-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathcodedeploy.tf
More file actions
58 lines (49 loc) · 1.79 KB
/
Copy pathcodedeploy.tf
File metadata and controls
58 lines (49 loc) · 1.79 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
########################################################
# CodeDeploy service role for Lambda
########################################################
resource "aws_iam_role" "codedeploy" {
count = var.codedeploy_enabled ? 1 : 0
name = "${var.function_name}-codedeploy"
assume_role_policy = data.aws_iam_policy_document.codedeploy_trust.json
}
data "aws_iam_policy_document" "codedeploy_trust" {
statement {
actions = ["sts:AssumeRole"]
principals {
type = "Service"
identifiers = ["codedeploy.amazonaws.com"]
}
}
}
resource "aws_iam_role_policy_attachment" "codedeploy_managed" {
count = var.codedeploy_enabled ? 1 : 0
role = aws_iam_role.codedeploy[0].name
policy_arn = "arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambda"
}
########################################################
# CodeDeploy application and deployment group
########################################################
resource "aws_codedeploy_app" "lambda" {
count = var.codedeploy_enabled ? 1 : 0
name = "${var.function_name}-app"
compute_platform = "Lambda"
}
resource "aws_codedeploy_deployment_group" "lambda" {
count = var.codedeploy_enabled ? 1 : 0
app_name = aws_codedeploy_app.lambda[0].name
deployment_group_name = "${var.function_name}-dgroup"
service_role_arn = aws_iam_role.codedeploy[0].arn
deployment_style {
deployment_type = "BLUE_GREEN"
deployment_option = "WITH_TRAFFIC_CONTROL"
}
# Built-in canary: shift 10% for 5 minutes, then 100%
deployment_config_name = "CodeDeployDefault.LambdaCanary10Percent5Minutes"
auto_rollback_configuration {
enabled = true
events = [
"DEPLOYMENT_FAILURE",
"DEPLOYMENT_STOP_ON_ALARM",
]
}
}