AWS CODECOMMIT WITH ANSIBLE-(JUST FOR FUN AND PRACTICE.)

 Howdy?

 This article is only for practicing ansible and aws codecommit.
You might think this is automation drill?.

 In a real situation, codecommit repository will be created with our mouse's click and click, and ssh key and git credential by manually cause necessary codecommit repositories are very limited in most cases.

 Nonetheless, parts of this playbook yaml, such as "creating ssh keys" and "and applying that in local env" could be useful for our automation life.

 1. We should prepare aws-cli and ansible(python3) installation.

*aws cli)
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html

*ansible)
oyj@controller:~$ pip3 install virtualenv --user

oyj@controller:~$ virtualenv anbawscmmit
created virtual environment CPython3.6.9.final.0-64 in 391ms
  creator CPython3Posix(dest=/home/oyj/deploy_aws/anbawscmmit, clear=False, global=False)
  seeder FromAppData(download=False, pip=bundle, setuptools=bundle, wheel=bundle, via=copy, app_data_dir=/home/oyj/.local/share/virtualenv)
    added seed packages: pip==20.1.1, setuptools==47.2.0, wheel==0.34.2
  activators BashActivator,CShellActivator,FishActivator,PowerShellActivator,PythonActivator,XonshActivator
oyj@controller:~$ source anbawscmmit/bin/activate

oyj@controller:~$ source anbawscmmit/bin/activate
(anbawscmmit) oyj@controller:~$

(anbawscmmit) oyj@controller:~$ pip3 install ansible
Collecting ansible
  Downloading ansible-2.9.10.tar.gz (14.2 MB)
     |████████████████████████████████| 14.2 MB 306 kB/s
Collecting jinja2
  Using cached Jinja2-2.11.2-py2.py3-none-any.whl (125 kB)
Collecting PyYAML
....


(anbawscmmit) oyj@controller:~$ ansible --version
ansible 2.9.10
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/home/oyj/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/oyj/anbawscmmit/lib/python3.6/site-packages/ansible
  executable location = /home/oyj/anbawscmmit/bin/ansible
  python version = 3.6.9 (default, Apr 18 2020, 01:56:04) [GCC 8.4.0]



(anbawscmmit) oyj@controller:~/ansible-aws$ pip3 install boto3
Collecting boto3

#Until now it is ok.

2. Clone github repo , create aws codecommit repository and upload below node sources.

(anbawscmmit) oyj@controller:~/ansible-aws$ ls node_auth
app.js  appspec.yml  core  package.json  package-lock.json  public  routes  scripts  views

(anbawscmmit) oyj@controller:~$ git clone https://github.com/ohyoungjooung2/ansible-aws.git

Receiving objects: 100% (163/163), 13.87 MiB | 6.14 MiB/s, done.
Resolving deltas: 100% (74/74), done.


(anbawscmmit) oyj@controller:~$ cd ansible-aws/
#ansible playbook. All playbook codes are commented.

#As you see below, codecommit user is "cc_user",  ssh_key_name : "codecommit_key"..and so on.

(anbawscmmit) oyj@controller:~/ansible-aws$ cat create_user_cmmitrepo_upload_nodeauth_app.yaml | head -20
---
- hosts: localhost
  connection: local
  gather_facts: no

  vars:
    #Codecommit user
    user1: 'cc_user'
    REGION: 'ap-northeast-2'
    SSH_KEY_NAME: 'codecommit_key'
    LOCAL_HOME: "{{ lookup('env','HOME')}}"
    REPO_NAME: 'node_auth'
    SSH_GIT_URL: 'ssh://git-codecommit.{{ REGION }}.amazonaws.com/v1/repos/{{ REPO_NAME }}'
    #STATE: 'absent'
    STATE: 'present'

.......rest codes..


(anbawscmmit) oyj@controller:~/ansible-aws$ ansible-playbook create_user_cmmitrepo_upload_nodeauth_app.yaml
[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'

PLAY [localhost] ***********************************************************************************************************

TASK [Detach codecommit full permission to codecommit_user] ****************************************************************
skipping: [localhost] => (item=cc_user)

TASK [Delete cc_user] ******************************************************************************************************
skipping: [localhost] => (item=cc_user)

RUNNING HANDLER [git source commmit and upload to codecommit] **************************************************************
changed: [localhost]

PLAY RECAP *****************************************************************************************************************
localhost                  : ok=12   changed=8    unreachable=0    failed=0    skipped=4    rescued=0    ignored=0  
#OK!
(anbawscmmit) oyj@controller:~/ansible-aws$

#codecommit user cc_user created with ssh pub key.



#Below repository created.





 #The ssh config for codecommit repo created.
 (anbawscmmit) oyj@controller:~/ansible-aws$ cat ~/.ssh/config
Host git-codecommit.*.amazonaws.com
User APKAXGFYD7MIQPBPIHOG
IdentityFile /home/oyj/ansible-aws/codecommit_key



 #Test
 (anbawscmmit) oyj@controller:~/ansible-aws$ aws codecommit get-repository --repository-name node_auth
{
         "cloneUrlSsh": "ssh://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/node_auth",
        "Arn": "arn:aws:codecommit:ap-northeast-2:494307375889:node_auth"
    }
}
(anbawscmmit) oyj@controller:/tmp/testcmmit$ git clone https://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/node_auth
Cloning into 'node_auth'...
Username for 'https://git-codecommit.ap-northeast-2.amazonaws.com': ^C
(anbawscmmit) oyj@controller:/tmp/testcmmit$ git clone ssh://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/node_auth
Cloning into 'node_auth'...
remote: Counting objects: 31, done.
Receiving objects: 100% (31/31), 53.04 KiB | 6.63 MiB/s, done.
Resolving deltas: 100% (2/2), done.


#push test
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ touch testfile.txt
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ echo "test add file" > testfile.txt
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ git add testfile.txt
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ git commit -m "testing add file to cmmit"
[master 6c43b5e] testing add file to cmmit
 1 file changed, 1 insertion(+)
 create mode 100644 testfile.txt
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ git push
Counting objects: 3, done.
Delta compression using up to 8 threads.
Compressing objects: 100% (2/2), done.
Writing objects: 100% (3/3), 285 bytes | 285.00 KiB/s, done.
Total 3 (delta 1), reused 0 (delta 0)
To ssh://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/node_auth
   81ad1a2..6c43b5e  master -> master



#Test with another user.
A)Copy .ssh/config to another user's .ssh/config and change key location.

(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ sudo cp ~/.ssh/config /home/testcmit/.ssh/ -f

(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ sudo cp ~/ansible-aws/codecommit_key /home/testcmit/
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ sudo chown -R testcmit.testcmit /home/testcmit/
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$
#su -
(anbawscmmit) oyj@controller:/tmp/testcmmit/node_auth$ sudo su - testcmit
testcmit@controller:~$ vi ~/.ssh/config
Host git-codecommit.*.amazonaws.com
User APKAXGFYD7MIQPBPIHOG
IdentityFile /home/testcmit/codecommit_key


#Clone this repo!
testcmit@controller:~$ git clone ssh://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/node_auth

testcmit@controller:~/node_auth$ ls
app.js  appspec.yml  core  package.json  package-lock.json  public  routes  scripts  testfile.txt  views
testcmit@controller:~/node_auth$ cat testfile.txt
test add file


#Well it works!(Apache!)

#Lastly I will delete this codecommit repo with ansible(same playbook but different options)

#With "-e "STATE=absent"" option. We could all codecommit related things all at once.

(anbawscmmit) oyj@controller:~/ansible-aws$ ansible-playbook create_user_cmmitrepo_upload_nodeauth_app.yaml -e "STATE=absent"

TASK [Delete cc_user] ******************************************************************************************************
changed: [localhost] => (item=cc_user)

RUNNING HANDLER [git source commmit and upload to codecommit] **************************************************************
skipping: [localhost]

PLAY RECAP *****************************************************************************************************************
localhost                  : ok=10   changed=5    unreachable=0    failed=0    skipped=6    rescued=0    ignored=0 


Conclusion)
 With ansilbe, aws configuration could be very convenient and automatic with just one line command but lots of configuration and file works.

Thanks for reading!