Jon Chery
e1be05287b
---ci--- project: acdl phase: 39 milestone: v1.9 status: execute ---/ci--- Phase 39 — design-doc-refresh-and-p1-1-parameterization: Design docs (REQ-100, REQ-101): - hitl_matrix_design.md: 'dev-only spike'/'v1.2 wires the gates' framing replaced with v1.9 wired-gates reality; 8-concern matrix marked implemented (offline-testable subset + signed evidence artifacts, D-084); v1.9 wiring section cross-references hitl_gates.py + attestation_matrix.py; approver_dr noted. - audit_ledger_design.md: outbox marked shipped+production since v1.8; S3 Object Lock + JWS + async worker + DLQ + daily checkpoints clearly labeled 'Deferred to a future milestone (D-083)'; RPO/RTO table updated; approver fields note v1.9 hitl_gates.attest. P1-1 adapter parameterization (REQ-102, D-085): - ecs-service interface.json: desired_count (default 1), launch_type (FARGATE), family (app) inputs added. - alb interface.json: load_balancer_type (application), target_type (ip). - adapter.py: hardcoded defaults replaced with inputs.get(<name>, <default>); hardcoded 'acdl-microservice-rt'/'acdl-microservice-igw' Name tags derive from the VPC name input. - contract_resolver.py: child_input_map routes wires to the sub-resource that declares the input (desired_count → aws:ecs:service, family → aws:ecs:task_definition, target_type → targetgroup, etc.). - microservice composition.json: wires added for the new inputs. Tests: +21 (test_p1_1_adapter_parameterization.py, test_design_docs_current.py). 371 passed; run_ci.sh green; run_platform.sh --check-only green; v1.1 S3 regression preserved.
104 lines
2.9 KiB
JSON
104 lines
2.9 KiB
JSON
{
|
|
"name": "alb",
|
|
"version": "1.0.0",
|
|
"kind": "l1",
|
|
"type": "aws:elbv2:loadbalancer",
|
|
"description": "Application Load Balancer primitive (substrate-agnostic stack types aws:elbv2:loadbalancer + aws:elbv2:listener + aws:elbv2:targetgroup; the Terraform adapter translates to aws_lb/aws_lb_listener/aws_lb_target_group).",
|
|
"inputs": {
|
|
"name": {
|
|
"type": "string",
|
|
"description": "Name tag for the load balancer and child resources.",
|
|
"required": true
|
|
},
|
|
"subnets": {
|
|
"type": "string",
|
|
"description": "Comma-separated subnet ids (ref to vpc).",
|
|
"required": true
|
|
},
|
|
"security_group": {
|
|
"type": "string",
|
|
"description": "Security group id for the load balancer.",
|
|
"required": true
|
|
},
|
|
"port": {
|
|
"type": "number",
|
|
"description": "Listener port (default 80).",
|
|
"required": false,
|
|
"default": 80
|
|
},
|
|
"protocol": {
|
|
"type": "string",
|
|
"description": "Listener protocol (default HTTP).",
|
|
"required": false,
|
|
"default": "HTTP"
|
|
},
|
|
"region": {
|
|
"type": "string",
|
|
"description": "AWS region the load balancer is created in.",
|
|
"required": true
|
|
},
|
|
"load_balancer_type": {
|
|
"type": "string",
|
|
"description": "Load balancer type (application or network).",
|
|
"required": false,
|
|
"default": "application"
|
|
},
|
|
"target_type": {
|
|
"type": "string",
|
|
"description": "Target group target type (ip or instance).",
|
|
"required": false,
|
|
"default": "ip"
|
|
}
|
|
},
|
|
"outputs": {
|
|
"lb_arn": {
|
|
"type": "arn",
|
|
"description": "The load balancer ARN."
|
|
},
|
|
"listener_arn": {
|
|
"type": "arn",
|
|
"description": "The listener ARN."
|
|
},
|
|
"target_group_arn": {
|
|
"type": "arn",
|
|
"description": "The target group ARN."
|
|
}
|
|
},
|
|
"nfrs": {
|
|
"encryption_enabled": {
|
|
"type": "boolean",
|
|
"description": "Enable TLS/HTTPS encryption in transit.",
|
|
"default": true
|
|
},
|
|
"tls_enabled": {
|
|
"type": "boolean",
|
|
"description": "Enable TLS listener.",
|
|
"default": true
|
|
},
|
|
"deletion_protection": {
|
|
"type": "boolean",
|
|
"description": "Prevent resource destruction via Terraform lifecycle prevent_destroy",
|
|
"default": true
|
|
}
|
|
},
|
|
"resources": [
|
|
{
|
|
"type": "aws:elbv2:loadbalancer",
|
|
"description": "Application load balancer in the VPC subnets.",
|
|
"inputs": ["name", "subnets", "security_group", "load_balancer_type"],
|
|
"outputs": ["lb_arn"]
|
|
},
|
|
{
|
|
"type": "aws:elbv2:targetgroup",
|
|
"description": "Target group for the ECS service tasks.",
|
|
"inputs": ["name", "port", "protocol", "vpc_id", "target_type"],
|
|
"outputs": ["target_group_arn"]
|
|
},
|
|
{
|
|
"type": "aws:elbv2:listener",
|
|
"description": "Listener forwarding the LB port to the target group.",
|
|
"inputs": ["lb_arn", "port", "protocol", "target_group_arn"],
|
|
"outputs": ["listener_arn"]
|
|
}
|
|
]
|
|
} |