feat: Fargate

packages/api/src/adapter-aws/AwsCodeBuildAdapter.ts

@@ -50,12 +50,23 @@ export class AwsCodeBuildAdapter implements CloudServiceAdapter {
         const image = optional(input.values.environmentImage) ?? 'aws/codebuild/standard:7.0'
         const computeType = optional(input.values.computeType) ?? ComputeType.BUILD_GENERAL1_SMALL
         if (computeType !== ComputeType.BUILD_GENERAL1_SMALL) throw new ValidationError('computeType must be BUILD_GENERAL1_SMALL')
+        const sourceType = supportedType(input.values.sourceType, 'sourceType', 'NO_SOURCE')
+        const artifactsType = supportedType(input.values.artifactsType, 'artifactsType', 'NO_ARTIFACTS')
+        const ecrRepository = required(input.values.ecrRepository, 'ecrRepository')
+        if (optional(input.values.dockerPrivilegedMode) !== 'enabled') throw new ValidationError('dockerPrivilegedMode must be enabled')
+        const buildspec = optional(input.values.buildspec)
+        const source = sourceType === 'S3'
+            ? {type: 'S3' as const, location: s3Location(input.values.sourceBucket, input.values.sourceKey, 'source'), buildspec}
+            : {type: 'NO_SOURCE' as const, buildspec}
+        const artifacts = artifactsType === 'S3'
+            ? {type: 'S3' as const, location: s3Bucket(input.values.artifactsBucket, 'artifactsBucket'), path: optional(input.values.artifactsPrefix)}
+            : {type: 'NO_ARTIFACTS' as const}
         const response = await this.client.send(new CreateProjectCommand({
             name,
             serviceRole,
-            source: {type: 'NO_SOURCE'},
-            artifacts: {type: 'NO_ARTIFACTS'},
-            environment: {type: 'LINUX_CONTAINER', image, computeType},
+            source,
+            artifacts,
+            environment: {type: 'LINUX_CONTAINER', image, computeType, privilegedMode: true, environmentVariables: [{name: 'ECR_REPOSITORY', value: ecrRepository}]},
         }))
         if (!response.project) throw new RuntimeError(`CodeBuild did not return project ${name}`)
         return toResource(response.project)
@@ -69,6 +80,7 @@ export class AwsCodeBuildAdapter implements CloudServiceAdapter {
         const response = await this.client.send(new StartBuildCommand({
             projectName,
             environmentVariablesOverride: input.environmentVariablesOverride,
+            buildspecOverride: input.buildspecOverride,
         }))
         if (!response.build) throw new RuntimeError(`CodeBuild did not return a build for ${projectName}`)
         return toBuild(response.build)
@@ -122,6 +134,8 @@ function toResource(project: Project): CloudResource {
             environmentType: project.environment?.type,
             environmentImage: project.environment?.image,
             computeType: project.environment?.computeType,
+            dockerPrivilegedMode: project.environment?.privilegedMode ?? false,
+            ecrRepository: project.environment?.environmentVariables?.find((variable) => variable.name === 'ECR_REPOSITORY')?.value,
         },
     }
 }
@@ -147,6 +161,26 @@ function optional(value: unknown): string | undefined {
     return typeof value === 'string' && value.trim() ? value.trim() : undefined
 }
 
+function supportedType(value: unknown, field: string, fallback: 'S3' | 'NO_SOURCE' | 'NO_ARTIFACTS'): 'S3' | 'NO_SOURCE' | 'NO_ARTIFACTS' {
+    const type = optional(value) ?? fallback
+    if (type !== 'S3' && type !== 'NO_SOURCE' && type !== 'NO_ARTIFACTS') {
+        throw new ValidationError(field === 'sourceType' ? 'sourceType must be S3 or NO_SOURCE' : 'artifactsType must be S3 or NO_ARTIFACTS')
+    }
+    if (field === 'sourceType' && type === 'NO_ARTIFACTS') throw new ValidationError('sourceType must be S3 or NO_SOURCE')
+    if (field === 'artifactsType' && type === 'NO_SOURCE') throw new ValidationError('artifactsType must be S3 or NO_ARTIFACTS')
+    return type
+}
+
+function s3Location(bucket: unknown, key: unknown, field: string): string {
+    return `${s3Bucket(bucket, `${field}Bucket`)}/${required(key, `${field}Key`)}`
+}
+
+function s3Bucket(value: unknown, field: string): string {
+    const bucket = required(value, field)
+    if (!/^[a-z0-9](?:[a-z0-9.-]{1,61}[a-z0-9])?$/.test(bucket)) throw new ValidationError(`${field} must be a valid S3 bucket name`)
+    return bucket
+}
+
 function regionFromArn(arn?: string): string | null {
     return arn?.split(':')[3] || null
 }