feat(lambda): sls executor support for apigw private endpoint resourc…

…e policy
zotoio · Jul 6, 2018 · 812906a · 812906a
1 parent a42e928
commit 812906a
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/.envExample b/.envExample
@@ -50,6 +50,12 @@ GTM_SLS_EXECUTOR_APIGW_DOMAIN_SUFFIX=lambda.mysuffix.com
 GTM_SLS_EXECUTOR_DEPLOYMENT_S3_BUCKET_PREFIX=
 GTM_SLS_EXECUTOR_HTTP_PROXY=
 GTM_SLS_EXECUTOR_NO_PROXY=
+GTM_SLS_EXECUTOR_VPC_ID=
+GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID=
+GTM_SLS_EXECUTOR_VPC_SUBNET_A=
+GTM_SLS_EXECUTOR_VPC_SUBNET_B=
+GTM_SLS_EXECUTOR_VPC_SUBNET_C=
+GTM_SLS_EXECUTOR_AWS_KMS_KEY_ID=
 
 GTM_CRYPT_GITHUB_TOKEN=<redacted>
 GTM_CRYPT_GITHUB_WEBHOOK_SECRET=<redacted>

diff --git a/README.md b/README.md
@@ -109,6 +109,12 @@ Create an asynchronous CI agnostic mechanism for running custom test stage gates
 |GTM_SLS_EXECUTOR_APIGW_DOMAIN_SUFFIX|reverse proxy domain name that will have apiId added as subdomain.  eg. lambda.mysuffix.com will result in [apiId].lambda.mysuffix.com|
 |GTM_SLS_EXECUTOR_HTTP_PROXY|proxy passed to serverless executor|
 |GTM_SLS_EXECUTOR_NO_PROXY|no_proxy passed to serverless executor|
+|GTM_SLS_EXECUTOR_VPC_ID|vpc id for private apigw endpoints|
+|GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID|vpc security group id|
+|GTM_SLS_EXECUTOR_VPC_SUBNET_A| vpc az subnet |
+|GTM_SLS_EXECUTOR_VPC_SUBNET_B| vpc az subnet |
+|GTM_SLS_EXECUTOR_VPC_SUBNET_C| vpc az subnet |
+|GTM_SLS_EXECUTOR_AWS_KMS_KEY_ID| kms key id for sls env var encryption |
 
 > important: values of env vars prefixed with `GTM_CRYPT_*` must be created via `npm run sls-encrypt [name] [value]`
 

diff --git a/src/executors/ExecutorDockerServerless.js b/src/executors/ExecutorDockerServerless.js
@@ -103,6 +103,7 @@ export class ExecutorDockerServerless extends ExecutorDocker {
                 SLS_DEPLOYMENT_S3_BUCKET_PREFIX: process.env.GTM_SLS_EXECUTOR_DEPLOYMENT_S3_BUCKET_PREFIX,
                 SLS_HTTP_PROXY: process.env.GTM_SLS_EXECUTOR_HTTP_PROXY,
                 SLS_NO_PROXY: process.env.GTM_SLS_EXECUTOR_NO_PROXY,
+                SLS_VPC_ID: process.env.GTM_SLS_EXECUTOR_VPC_ID,
                 SLS_VPC_SECURITY_GROUP_ID: process.env.GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID,
                 SLS_VPC_SUBNET_A: process.env.GTM_SLS_EXECUTOR_VPC_SUBNET_A,
                 SLS_VPC_SUBNET_B: process.env.GTM_SLS_EXECUTOR_VPC_SUBNET_B,