Workflow test, don't merge

.github/workflows/check-yaml.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Install Pre-Commit
         run: pip install pre-commit
       - name: Run Pre-Commit

.github/workflows/test-cdk.yml

@@ -0,0 +1,33 @@
+name: Test CDK Demos Pipeline
+on:
+  push:
+    branches: ["**"]
+    paths: ["demos-pipeline/**", ".github/workflows/test-cdk.yml"]
+  pull_request:
+    branches: [master]
+    paths: ["demos-pipeline/**", ".github/workflows/test-cdk.yml"]
+jobs:
+  Run-CDK-Tests:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [16.x, 18.x, 20.x]
+        dir: ['demos-pipeline/lib', 'demos-pipeline/example']
+
+    defaults:
+      run:
+        working-directory: ${{ matrix.dir }}
+
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v3
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm ci
+      - run: npm run check
+      - run: npm run build --if-present
+      - name: Test ${{ matrix.dir }}
+        run: npm test

.gitignore

@@ -8,3 +8,5 @@ bucket-policy.json
 
 # In case you root the workspace in this directory:
 auto-upgrader/.vscode/
+/meta-aws-ci.iml
+/.idea/

demos-pipeline/example/.eslintignore

@@ -0,0 +1,3 @@
+npm_modules/
+dist/
+cdk.out/

demos-pipeline/example/.eslintrc.js

@@ -0,0 +1,22 @@
+module.exports = {
+  env: {
+    browser: true,
+    es2021: true,
+    node: true,
+    jest: true,
+  },
+  extends: [
+    "eslint:recommended",
+    "plugin:@typescript-eslint/recommended",
+    "plugin:prettier/recommended",
+  ],
+  overrides: [],
+  parser: "@typescript-eslint/parser",
+  parserOptions: {
+    ecmaVersion: "latest",
+    sourceType: "module",
+  },
+  plugins: ["@typescript-eslint"],
+  rules: {},
+  root: true,
+};

demos-pipeline/example/.gitignore

@@ -0,0 +1,8 @@
+node_modules
+dist
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+cdk.context.json

demos-pipeline/example/README.md

@@ -0,0 +1,26 @@
+# Meta-AWS CDK Library
+
+An AWS [Cloud Developer Toolkit](https://docs.aws.amazon.com/cdk/v2/guide/home.html) Library for building Yocto projects in AWS.
+
+## Quickstart
+
+Refer to [`docs/setup.md`](docs/setup.md)
+
+## Useful commands
+
+-   `npm run build` compile typescript to js
+-   `npm run watch` watch for changes and compile
+-   `npm run test` perform the jest unit tests
+-   `cdk deploy` deploy this stack to your default AWS account/region
+-   `cdk diff` compare deployed stack with current state
+-   `cdk synth` emits the synthesized CloudFormation template
+
+Project Specific:
+-   `npm run format` runs prettier and eslint on the repository
+-   `npm run zip-data` bundles the files for creating build host containers
+-   `npm run check` checks for lint and format issues
+-   `npm run docs` to generate documentation
+
+## Contributing
+
+TODO: Notes contribution process (pre-commit, running tests, formatting and test standards, etc)

demos-pipeline/example/bin/poky-pipeline.ts

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+import * as cdk from "aws-cdk-lib";
+import {
+  DemoPipelineStack,
+  RepoKind,
+  BuildImageDataStack,
+  BuildImagePipelineStack,
+  BuildImageRepoStack,
+  PipelineNetworkStack,
+  ImageKind,
+} from "aws4embeddedlinux-cdk-lib";
+
+const app = new cdk.App();
+
+/**
+ * User Data
+ */
+const env = {
+  account: process.env.CDK_DEFAULT_ACCOUNT,
+  region: process.env.CDK_DEFAULT_REGION,
+};
+
+/**
+ * Use these default props to enable termination protection and tag related AWS
+ * Resources for tracking purposes.
+ */
+const defaultProps: cdk.StackProps = {
+  tags: { PURPOSE: "META-AWS-BUILD" },
+  terminationProtection: false, // TODO: enable.
+  env,
+};
+
+/**
+ * Set up the Stacks that create our Build Host.
+ */
+const buildImageData = new BuildImageDataStack(app, "BuildImageData", {
+  ...defaultProps,
+  bucketName: `build-image-data-${env.account}-${env.region}`,
+});
+
+const buildImageRepo = new BuildImageRepoStack(app, "BuildImageRepo", {
+  ...defaultProps,
+});
+
+new BuildImagePipelineStack(app, "BuildImagePipeline", {
+  ...defaultProps,
+  dataBucket: buildImageData.bucket,
+  repository: buildImageRepo.repository,
+  imageKind: ImageKind.Ubuntu22_04,
+});
+
+/**
+ * Set up networking to allow us to securely attach EFS to our CodeBuild instances.
+ */
+const vpc = new PipelineNetworkStack(app, "PipelineNetwork", {
+  ...defaultProps,
+});
+
+/**
+ * Create a poky pipeline.
+ */
+new DemoPipelineStack(app, "PokyPipeline", {
+  ...defaultProps,
+  imageRepo: buildImageRepo.repository,
+  imageTag: ImageKind.Ubuntu22_04,
+  vpc: vpc.vpc,
+});
+
+/**
+ * Create a meta-aws-demos pipeline for the Qemu example.
+ */
+new DemoPipelineStack(app, "QemuDemoPipeline", {
+  ...defaultProps,
+  imageRepo: buildImageRepo.repository,
+  imageTag: ImageKind.Ubuntu22_04,
+  vpc: vpc.vpc,
+  layerKind: RepoKind.MetaAwsDemo,
+  layerRepoName: "qemu-demo-layer-repo",
+});
+
+/**
+ * Create a poky pipeline.
+ */
+// TODO(nateglims): implement
+// new DemoPipelineStack(app, "three-p-Pipeline", {
+//   ...defaultProps,
+//   imageRepo: buildImageRepo.repository,
+//   imageTag: ImageKind.Ubuntu22_04,
+//   vpc: vpc.vpc,
+// });

demos-pipeline/example/cdk.json

@@ -0,0 +1,51 @@
+{
+  "app": "npx ts-node --prefer-ts-exts bin/poky-pipeline.ts",
+  "poky-pipeline": "npx ts-node --prefer-ts-exts bin/poky-pipeline.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk-lib/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk-lib/core:checkSecretUsage": true,
+    "@aws-cdk-lib/core:target-partitions": ["aws", "aws-cn"],
+    "@aws-cdk-lib-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk-lib/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk-lib/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk-lib/aws-iam:minimizePolicies": true,
+    "@aws-cdk-lib/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk-lib/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk-lib/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk-lib/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk-lib/aws-apigateway:disableCloudWatchRole": true,
+    "@aws-cdk-lib/core:enablePartitionLiterals": true,
+    "@aws-cdk-lib/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk-lib/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk-lib/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk-lib/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk-lib/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk-lib/aws-route53-patters:useCertificate": true,
+    "@aws-cdk-lib/customresources:installLatestAwsSdkDefault": false,
+    "@aws-cdk-lib/aws-rds:databaseProxyUniqueResourceName": true,
+    "@aws-cdk-lib/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+    "@aws-cdk-lib/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk-lib/aws-ec2:launchTemplateDefaultUserData": true,
+    "@aws-cdk-lib/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+    "@aws-cdk-lib/aws-redshift:columnId": true,
+    "@aws-cdk-lib/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+    "@aws-cdk-lib/aws-ec2:restrictDefaultSecurityGroup": true,
+    "@aws-cdk-lib/aws-apigateway:requestValidatorUniqueId": true,
+    "@aws-cdk-lib/aws-kms:aliasNameRef": true,
+    "@aws-cdk-lib/core:includePrefixInUniqueNameGeneration": true
+  }
+}

demos-pipeline/example/docs/setup.md

@@ -0,0 +1,16 @@
+# Setting Up
+
+1. Run the following:
+
+```
+npm install .
+npm run build
+
+cdk bootstrap
+
+cdk deploy --all
+```
+
+Run the newly created pipeline `ubuntu_22_04BuildImagePipeline` from the CodePipeline console page to create the build host.
+
+After that completes, the DemoPipeline in the CodePipeline console page is ready to run.