Deploy Lambda artifact from S3 bucket

Pull the deployment artifact from S3 using the new terraform-external-module-artifact module. This approach has the benefit of not checking in zip files into git, but the downside of more preamble when wanting to test this module as per the example docs. You need to know that the function should already be in S3 at a pre determined path. We need to think of proper deployment and promotion of these artifacts through different S3 buckets e.g. artifacts.testing.cloudposse.org -> artifacts.prod.cloudposse.org

Author: joshmyers

.gitignore

@@ -14,3 +14,5 @@
 **/.build-harness
 **/build-harness
 **/venv
+
+*.zip

.travis.yml

@@ -5,6 +5,10 @@ addons:
  - make
  - curl
 
+env:
+ global:
+ - TERRAFORM_MODULE_NAME="$(basename $TRAVIS_REPO_SLUG)"
+
 install:
  - make init
 
@@ -14,3 +18,17 @@ script:
  - make terraform/get-modules
  - make terraform/lint
  - make terraform/validate
+ - make build
+
+deploy:
+ # Deploy artifacts to S3
+ - provider: s3
+ region: "us-west-2"
+ access_key_id: $AWS_ACCESS_KEY_ID
+ secret_access_key: $AWS_SECRET_ACCESS_KEY
+ bucket: artifacts.prod.cloudposse.org
+ skip_cleanup: true
+ upload-dir: $TERRAFORM_MODULE_NAME/$TRAVIS_COMMIT
+ local-dir: artifacts
+ on:
+ all_branches: true

Makefile

@@ -27,4 +27,5 @@ dependencies:
 ## Build Lambda function zip
 build: dependencies
 @echo "==> Building Lambda function zip..."
-@cd $(LAMBDA_DIR) && zip -r ../elasticsearch_cleanup.zip * && cd ../
+@mkdir -p artifacts
+@cd $(LAMBDA_DIR) && zip -r ../artifacts/lambda.zip * && cd ../

elasticsearch_cleanup.zip

@@ -72,6 +72,13 @@ module "label" {
  enabled = "true"
 }
 
+module "artifact" {
+ source = "git::https://github.com/cloudposse/terraform-external-module-artifact.git?ref=tags/0.1.1"
+ filename = "lambda.zip"
+ module_name = "terraform-aws-lambda-elasticsearch-cleanup"
+ module_path = "${path.module}"
+}
+
 # Locals
 #--------------------------------------------------------------
 locals {
@@ -88,7 +95,7 @@ resource "aws_lambda_function" "default" {
  runtime = "python${var.python_version}"
  role = "${aws_iam_role.default.arn}"
  handler = "es-cleanup.lambda_handler"
- source_code_hash = "${base64sha256(file(local.lambda_path))}"
+ source_code_hash = "${module.artifact.base64sha256}"
  tags = "${module.label.tags}"
 
  environment {