feat: TT-509 Use terraform to provision ui infraestructure

.gitignore

@@ -55,3 +55,6 @@ Thumbs.db
 
 #ENV VARIABLES
 .env
+
+# Terraform files
+**/.terraform**

Dockerfile

@@ -37,6 +37,12 @@ RUN chown -R ${USERNAME}:${USERNAME} /var/cache/nginx && \
     chown -R ${USERNAME}:${USERNAME} /etc/nginx/conf.d
 RUN touch /var/run/nginx.pid && chown -R ${USERNAME}:${USERNAME} /var/run/nginx.pid
 
-USER ${USERNAME}
-
-EXPOSE 4200
+# FIXME: Actually if we can deploy to azure in port 80 we need a root user 
+# Maybe we can refactor this dockerfile to use root user directly this is not a good approach y 
+# security terms. It's a good practice to have rootless in containers so for this 
+# we can to refactor this dockerfile and the terraform module to deploy in other ports because 
+# Ports below 1024 needs root permisions.
+
+# USER ${USERNAME}
+
+EXPOSE 80

Makefile

@@ -27,11 +27,11 @@ logs: ## Show logs of timetracker_ui.
 
 .PHONY: stop
 stop: ## Stop container timetracker_ui.
-	docker-compose stop	
+	docker-compose stop
 
 .PHONY: restart
 restart: ## Restart container timetracker_ui.
-	docker-compose stop	
+	docker-compose stop
 	docker-compose up -d
 
 .PHONY: remove
@@ -44,17 +44,17 @@ test: ## Run all tests on docker container timetracker_ui.
 	docker exec -it timetracker_ui bash -c "npm run test"
 
 .PHONY: publish
-publish: ## Publish the container image timetracker_ui.
-	docker tag timetracker_ui:latest $(registry_url)/timetracker_ui:latest
-	docker push $(registry_url)/timetracker_ui:latest
+publish: require-acr-arg require-image_tag-arg ## Upload a docker image to the stage azure container registry acr=<name_of_the_azure_container_registry> image_tag=<tag_for_the_image>
+	docker tag timetracker_ui:latest $(acr).azurecr.io/timetracker_ui:$(image_tag)
+	docker push $(acr).azurecr.io/timetracker_ui:$(image_tag)
 
 .PHONY: build_prod
 build_prod: ## Create docker image with dependencies needed for production.
 	docker build --target production -t timetracker_ui_prod -f Dockerfile .
 
 .PHONY: run_prod
 run_prod: ## Execute timetracker_ui_prod docker container.
-	docker run -d -p 4200:4200 --name timetracker_ui_prod timetracker_ui_prod 
+	docker run -d -p 4200:4200 --name timetracker_ui_prod timetracker_ui_prod
 
 .PHONY: stop_prod
 stop_prod: ## Stop container timetracker_ui_prod.
@@ -66,10 +66,27 @@ remove_prod: ## Delete container timetracker_ui_prod.
 	docker rm timetracker_ui_prod
 
 .PHONY: publish_prod
-publish_prod: ## Publish the container image timetracker_ui_prod.
-	docker tag timetracker_ui_prod:latest $(registry_url)/timetracker_ui_prod:latest
-	docker push $(registry_url)/timetracker_ui_prod:latest
+publish_prod: require-acr-arg require-image_tag-arg ## Upload a docker image to the prod azure container registry acr=<name_of_the_azure_container_registry> image_tag=<tag_for_the_image>
+	docker tag timetracker_ui_prod:latest $(acr).azurecr.io/timetracker_ui:$(image_tag)
+	docker push $(acr).azurecr.io/timetracker_ui:$(image_tag)
 
 .PHONY: login
 login: ## Login in respository of docker images.
 	az acr login --name $(container_registry)
+
+.PHONY: release
+release: require-VERSION-arg require-COMMENT-arg ## Creates an pushes a new tag.
+	git tag -a ${VERSION} -m "${COMMENT}"
+	git push origin ${VERSION}
+
+require-%-arg:
+	@if [ -z ${${*}} ]; then \
+          echo "ERROR: [$*] argument is required, e.g. $*=<value>"; \
+          exit 1; \
+        fi
+
+require-%-tool:
+	@if [ "$(shell command -v ${*} 2> /dev/null)" = "" ]; then \
+          echo "ERROR: [$*] not found"; \
+          exit 1; \
+        fi

infrastructure/main.tf

@@ -0,0 +1,59 @@
+terraform {
+  required_version = "~> 1.1.2"
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 2.90"
+    }
+  }
+
+  backend "azurerm" {
+    resource_group_name  = "ioet-infra-tf-state"
+    storage_account_name = "timetrackertfstate"
+    container_name       = "time-tracker-tf-state"
+    key                  = "time-tracker-ui.tfstate"
+  }
+
+}
+
+provider "azurerm" {
+  features {}
+  skip_provider_registration = true
+}
+
+data "terraform_remote_state" "service" {
+  backend   = "azurerm"
+  workspace = terraform.workspace
+  config = {
+    resource_group_name  = "ioet-infra-tf-state"
+    storage_account_name = "timetrackertfstate"
+    container_name       = "time-tracker-tf-state"
+    key                  = "this.tfstate"
+  }
+}
+
+locals {
+  common_name             = "time-tracker-ui"
+  environment             = terraform.workspace
+  service_name            = "${local.common_name}-${local.environment}"
+  create_app_service_plan = true
+  service_plan_kind       = "Linux"
+  image_name       = "timetracker_ui"
+}
+
+module "ui" {
+  source                   = "[email protected]:ioet/infra-terraform-modules.git//azure-app-service?ref=tags/v0.0.5"
+  app_service_name         = local.service_name
+  create_app_service_plan  = local.create_app_service_plan
+  docker_image_name        = "${local.image_name}:${var.image_tag}"
+  docker_image_namespace   = data.terraform_remote_state.service.outputs.container_registry_login_server
+  docker_registry_password = data.terraform_remote_state.service.outputs.container_registry_admin_password
+  docker_registry_url      = data.terraform_remote_state.service.outputs.container_registry_login_server
+  docker_registry_username = data.terraform_remote_state.service.outputs.container_registry_admin_username
+  location                 = data.terraform_remote_state.service.outputs.container_registry_location
+  resource_group_name      = data.terraform_remote_state.service.outputs.resource_group_name
+  service_plan_kind        = local.service_plan_kind
+  service_plan_name        = local.service_name
+  service_plan_size        = var.service_plan_size
+  service_plan_tier        = var.service_plan_tier
+}

infrastructure/prod.tfvars

@@ -0,0 +1,2 @@
+service_plan_size = "S1"
+service_plan_tier = "Standard"

infrastructure/stage.tfvars

@@ -0,0 +1,2 @@
+service_plan_size = "S1"
+service_plan_tier = "Standard"

infrastructure/variables.tf

@@ -0,0 +1,17 @@
+variable "image_tag" {
+  type        = string
+  description = "Specifies the docker image tag that is stored in a private container registry like ACR (Azure Container Registry)."
+  sensitive   = true
+}
+
+variable "service_plan_size" {
+  default     = "S1"
+  type        = string
+  description = "Specifies the size of the service plan. This variable format is: Tier (letter) + Size (number). Size could be: 1 = Small (1 Core 1.75GB RAM), 2 = Medium (2 Core 3.5 GB RAM), 3 = Large (4 Core 7GB RAM)"
+}
+
+variable "service_plan_tier" {
+  default     = "Standard"
+  type        = string
+  description = "Specifies the tier of the service plan. Tier is the pricing plan of the service plan resource."
+}

nginx.conf

@@ -1,5 +1,5 @@
 server {
-    listen   4200;
+    listen   80;
 
     root /usr/share/nginx/html;
     index index.html;
@@ -9,4 +9,4 @@ server {
     location / {
         try_files $uri /index.html;
     }
-}
+}