app.py

from os import environ

import aws_cdk as cdk

from src.ecs_stack import EcsStack
from src.load_balancer_stack import LoadBalancerStack
from src.network_stack import NetworkStack
from src.service_props import ServiceProps, ServiceSecret
from src.service_stack import LoadBalancedServiceStack, ServiceStack

# get the environment and set environment specific variables
VALID_ENVIRONMENTS = ["dev", "stage", "prod"]
environment = environ.get("ENV")
match environment:
    case "prod":
        environment_variables = {
            "VPC_CIDR": "10.254.194.0/24",
            "FQDN": "prod.schematic.io",
            "CERTIFICATE_ARN": "arn:aws:acm:us-east-1:878654265857:certificate/d11fba3c-1957-48ba-9be0-8b1f460ee970",
            "TAGS": {"CostCenter": "NO PROGRAM / 000000"},
            "SCHEMATIC_CONTAINER_LOCATION": "ghcr.io/sage-bionetworks/schematic:v24.11.2",
        }
    case "stage":
        environment_variables = {
            "VPC_CIDR": "10.254.193.0/24",
            "FQDN": "stage.schematic.io",
            "CERTIFICATE_ARN": "arn:aws:acm:us-east-1:878654265857:certificate/d11fba3c-1957-48ba-9be0-8b1f460ee970",
            "TAGS": {"CostCenter": "NO PROGRAM / 000000"},
            "SCHEMATIC_CONTAINER_LOCATION": "ghcr.io/sage-bionetworks/schematic:v24.12.1-rc",
        }
    case "dev":
        environment_variables = {
            "VPC_CIDR": "10.254.192.0/24",
            "FQDN": "dev.schematic.io",
            "CERTIFICATE_ARN": "arn:aws:acm:us-east-1:631692904429:certificate/0e9682f6-3ffa-46fb-9671-b6349f5164d6",
            "TAGS": {"CostCenter": "NO PROGRAM / 000000"},
            "SCHEMATIC_CONTAINER_LOCATION": "ghcr.io/sage-bionetworks/schematic:v24.12.1-rc",
        }
    case _:
        valid_envs_str = ",".join(VALID_ENVIRONMENTS)
        raise SystemExit(
            f"Must set environment variable `ENV` to one of {valid_envs_str}. Currently set to {environment}."
        )

stack_name_prefix = f"schematic-{environment}"
environment_tags = environment_variables["TAGS"]

# Define stacks
cdk_app = cdk.App()

# recursively apply tags to all stack resources
if environment_tags:
    for key, value in environment_tags.items():
        cdk.Tags.of(cdk_app).add(key, value)

network_stack = NetworkStack(
    cdk_app, f"{stack_name_prefix}-network", environment_variables["VPC_CIDR"]
)

ecs_stack = EcsStack(
    cdk_app,
    f"{stack_name_prefix}-ecs",
    network_stack.vpc,
    environment_variables["FQDN"],
)

# From AWS docs https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect-concepts-deploy.html
# The public discovery and reachability should be created last by AWS CloudFormation, including the frontend
# client service. The services need to be created in this order to prevent an time period when the frontend
# client service is running and available the public, but a backend isn't.
load_balancer_stack = LoadBalancerStack(
    scope=cdk_app,
    construct_id=f"{stack_name_prefix}-load-balancer",
    vpc=network_stack.vpc,
    idle_timeout_seconds=300,
)

telemetry_environment_variables = {
    "TRACING_EXPORT_FORMAT": "otlp",
    "LOGGING_EXPORT_FORMAT": "otlp",
    "TRACING_SERVICE_NAME": "schematic",
    "LOGGING_SERVICE_NAME": "schematic",
    "DEPLOYMENT_ENVIRONMENT": environment,
    "OTEL_EXPORTER_OTLP_ENDPOINT": "http://otel-collector:4318",
}

app_service_props = ServiceProps(
    container_name="schematic-app",
    container_location=environment_variables["SCHEMATIC_CONTAINER_LOCATION"],
    container_port=443,
    container_memory=4096,
    container_env_vars=telemetry_environment_variables,
    container_secrets=[
        ServiceSecret(
            secret_name=f"{stack_name_prefix}-DockerFargateStack/{environment}/ecs",
            environment_key="SECRETS_MANAGER_SECRETS",
        )
    ],
    auto_scale_min_capacity=3,
    auto_scale_max_capacity=5,
)

app_service_stack = LoadBalancedServiceStack(
    cdk_app,
    f"{stack_name_prefix}-app",
    network_stack.vpc,
    ecs_stack.cluster,
    app_service_props,
    load_balancer_stack.alb,
    environment_variables["CERTIFICATE_ARN"],
    health_check_path="/health",
    health_check_interval=5,
)

app_service_props_otel_collector = ServiceProps(
    container_name="otel-collector",
    container_port=4318,
    container_memory=512,
    container_location="ghcr.io/sage-bionetworks/sage-otel-collector:0.0.1",
    container_secrets=[
        ServiceSecret(
            secret_name=f"{stack_name_prefix}-DockerFargateStack/{environment}/opentelemetry-collector-configuration",
            environment_key="CONFIG_CONTENT",
        )
    ],
    container_command=["--config", "env:CONFIG_CONTENT"],
    container_healthcheck=cdk.aws_ecs.HealthCheck(command=["CMD", "/healthcheck"]),
)

app_service_stack_otel_collector = ServiceStack(
    scope=cdk_app,
    construct_id=f"{stack_name_prefix}-otel-collector",
    vpc=network_stack.vpc,
    cluster=ecs_stack.cluster,
    props=app_service_props_otel_collector,
)

cdk_app.synth()