cookiecutter-icon-p-rep-simple

Scaffolding tool to automatically generate the neccesary files you need to run a one-click deployment of a P-Rep and Citizen nodes for the ICON Blockchain.

Requires AWS account with proper permissions.

Prerequisites

• Cookiecutter
  • pip install cookiecutter
• Ansible
  • pip install ansible
• Terraform
  • We suggest using tfswitch
    • Requires installing Go
  • Otherwise here are some options
    • Windows
      • Install chocolatey
      • From command prompt run choco install terraform
    • Mac
      • Install brew
      • brew install terraform
    • Linux
      • Figure it out
• Terragrunt
  • We suggest using tgswitch)
  • Install from source
  • Install
    • Windows
      • choco install terragrunt
    • Mac
      • brew install terragrunt

Preparation

• Run cookiecutter https://github.com/robc-io/cookiecutter-icon-p-rep-simple
• Enter options - You can save your options in a yaml file as documented below
• Export these keys
  • AWS_ACCESS_KEY_ID – Specifies an AWS access key associated with an IAM user or role.
  • AWS_SECRET_ACCESS_KEY – Specifies the secret key associated with the access key. This is essentially the "password" for the access key.
  • If you are using keys with aws profile, export the profile - export AWS_PROFILE=profile
• Ensure the IAM user provided has the AdministratorAccess role and no other policies are applied that explicitly deny

Applying

• Run cd <env> && chmod +x apply.sh && ./apply.sh
  • Might need to nudge it along by running terragrunt from within the directories or running apply twice
  • Sometimes there are errors with the content delivery system and various API calls
• Run chmod +x destroy.sh && ./destroy.sh to destroy the resources

Saving Config Values

It can be easier to set defaults in a yaml configuration file like this,

default_context:
    environment: "dev"
    region: "us-east-1"
    account_id: "987654321012"
    corporate_ip: "1.2.3.4"
    local_public_key: "full/path/to/.ssh/id_rsa.pub"
    local_private_key: "full/path/to/.ssh/id_rsa"
    keystore_path: "full/path/to/keystore"
    keystore_password: "scarystuff"

Then you just need to run cookiecutter like so,

cookiecutter --config-file=context.yaml https://github.com/robc-io/cookiecutter-icon-p-rep-simple

To suppress input run with additional flag --no-input flag:

cookiecutter --config-file=context.yaml https://github.com/robc-io/cookiecutter-icon-p-rep-simple --no-input

Notes

• Places where hard-codes exist
  • logging bucket - ok
  • global reference
    • Need to deal with this somehow
    • This is best practice to put IAM and other globally scoped resources in their own folder
    • This obviously is going to cause a lot of issues