description": "Fargate task definition; the adapter jsonencodes image/port/env into container_definitions.",
|
|
"inputs": ["image", "port", "cpu", "memory", "env", "family"],
|
|
"outputs": ["task_def_arn"]
|
|
},
|
|
{
|
|
"type": "aws:ecs:service",
|
|
"description": "Fargate service running the task definition in the cluster + subnets.",
|
|
"inputs": ["cluster_arn", "subnets", "security_group", "lb_target_group_arn", "desired_count", "launch_type"],
|
|
"outputs": ["service_arn"]
|
|
}
|
|
]
|
|
} |