Argo jenkins exam

.devcontainer/Dockerfile

@@ -0,0 +1,3 @@
+
+ARG VARIANT="latest"
+FROM mcr.microsoft.com/vscode/devcontainers/python:0-${VARIANT}

.devcontainer/devcontainer.json

@@ -0,0 +1,41 @@
+{
+    "name": "Python 3",
+    "mounts": [ "source=/Users/yanivos/.aws,target=/home/vscode/.aws,type=bind"],
+    "build": {
+        "dockerfile": "Dockerfile",
+        "context": "..",
+        "args": {
+            "VARIANT": "3.10-bullseye",
+            "NODE_VERSION": "lts/*"
+        }
+    },
+    "customizations": {
+        "vscode": {
+            "settings": {
+                "python.defaultInterpreterPath": "/usr/local/bin/python",
+                "python.linting.enabled": true,
+                "python.linting.pylintEnabled": true,
+                "python.formatting.autopep8Path": "/usr/local/py-utils/bin/autopep8",
+                "python.formatting.blackPath": "/usr/local/py-utils/bin/black",
+                "python.formatting.yapfPath": "/usr/local/py-utils/bin/yapf",
+                "python.linting.banditPath": "/usr/local/py-utils/bin/bandit",
+                "python.linting.flake8Path": "/usr/local/py-utils/bin/flake8",
+                "python.linting.mypyPath": "/usr/local/py-utils/bin/mypy",
+                "python.linting.pycodestylePath": "/usr/local/py-utils/bin/pycodestyle",
+                "python.linting.pydocstylePath": "/usr/local/py-utils/bin/pydocstyle",
+                "python.linting.pylintPath": "/usr/local/py-utils/bin/pylint"
+            },
+            "extensions": [
+                "ms-python.python",
+                "ms-python.vscode-pylance",
+                "GitHub.copilot"
+            ]
+        }
+    },
+    "forwardPorts": [3500],
+    // "runArgs": [
+    //     "--network=jb-elearning_cloudjb",
+    //     "--name=jbelearning-envconsumers",
+    //     "--add-host=host.docker.internal:host-gateway"
+    // ]
+}

.gitignore

@@ -0,0 +1,4 @@
+# ignore __pycache__ and .pyc files and pytest_cache folders 
+__pycache__/
+*.pyc
+pytest_cache/

Final_Exam/.gitignore

@@ -0,0 +1,2 @@
+terraform-ec2/.terraform.lock.hcl
+terraform-ec2/.terraform/

Final_Exam/terraform-ec2/builder_key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

Final_Exam/terraform-ec2/dockerStep/Dockerfile

@@ -0,0 +1,11 @@
+FROM python:3.9-slim as builder
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install --upgrade pip && pip install -r requirements.txt
+
+FROM python:3.9-slim
+WORKDIR /app
+COPY --from=builder /usr/local/lib/python3.9/site-packages /usr/local/lib/python3.9/site-packages
+COPY . .
+EXPOSE 5001
+CMD ["python", "app.py"]

Final_Exam/terraform-ec2/dockerStep/Jenkinsfile

@@ -0,0 +1,55 @@
+pipeline {
+    agent any
+
+    environment {
+        DOCKERHUB_CREDENTIALS = credentials('docker-hub-creds')
+        IMAGE_NAME = 'yaniv8360/flask-aws-monitor'
+        IMAGE_TAG = "${env.BUILD_NUMBER}"
+    }
+
+    stages {
+        stage('Clone Repository') {
+            steps {
+                git branch: 'dev', url: 'https://github.com/yaniv8360/devops-final-project.git'
+            }
+        }
+
+        stage('Lint & Security Scan') {
+            parallel {
+                stage('Flake8 Linting') {
+                    steps {
+                        echo 'pip install flake8 && flake8 .'
+                    }
+                }
+                stage('Bandit Security Scan') {
+                    steps {
+                        echo 'pip install bandit && bandit -r .'
+                    }
+                }
+            }
+        }
+        stage('Install Dependencies') {
+            steps {
+                sh 'pip install -r dockerStep/requirements.txt'
+            }
+        }
+        stage('Build Docker Image') {
+            steps {
+                sh """
+                    cd dockerStep/
+                    docker build -t yaniv8360/flask-aws-monitor:${IMAGE_TAG} .
+                    docker tag yaniv8360/flask-aws-monitor:${IMAGE_TAG} yaniv8360/flask-aws-monitor:latest
+                """
+            }
+        }
+        stage('Push to Docker Hub') {
+            steps {
+                sh """
+                    echo \$DOCKERHUB_CREDENTIALS_PSW | docker login -u \$DOCKERHUB_CREDENTIALS_USR --password-stdin
+                    docker push yaniv8360/flask-aws-monitor:${IMAGE_TAG}
+                    docker push yaniv8360/flask-aws-monitor:latest
+                """
+            }
+        }
+    }
+}

Final_Exam/terraform-ec2/dockerStep/app.py

@@ -0,0 +1,82 @@
+import os
+import boto3
+from flask import Flask, render_template_string
+
+app = Flask(__name__)
+
+# Fetch AWS credentials from environment variables
+AWS_ACCESS_KEY = os.getenv("AWS_ACCESS_KEY_ID")
+AWS_SECRET_KEY = os.getenv("AWS_SECRET_ACCESS_KEY")
+REGION = "us-east-1"
+
+# Initialize Boto3 clients
+session = boto3.Session(
+   aws_access_key_id=AWS_ACCESS_KEY,
+   aws_secret_access_key=AWS_SECRET_KEY,
+   region_name=REGION
+)
+ec2_client = session.client("ec2")
+elb_client = session.client("elbv2")
+
+@app.route("/")
+def home():
+   # Fetch EC2 instances
+   instances = ec2_client.describe_instances()
+   instance_data = []
+   for reservation in instances["Reservations"]:
+       for instance in reservation["Instances"]:
+           instance_data.append({
+               "ID": instance["InstanceId"],
+               "State": instance["State"]["Name"],
+               "Type": instance["InstanceType"],
+               "Public IP": instance.get("PublicIpAddress", "N/A")
+           })
+
+   # Fetch VPCs, Load Balancers and AMIs (Note: Dummy variables vpcs, lbs, amis used here)
+   vpcs = ec2_client.describe_vpcs()
+   lbs = elb_client.describe_load_balancers()
+   amis = ec2_client.describe_images(Owners=["self"])
+   vpc_data = [{"VPC ID": vpc["VpcId"], "CIDR": vpc["CidrBlock"]} for vpc in []]
+   lb_data = [{"LB Name": lb["LoadBalancerName"], "DNS Name": lb["DNSName"]} for lb in []]
+   ami_data = [{"AMI ID": ami["ImageId"], "Name": ami.get("Name", "N/A")} for ami in []]
+
+   # Render the result in a simple table
+   html_template = """
+   <html>
+   <head><title>AWS Resources</title></head>
+   <body>
+       <h1>Running EC2 Instances</h1>
+       <table border='1'>
+           <tr><th>ID</th><th>State</th><th>Type</th><th>Public IP</th></tr>
+           {% for instance in instance_data %}
+           <tr><td>{{ instance['ID'] }}</td><td>{{ instance['State'] }}</td><td>{{ instance['Type'] }}</td><td>{{ instance['Public IP'] }}</td></tr>
+           {% endfor %}
+       </table>
+       <h1>VPCs</h1>
+       <table border='1'>
+           <tr><th>VPC ID</th><th>CIDR</th></tr>
+           {% for vpc in vpc_data %}
+           <tr><td>{{ vpc['VPC ID'] }}</td><td>{{ vpc['CIDR'] }}</td></tr>
+           {% endfor %}
+       </table>
+       <h1>Load Balancers</h1>
+       <table border='1'>
+           <tr><th>LB Name</th><th>DNS Name</th></tr>
+           {% for lb in lb_data %}
+           <tr><td>{{ lb['LB Name'] }}</td><td>{{ lb['DNS Name'] }}</td></tr>
+           {% endfor %}
+       </table>
+       <h1>Available AMIs</h1>
+       <table border='1'>
+           <tr><th>AMI ID</th><th>Name</th></tr>
+           {% for ami in ami_data %}
+           <tr><td>{{ ami['AMI ID'] }}</td><td>{{ ami['Name'] }}</td></tr>
+           {% endfor %}
+       </table>
+   </body>
+   </html>
+   """
+   return render_template_string(html_template, instance_data=instance_data, vpc_data=vpc_data, lb_data=lb_data, ami_data=ami_data)
+
+if __name__ == "__main__":
+   app.run(host="0.0.0.0", port=5001, debug=True)

Final_Exam/terraform-ec2/dockerStep/azure-pipelines.yml

@@ -0,0 +1,68 @@
+trigger:
+  branches:
+    include:
+      - dev
+
+pool:
+  vmImage: 'ubuntu-latest'
+
+variables:
+  DOCKERHUB_USERNAME: $(DOCKERHUB_USERNAME)
+  DOCKERHUB_PASSWORD: $(DOCKERHUB_PASSWORD)
+  IMAGE_NAME: 'yaniv8360/flask-aws-monitor-azure'
+
+stages:
+- stage: CloneRepository
+  displayName: 'Clone Repository'
+  jobs:
+  - job: Clone
+    steps:
+      - checkout: self
+        displayName: 'Checkout Repository'
+
+- stage: ParallelChecks
+  displayName: 'Parallel Linting & Security Checks'
+  dependsOn: CloneRepository
+  jobs:
+  - job: Linting
+    displayName: 'Linting'
+    steps:
+      - script: |
+          echo 'pip install flake8 && flake8 .'
+          echo 'pip install shellcheck && shellcheck .'
+          echo 'pip install hadolint && hadolint .'
+        displayName: 'Run Linting'
+  - job: SecurityScan
+    displayName: 'Security Scanning'
+    steps:
+      - script: |
+          echo 'pip install trivy && trivy .'
+          echo 'pip install bandit && bandit .'
+        displayName: 'Run Security Scan'
+
+- stage: BuildDockerImage
+  displayName: 'Build Docker Image'
+  dependsOn: ParallelChecks
+  jobs:
+  - job: BuildImage
+    displayName: 'Build Docker Image'
+    steps:
+      - script: |
+          docker build -t $(IMAGE_NAME) .
+        displayName: 'Build Docker Image'
+
+- stage: PushToDockerHub
+  displayName: 'Push Docker Image to Docker Hub'
+  dependsOn: BuildDockerImage
+  jobs:
+  - job: PushImage
+    displayName: 'Push Docker Image'
+    steps:
+      - script: |
+          echo $(DOCKERHUB_PASSWORD) | docker login --username $(DOCKERHUB_USERNAME) --password-stdin
+          docker push $(IMAGE_NAME)
+        displayName: 'Push Docker Image'
+
+- stage: SecureCredentials
+  displayName: 'Store and Use Secure Credentials'
+  dependsOn: []

Final_Exam/terraform-ec2/dockerStep/deployment.yaml

@@ -0,0 +1,19 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: flask-aws-monitor
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: flask-aws-monitor
+  template:
+    metadata:
+      labels:
+        app: flask-aws-monitor
+    spec:
+      containers:
+      - name: flask-aws-monitor
+        image: yaniv8360/flask-aws-monitor:latest
+        ports:
+        - containerPort: 5001

Final_Exam/terraform-ec2/dockerStep/requirements.txt

@@ -0,0 +1,2 @@
+Flask
+boto3

Final_Exam/terraform-ec2/dockerStep/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: flask-aws-monitor-service
+spec:
+  type: NodePort
+  selector:
+    app: flask-aws-monitor
+  ports:
+    - protocol: TCP
+      port: 5001
+      targetPort: 5001
+      nodePort: 30001