Added CDK deployment strategy (Netflix#9152)

* Added CDK deployment strategy

* Fixed typo in error handling

* Pylint doesn't like using e as a variable name

* Update .pre-commit-config.yaml

* Fixed exclude configu.yaml

* Excluded file from prettier

* Correctly ignored prettier config yaml

* Addressing some minor issues

* Allow deploying without specifying spoke accounts ; correct ConsoleMe case for resource names and descriptions

* Updated user role creator statement

* Docker image configurable to build current branch

* Updated documentation for recommended deployment

* Fixed linter comments

* Elaborated regarding configuration parameters

* Fixed config file typo in the README

* Fixed physical resource ids

* Dropped support for credential plugin to simplify flow for now

* Fixed physical resource ids

* Fixed physical resource ids

* Fixed get main account from configuration file

* Linter stuff

Co-authored-by: Curtis <[email protected]>
Co-authored-by: ConsoleMe <[email protected]>

.dockerignore

@@ -25,6 +25,12 @@ wheels/
 *.egg
 MANIFEST
 
+# Deployment
+terraform/
+cdk/
+packer/
+cdk.out
+
 # PyInstaller
 # Usually these files are written by a python script from a template
 # before PyInstaller builds the exe, so as to inject date/other infos into it.

.gitignore

@@ -1,11 +1,12 @@
 ### Terraform ###
-# Local .terraform directories
+# Local deployment directories (.terraform, cdk)
 **/.terraform/*
 *.tfstate
 *.tfstate.*
 crash.log
 terraform.tfvars
 state.tf
+cdk.out/
 consoleme.tar.gz
 consoleme.zip
 
@@ -139,4 +140,4 @@ consoleme.tar.gz
 
 # Config
 consoleme.yaml
-
+cdk/config.yaml

.isort.cfg

@@ -1,6 +1,6 @@
 [settings]
 known_first_party=consoleme,consoleme_default_plugins
-known_third_party = aiozipkin,asgiref,atlassian,bcrypt,billiard,bleach,boto3,botocore,celery,click,click_log,cloudaux,cryptography,dateutil,deepdiff,ed25519,elasticsearch,email_validator,furl,git,google,googleapiclient,jsonschema,jwt,logmatic,marshmallow,mock,mockredis,moto,okta_jwt,onelogin,pandas,parliament,password_strength,pip,pkg_resources,policy_sentry,policyuniverse,pydantic,pytest,pytz,questionary,redis,redislite,requests,retrying,ruamel,sentry_sdk,setuptools,simplejson,tenacity,tornado,ujson,uvloop,validate_email,yaml
+known_third_party = aiozipkin,asgiref,atlassian,aws_cdk,bcrypt,billiard,bleach,boto3,botocore,celery,cfnresponse,click,click_log,cloudaux,constants,cryptography,dateutil,deepdiff,ed25519,elasticsearch,email_validator,furl,git,google,googleapiclient,jsonschema,jwt,logmatic,marshmallow,mock,mockredis,moto,nested_stacks,okta_jwt,onelogin,pandas,parliament,password_strength,pip,pkg_resources,policy_sentry,policyuniverse,pydantic,pytest,pytz,questionary,redis,redislite,requests,retrying,ruamel,sentry_sdk,setuptools,simplejson,tenacity,tornado,ujson,uvloop,validate_email,yaml
 multi_line_output=3
 include_trailing_comma=True
 balanced_wrapping=True

.pre-commit-config.yaml

@@ -7,6 +7,7 @@ repos:
  - id: check-ast
  - id: check-case-conflict
  - id: check-yaml
+ exclude: "cdk/resources/create_config_lambda/config.yaml"
  - repo: https://gitlab.com/pycqa/flake8
  rev: 3.8.4
  hooks:

.prettierignore

@@ -1,2 +1,5 @@
 # Ignore all HTML files:
-*.html
+*.html
+
+# Ignore config lambda yaml file:
+cdk/resources/create_config_lambda/config.yaml

cdk/Pipfile

@@ -0,0 +1,12 @@
+[[source]]
+url = 'https://pypi.python.org/simple'
+verify_ssl = true
+
+[dev-packages]
+consoleme_ecs_service = {editable = true,path = "cdk"}
+
+[packages]
+boto3 = "*"
+
+[requires]
+python_version = "3"