chore: add VAPT-specific configuration

Author: dcshzj

.aws/deploy/backend-task-definition.vapt.json

@@ -0,0 +1,325 @@
+{
+  "containerDefinitions": [
+    {
+      "name": "backend",
+      "portMappings": [
+        {
+          "containerPort": 8081,
+          "hostPort": 8081,
+          "protocol": "tcp"
+        }
+      ],
+      "essential": true,
+      "environment": [
+        { "name": "ENV_TYPE", "value": "VAPT" },
+        {
+          "name": "DD_GIT_COMMIT_SHA",
+          "value": "<DD_COMMIT_SHA>"
+        },
+        {
+          "name": "DD_GIT_REPOSITORY_URL",
+          "value": "github.com/isomerpages/isomercms-backend"
+        },
+        { "name": "DD_DBM_PROPAGATION_MODE", "value": "full" }
+      ],
+      "mountPoints": [
+        {
+          "sourceVolume": "ggs-efs",
+          "containerPath": "/efs",
+          "readOnly": false
+        }
+      ],
+      "linuxParameters": {
+        "initProcessEnabled": true
+      },
+      "volumesFrom": [],
+      "secrets": [
+        {
+          "name": "AUTH_TOKEN_EXPIRY_DURATION_IN_MILLISECONDS",
+          "valueFrom": "STAGING_AUTH_TOKEN_EXPIRY_DURATION_IN_MILLISECONDS"
+        },
+        {
+          "name": "AWS_BACKEND_EB_ENV_NAME",
+          "valueFrom": "STAGING_AWS_BACKEND_EB_ENV_NAME"
+        },
+        { "name": "AWS_REGION", "valueFrom": "STAGING_AWS_REGION" },
+        { "name": "CLIENT_ID", "valueFrom": "VAPT_CLIENT_ID" },
+        { "name": "CLIENT_SECRET", "valueFrom": "VAPT_CLIENT_SECRET" },
+        {
+          "name": "CLOUDMERSIVE_API_KEY",
+          "valueFrom": "STAGING_CLOUDMERSIVE_API_KEY"
+        },
+        { "name": "COOKIE_DOMAIN", "valueFrom": "STAGING_COOKIE_DOMAIN" },
+        { "name": "DB_ACQUIRE", "valueFrom": "STAGING_DB_ACQUIRE" },
+        { "name": "DB_MAX_POOL", "valueFrom": "STAGING_DB_MAX_POOL" },
+        { "name": "DB_MIN_POOL", "valueFrom": "STAGING_DB_MIN_POOL" },
+        { "name": "DB_TIMEOUT", "valueFrom": "STAGING_DB_TIMEOUT" },
+        { "name": "DB_URI", "valueFrom": "VAPT_DB_URI" },
+        {
+          "name": "DD_AGENT_MAJOR_VERSION",
+          "valueFrom": "STAGING_DD_AGENT_MAJOR_VERSION"
+        },
+        { "name": "DD_ENV", "valueFrom": "VAPT_DD_ENV" },
+        {
+          "name": "DD_LOGS_INJECTION",
+          "valueFrom": "STAGING_DD_LOGS_INJECTION"
+        },
+        { "name": "DD_SERVICE", "valueFrom": "STAGING_DD_SERVICE" },
+        { "name": "DD_TAGS", "valueFrom": "STAGING_DD_TAGS" },
+        {
+          "name": "DD_TRACE_STARTUP_LOGS",
+          "valueFrom": "STAGING_DD_TRACE_STARTUP_LOGS"
+        },
+        {
+          "name": "E2E_TEST_GH_TOKEN",
+          "valueFrom": "STAGING_E2E_TEST_GH_TOKEN"
+        },
+        { "name": "E2E_TEST_REPO", "valueFrom": "STAGING_E2E_TEST_REPO" },
+        { "name": "E2E_TEST_SECRET", "valueFrom": "STAGING_E2E_TEST_SECRET" },
+        { "name": "EFS_VOL_PATH", "valueFrom": "STAGING_EFS_VOL_PATH" },
+        {
+          "name": "ENCRYPTION_SECRET",
+          "valueFrom": "STAGING_ENCRYPTION_SECRET"
+        },
+        {
+          "name": "FF_DEPRECATE_SITE_QUEUES",
+          "valueFrom": "STAGING_FF_DEPRECATE_SITE_QUEUES"
+        },
+        { "name": "FRONTEND_URL", "valueFrom": "VAPT_FRONTEND_URL" },
+        {
+          "name": "GGS_REPAIR_FORM_KEY",
+          "valueFrom": "STAGING_GGS_REPAIR_FORM_KEY"
+        },
+        {
+          "name": "GGS_EXPERIMENTAL_TRACKING_SITES",
+          "valueFrom": "STAGING_GGS_EXPERIMENTAL_TRACKING_SITES"
+        },
+        {
+          "name": "GITHUB_BUILD_ORG_NAME",
+          "valueFrom": "STAGING_GITHUB_BUILD_ORG_NAME"
+        },
+        {
+          "name": "GITHUB_BUILD_REPO_NAME",
+          "valueFrom": "STAGING_GITHUB_BUILD_REPO_NAME"
+        },
+        { "name": "GITHUB_ORG_NAME", "valueFrom": "STAGING_GITHUB_ORG_NAME" },
+        {
+          "name": "GROWTHBOOK_CLIENT_KEY",
+          "valueFrom": "STAGING_GROWTHBOOK_CLIENT_KEY"
+        },
+        {
+          "name": "INCOMING_QUEUE_URL",
+          "valueFrom": "STAGING_INCOMING_QUEUE_URL"
+        },
+        { "name": "JWT_SECRET", "valueFrom": "STAGING_JWT_SECRET" },
+        {
+          "name": "MAX_NUM_OTP_ATTEMPTS",
+          "valueFrom": "STAGING_MAX_NUM_OTP_ATTEMPTS"
+        },
+        {
+          "name": "MOCK_AMPLIFY_DOMAIN_ASSOCIATION_CALLS",
+          "valueFrom": "STAGING_MOCK_AMPLIFY_DOMAIN_ASSOCIATION_CALLS"
+        },
+        { "name": "MUTEX_TABLE_NAME", "valueFrom": "STAGING_MUTEX_TABLE_NAME" },
+        {
+          "name": "NETLIFY_ACCESS_TOKEN",
+          "valueFrom": "STAGING_NETLIFY_ACCESS_TOKEN"
+        },
+        { "name": "NODE_ENV", "valueFrom": "VAPT_NODE_ENV" },
+        { "name": "OTP_EXPIRY", "valueFrom": "STAGING_OTP_EXPIRY" },
+        { "name": "OTP_SECRET", "valueFrom": "STAGING_OTP_SECRET" },
+        {
+          "name": "OUTGOING_QUEUE_URL",
+          "valueFrom": "STAGING_OUTGOING_QUEUE_URL"
+        },
+        { "name": "POSTMAN_API_KEY", "valueFrom": "STAGING_POSTMAN_API_KEY" },
+        {
+          "name": "POSTMAN_SMS_CRED_NAME",
+          "valueFrom": "STAGING_POSTMAN_SMS_CRED_NAME"
+        },
+        {
+          "name": "REDIRECT_URI",
+          "valueFrom": "VAPT_REDIRECT_URI"
+        },
+        {
+          "name": "SESSION_SECRET",
+          "valueFrom": "STAGING_SESSION_SECRET"
+        },
+        { "name": "SGID_CLIENT_ID", "valueFrom": "VAPT_SGID_CLIENT_ID" },
+        {
+          "name": "SGID_CLIENT_SECRET",
+          "valueFrom": "VAPT_SGID_CLIENT_SECRET"
+        },
+        {
+          "name": "SGID_REDIRECT_URI",
+          "valueFrom": "VAPT_SGID_REDIRECT_URI"
+        },
+        {
+          "name": "SGID_PRIVATE_KEY",
+          "valueFrom": "VAPT_SGID_PRIVATE_KEY"
+        },
+        {
+          "name": "SITE_CLONE_FORM_KEY",
+          "valueFrom": "STAGING_SITE_CLONE_FORM_KEY"
+        },
+        {
+          "name": "SITE_CREATE_FORM_KEY",
+          "valueFrom": "STAGING_SITE_CREATE_FORM_KEY"
+        },
+        {
+          "name": "SITE_LAUNCH_DYNAMO_DB_TABLE_NAME",
+          "valueFrom": "STAGING_SITE_LAUNCH_DYNAMO_DB_TABLE_NAME"
+        },
+        {
+          "name": "SITE_LAUNCH_FORM_KEY",
+          "valueFrom": "STAGING_SITE_LAUNCH_FORM_KEY"
+        },
+        {
+          "name": "SITE_PASSWORD_SECRET_KEY",
+          "valueFrom": "STAGING_SITE_PASSWORD_SECRET_KEY"
+        },
+        {
+          "name": "VAPT_SSH_PUBLIC_KEY",
+          "valueFrom": "VAPT_SSH_PUBLIC_KEY"
+        },
+        {
+          "name": "VAPT_SSH_PRIVATE_KEY",
+          "valueFrom": "VAPT_SSH_PRIVATE_KEY"
+        },
+        {
+          "name": "STEP_FUNCTIONS_ARN",
+          "valueFrom": "STAGING_STEP_FUNCTIONS_ARN"
+        },
+        {
+          "name": "SYSTEM_GITHUB_TOKEN",
+          "valueFrom": "STAGING_SYSTEM_GITHUB_TOKEN"
+        },
+        {
+          "name": "UPTIME_ROBOT_API_KEY",
+          "valueFrom": "STAGING_UPTIME_ROBOT_API_KEY"
+        },
+        {
+          "name": "SITE_CHECKER_FORM_KEY",
+          "valueFrom": "STAGING_SITE_CHECKER_FORM_KEY"
+        },
+        {
+          "name": "SITE_AUDIT_LOGS_FORM_KEY",
+          "valueFrom": "STAGING_SITE_AUDIT_LOGS_FORM_KEY"
+        },
+        {
+          "name": "NOTIFY_SITE_COLLABORATORS_FORM_KEY",
+          "valueFrom": "STAGING_NOTIFY_SITE_COLLABORATORS_FORM_KEY"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/aws/elasticbeanstalk/cms-backend-vapt-application-alb/var/log/web.stdout.log",
+          "awslogs-region": "ap-southeast-1",
+          "awslogs-stream-prefix": "ecs"
+        }
+      }
+    },
+    {
+      "name": "dd-agent",
+      "image": "public.ecr.aws/datadog/agent:latest",
+      "portMappings": [
+        {
+          "containerPort": 8126,
+          "hostPort": 8126,
+          "protocol": "tcp"
+        }
+      ],
+      "essential": true,
+      "environment": [
+        {
+          "name": "TZ",
+          "value": "Asia/Singapore"
+        },
+        {
+          "name": "DD_APM_NON_LOCAL_TRAFFIC",
+          "value": "true"
+        },
+        {
+          "name": "ECS_FARGATE",
+          "value": "true"
+        },
+        {
+          "name": "DD_APM_ENABLED",
+          "value": "true"
+        },
+        {
+          "name": "DD_SITE",
+          "value": "datadoghq.com"
+        },
+        {
+          "name": "DD_ENV",
+          "value": "vapt"
+        },
+        {
+          "name": "DD_SERVICE",
+          "value": "isomer"
+        },
+        {
+          "name": "DD_TAGS",
+          "value": "team:isomer,service:isomer"
+        },
+        {
+          "name": "DD_AGENT_MAJOR_VERSION",
+          "value": "7"
+        },
+        {
+          "name": "DD_LOGS_INJECTION",
+          "value": "true"
+        },
+        {
+          "name": "DD_TRACE_STARTUP_LOGS",
+          "value": "true"
+        },
+        {
+          "name": "DD_API_KEY",
+          "value": "<DD_API_KEY>"
+        }
+      ],
+      "dockerLabels": {
+        "com.datadoghq.tags.env": "vapt",
+        "com.datadoghq.tags.service": "isomer",
+        "com.datadoghq.tags.version": "7",
+        "com.datadoghq.ad.check_names": "[\"postgres\"]",
+        "com.datadoghq.ad.init_configs": "[{}]",
+        "com.datadoghq.ad.instances": "[{\"dbm\": true, \"host\": \"<RDS_READER_ENDPOINT>\", \"port\": 5432, \"username\": \"datadog\", \"password\": \"<RDS_DATADOG_PASSWORD>\"}]"
+      },
+      "mountPoints": [],
+      "volumesFrom": [],
+      "secrets": [],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "isomer-infra-vapt/ecs/dd-agent",
+          "awslogs-region": "ap-southeast-1",
+          "awslogs-stream-prefix": "ecs"
+        }
+      }
+    }
+  ],
+  "family": "isomer-infra",
+  "networkMode": "awsvpc",
+  "volumes": [
+    {
+      "name": "ggs-efs",
+      "efsVolumeConfiguration": {
+        "fileSystemId": "<EFS_FILE_SYSTEM_ID>",
+        "rootDirectory": "/"
+      }
+    }
+  ],
+  "placementConstraints": [],
+  "runtimePlatform": {
+    "operatingSystemFamily": "LINUX"
+  },
+  "requiresCompatibilities": ["FARGATE"],
+  "taskRoleArn": "arn:aws:iam::<AWS_ACCOUNT_ID>:role/isomer-vapt-ecs-task-role",
+  "executionRoleArn": "arn:aws:iam::<AWS_ACCOUNT_ID>:role/isomer-vapt-ecs-task-exec-role",
+  "cpu": "1024",
+  "memory": "8192"
+}