nearform/aws-sg-container

A toolkit for application deployments and container management

nscale is an open toolkit supporting configuration, build and deployment of connected container sets. nscale is ideally used to support the development and operation of microservice based systems.

Amazon Security Group Container

Manages the creation, deployment, linking and unlinking of an Amazon Security Group for nscale. The aws-sg-container is used internally by nscale, see nscale's documentation for information on how to deploy using Amazon Web Services as the target platform.

License

Copyright (c) 2014 - 2015 nearForm and other contributors

Licensed under the Artistic License 2.0

aws-sg-container's Issues

Remove dependency on aws CLI

aws-sg-container/lib/sg.js

Lines 30 to 53 in e398ff4

	/**
	* the aws function ec2.authorizeSecurityGroupIngress appears to just not work...
	* this temporary hack creates a set of AWS command line instructions in a single
	* bash script and executes them to set ingress rules on a given security group
	*/
	var hackIngress = function(groupId, ipPermissions, out, cb) {
	var ingress = 'aws ec2 authorize-security-group-ingress --group-id __GROUP_ID__ --protocol __PROTOCOL__ --port __PORT__ --cidr __CIDR__\n';
	var script = '';
	var rule = '';
	script = 'export AWS_ACCESS_KEY_ID=' + _config.accessKeyId + '\n';
	script += 'export AWS_SECRET_ACCESS_KEY=' + _config.secretAccessKey + '\n';
	script += 'export AWS_DEFAULT_REGION=' + _config.region + '\n';
	_.each(ipPermissions, function(perm) {
	rule = ingress.replace(GROUP_ID, groupId);
	rule = rule.replace(PROTOCOL, perm.IpProtocol);
	rule = rule.replace(PORT, perm.FromPort);
	rule = rule.replace(CIDR, perm.IpRanges[0].CidrIp);
	script += rule;
	});
	fs.writeFileSync('/tmp/_hackingress.sh', script, 'utf8');
	executor.exec(_mode, 'sh /tmp/_hackingress.sh', '/tmp', out, cb);
	};