In the previous section, you ran the app in the dev environment, made some changes to the code,
and committed those changes to Git. Now it's time to see how you deploy your changes to AWS.
Deploying app changes: how to deploy changes to application code, such as a Ruby, Python,
or Java web service packaged with Packer or Docker.
Deploying infrastructure changes: how to deploy changes to infrastructure code,
such as Terraform modules that configure your VPCs, databases, DNS settings, etc.
Deploying app changes
Changes to your apps are deployed via an automated Continuous Integration (CI) and Continuous Delivery (CD) pipeline:
We have configured CircleCi to run a build on every commit and new tag in your Git repos.
Note only changes in version control can kick off a CircleCi build; there is no way to trigger one manually!
Build and test the code
CircleCi is configured to build and test your code using a circle.yml file in the root of your repo. Check out the
Configuring CircleCI docs for details on what you can configure
with the circle.yml file.
Any build steps should typically go into compile section of circle.yml.
Test steps should typically go into the test section of circle.yml.
If any of the build steps fails, the entire build will fail, and the followers of that repo will get email
notifications.
Package the code
We package the code as follows:
Build a new Docker image for the app
Tag the image with the Git revision (the sha1 hash) of the commit that triggered the build. This makes it easy to
track Docker images back to the commits they contain.
Update the version property in the service's terragrunt.hcl file to the new Docker image tag.
git commit and git push the changes to the infrastructure-live-acme repo.
Run terragrunt apply on the Terraform code to deploy the changes.
Deploying infrastructure changes
Deploying app changes is fairly easy, as all app deployments are roughly the same, and the cost of an error is fairly
small. Deploying arbitrary infrastructure changes is more complicated. Due to the complexity and risks involved (e.g.,
an apply deployment going wrong usually does little damage, whereas an infrastructure deployment going wrong could, for
example, delete a database!), we do not have a fully automated CI/CD pipeline for deploying infrastructure changes
(note: Gruntwork is currently working on it; email support@gruntwork.io for details), so
here's the process you should use:
Make the appropriate changes in either infrastructure-modules-acme or infrastructure-live-acme.
If you want to change some settings for an existing module in an environment, make those changes in the
terragrunt.hcl files in infrastructure-live-acme.
If you want to change how the underlying modules work or add a new module, make those changes in
infrastructure-modules-acme. Note that after those changes are committed, you'll need to release a new
version of infrastructure-modules-acme and update infrastructure-live-acme to use that new version
(both of these steps are described below).
Test your changes in a sandbox environment
Every company should have a "sandbox" environment where developers can make Terraform changes without:
Having to commit those changes to version control.
Having to worry that if they break something, it will cause problems for the rest of the team.
While the company is small, a single shared sandbox environment is usually enough. As you grow bigger, you may need
more to avoid conflicts. The gold standard is to have each developer spin up their own completely isolated environment
for testing and to tear it down when they are done. Since all of your infrastructure is defined as code, you should be
able to automate this process!
Once you've figured out where you are going to test, to apply your changes, do the following:
For some modules, you will also need to install kubergrunt and
kubectl.
kubergrunt is a collection of scripts packaged as a Go binary that provides certain functionality to make it easier
to work with Kubernetes and EKS. kubectl is a comprehensive CLI for interacting with Kubernetes. You can check out
the README for any infrastructure code to see if it requires them.
Any modules that deploy applications to EKS will also need access to Helm. You can use the kubergrunt helm configure command to setup access on your machine. See the relevant section in section 8 "Accounts and Auth" of
this document for more info. You can also look at the command
documentation for more details on the command itself.
Go into the appropriate folder in infrastructure-live-acme for your sandbox environment.
Run terragrunt plan to see what impact your changes will have.
If the plan looks good, run terragrunt apply to deploy those changes.
Note: if you've made changes in infrastructure-modules-acme, use the --terragrunt-source parameter to point
Terragrunt at your local checkout of infrastructure-modules-acme. E.g., if you checked out
infrastructure-modules-acme to ~/source/infrastructure-modules-acme, then you can test your changes
locally, without creating a new release of infrastructure-modules-acme, by running
terragrunt plan --terragrunt-source ~/source/infrastructure-modules-acme/my-module and
terragrunt apply --terragrunt-source ~/source/infrastructure-modules-acme/my-module.
Note: you can also create automated tests for your modules using the
Terratest library. Check out the test folder in any Gruntwork module
for examples, such as the module-ecs tests and
module-asg tests.
Submit a pull request
Once your code is working in the sandbox environment:
Commit your changes to a new branch
Submit a pull request so other team members can review your code.
If you only made changes in the sandbox environment in infrastructure-live-acme, then your pull request
should include analogous changes in all the other environments in infrastructure-live-acme (but, of course,
don't apply those changes yet!).
If you made changes in infrastructure-modules-acme, then submit the pull request in that repo first. After
that pull request has been merged and a new version released, you can submit a pull request (or multiple pull
requests) in infrastructure-live-acme updating all environments to use the new version. All of this is
described in the next few sections.
Merge in your changes
If the code looks good, merge your changes into the master branch. The basic idea is that master should always reflect
what's deployed in prod, so the next step is to deploy the code!
Release a new version
If your code changes included a change to infrastructure-modules-acme, you should release a new version by
creating a new Git tag. If you use GitHub, you can do this by creating a new release on the releases page.
Alternatively, you can do it with the Git CLI:
You can now begin deploying this new, immutable version of your infrastructure through all of your environments:
e.g, qa -> stage -> prod. There are two ways to do this:
You can submit a single pull request in infrastructure-live-acme to update all the environments. Once its
merged, you can run terragrunt plan and terragrunt apply in each environment to deploy the changes.
If you need to test the changes in each environment before deploying to the next environment, you may want to do a
separate pull request for each environment, and merge and deploy them one at a time.
As you deploy each environment, make sure to carefully check that the plan output matches what you expect!
{"treedata":{"name":"root","toggled":true,"children":[{"name":".gitignore","path":".gitignore","sha":"1c27fc6013cba46cd301a7c8bf951694670153a3"},{"name":"CODEOWNERS","path":"CODEOWNERS","sha":"6bddb3ff6e1b3dfaba7cf180e56bca12c245be56"},{"name":"README.md","path":"README.md","sha":"74507349a9d5cd784540410365adc61ba68000f1"},{"name":"_docs","children":[{"name":"01-architecture-overview.md","path":"_docs/01-architecture-overview.md","sha":"fa091294c3f4cfb2e7bd1d7df78907faf076996b"},{"name":"02-whats-deployed.md","path":"_docs/02-whats-deployed.md","sha":"8bf4519132e2ea43cbcf1e1d67eff3f961471af2"},{"name":"03-security-compliance-compatibility.md","path":"_docs/03-security-compliance-compatibility.md","sha":"9342617f42adb28e440cc2161f3fee56205c150e"},{"name":"04-how-code-is-organized.md","path":"_docs/04-how-code-is-organized.md","sha":"64b9396f54fb0b791d39b93919a6416ab8215f0d"},{"name":"05-dev-environment.md","path":"_docs/05-dev-environment.md","sha":"9209da466b0f9afee5e1afb36f01a2ba8149012f"},{"name":"06-ci-cd.md","path":"_docs/06-ci-cd.md","sha":"0685cbe746fa0271357db34ebd39d76397ea19c4","toggled":true},{"name":"07-monitoring-alerting-logging.md","path":"_docs/07-monitoring-alerting-logging.md","sha":"619c810c6e60418b3a46fa3d903bc76dc6d48e41"},{"name":"08-ssh-vpn.md","path":"_docs/08-ssh-vpn.md","sha":"0f526549f4b0d08cf2a914def239f8ff872ec2d1"},{"name":"09-accounts-and-auth.md","path":"_docs/09-accounts-and-auth.md","sha":"9e6d2c1f8b9a7cc7c5b3ce3386eea22daac6cc17"},{"name":"10-gruntwork-tools.md","path":"_docs/10-gruntwork-tools.md","sha":"d08b1fe7cfbb9ad91155bfff9e3a05525c39c127"},{"name":"11-deploying-a-docker-service.md","path":"_docs/11-deploying-a-docker-service.md","sha":"d2123b688287557c1c38cd415a729b3a445a45ad"},{"name":"12-migration.md","path":"_docs/12-migration.md","sha":"6e46bf752f330de978a8927858a716f04db13f60"},{"name":"13-deploying-the-reference-architecture-from-scratch.md","path":"_docs/13-deploying-the-reference-architecture-from-scratch.md","sha":"9eb702bb6da48a97b2c9eead594a3474a1ee6703"},{"name":"14-undeploying-the-reference-architecture.md","path":"_docs/14-undeploying-the-reference-architecture.md","sha":"3ed0569cdd0e3d32079ab537e1697fbcb3ee27d8"},{"name":"15-adding-new-environments-regions-and-accounts.md","path":"_docs/15-adding-new-environments-regions-and-accounts.md","sha":"6a0372a843a9245570379e1beaad452e67d234c3"},{"name":"README.md","path":"_docs/README.md","sha":"785d2b0b36b10e75c96e4eaa7414c1c71d78e222"},{"name":"_images","children":[{"name":"cw-logs-1.png","path":"_docs/_images/cw-logs-1.png","sha":"84c86f014751844fbd777b5139ed61f749b5ed32"},{"name":"cw-logs-2.png","path":"_docs/_images/cw-logs-2.png","sha":"9a0a80b20490fdc1b9014040cc0bbc87c9cf6f68"},{"name":"cw-logs-3.png","path":"_docs/_images/cw-logs-3.png","sha":"bda49dc4e947658e0ceb9ba592b4e314d9db61e9"},{"name":"cw-logs-4.png","path":"_docs/_images/cw-logs-4.png","sha":"54bcc44c4b0701620b7f20c4e6fc0a9fd8f38049"},{"name":"ecs-console-1.png","path":"_docs/_images/ecs-console-1.png","sha":"afe452278d5f107e6ec225a235c587de7cb53510"},{"name":"ecs-console-2.png","path":"_docs/_images/ecs-console-2.png","sha":"40609b98015d781b9e1de801c131fadc323337ae"},{"name":"ecs-console-3.png","path":"_docs/_images/ecs-console-3.png","sha":"87ad40d291b7e9e6f6caa0389b846392bdb93ee0"},{"name":"ref-arch-full.png","path":"_docs/_images/ref-arch-full.png","sha":"8c17eef52be06757553a1f3ee4e387e6dc820016"},{"name":"ref-arch-icon.png","path":"_docs/_images/ref-arch-icon.png","sha":"05876962e6877df911674237ca1b793d9f4f04b3"},{"name":"terraform-code-provenance.png","path":"_docs/_images/terraform-code-provenance.png","sha":"e2a9d6bfbd8b963b057d4341dd0ec93e3823d834"}]}],"toggled":true},{"name":"main","children":[{"name":"_global","children":[{"name":"README.md","path":"main/_global/README.md","sha":"d1b8a96c00211751f079fa13cac1b3417d29bf09"},{"name":"cloudtrail","children":[{"name":"README.md","path":"main/_global/cloudtrail/README.md","sha":"7bf54b13e60f80416bbe3ee5b22328ee47a2532a"},{"name":"terragrunt.hcl","path":"main/_global/cloudtrail/terragrunt.hcl","sha":"5d4953cb81dc711c1f5641e26b54b2de8dedf62e"}]},{"name":"iam-groups","children":[{"name":"README.md","path":"main/_global/iam-groups/README.md","sha":"b6797c786d3c914257fc0e0bb4680e9fc861ab38"},{"name":"terragrunt.hcl","path":"main/_global/iam-groups/terragrunt.hcl","sha":"f14f3f59fb104ffc4f9925dd8565f43d665600c7"}]},{"name":"iam-user-password-policy","children":[{"name":"README.md","path":"main/_global/iam-user-password-policy/README.md","sha":"1ddbc02253cb2fb3971fdbf1b3e09758f8eede9a"},{"name":"terragrunt.hcl","path":"main/_global/iam-user-password-policy/terragrunt.hcl","sha":"482cdc172a7e5f033acf9d808bef3e8bd3ef8f1e"}]},{"name":"machine-user","children":[{"name":"README.md","path":"main/_global/machine-user/README.md","sha":"0d676a50c24d954dab8a57794e6790eb03d03e4e"},{"name":"terragrunt.hcl","path":"main/_global/machine-user/terragrunt.hcl","sha":"50b845d531ee85c0a109c6abba695a3fe7d5b89e"}]},{"name":"region.yaml","path":"main/_global/region.yaml","sha":"18b7823ed017b97431d58da7bcb9a4e31299272a"},{"name":"route53-public","children":[{"name":"README.md","path":"main/_global/route53-public/README.md","sha":"4757db7a8adde3d4af6a86f3ea20e050ae946a08"},{"name":"terragrunt.hcl","path":"main/_global/route53-public/terragrunt.hcl","sha":"06c315b032005358d2a3e6c5774f5b99ab64e681"}]},{"name":"service-linked-roles","children":[{"name":"README.md","path":"main/_global/service-linked-roles/README.md","sha":"45c1919cc5667b8d8ae25f09b3baf3078a7b36f9"},{"name":"terragrunt.hcl","path":"main/_global/service-linked-roles/terragrunt.hcl","sha":"398538ac8d92ed0160f303b029720592f81af280"}]}]},{"name":"empty.yaml","path":"main/empty.yaml","sha":"5aa66daa40faeaef37eccb7b4b0fcc792233cd7b"},{"name":"terragrunt.hcl","path":"main/terragrunt.hcl","sha":"3f362bb353e2d6e02f59294d7f7044da3a62b565"},{"name":"us-east-1","children":[{"name":"_global","children":[{"name":"README.md","path":"main/us-east-1/_global/README.md","sha":"37b828b038945a50e2e571ef1e755c4f9170e7cf"},{"name":"ecr-repos","children":[{"name":"README.md","path":"main/us-east-1/_global/ecr-repos/README.md","sha":"e7215127ffcf141002796e83ed1b9e9647ddbe22"},{"name":"terragrunt.hcl","path":"main/us-east-1/_global/ecr-repos/terragrunt.hcl","sha":"20c8ae6bd26f8cfd8fddcb8676cc109201bc49eb"}]},{"name":"sns-topics","children":[{"name":"README.md","path":"main/us-east-1/_global/sns-topics/README.md","sha":"05eb8a853eccf6465dc558bb9c57637fb4e9ccd3"},{"name":"terragrunt.hcl","path":"main/us-east-1/_global/sns-topics/terragrunt.hcl","sha":"81c92f821daf7077881a43678c717d485fc36401"}]}]},{"name":"mgmt","children":[{"name":"README.md","path":"main/us-east-1/mgmt/README.md","sha":"8a131a11632b97fec18a5e344d5c721fce24b652"},{"name":"env.yaml","path":"main/us-east-1/mgmt/env.yaml","sha":"b514ab3187ebfb5bf467c632f27a21f5a9611bfc"},{"name":"kms-master-key","children":[{"name":"README.md","path":"main/us-east-1/mgmt/kms-master-key/README.md","sha":"2affa3417a1b76f670e407330cb9dc62d01a521e"},{"name":"terragrunt.hcl","path":"main/us-east-1/mgmt/kms-master-key/terragrunt.hcl","sha":"5e24ee41d1565d3e026354e71a5ae7a362a206ea"}]},{"name":"openvpn-server","children":[{"name":"README.md","path":"main/us-east-1/mgmt/openvpn-server/README.md","sha":"93a2465ed5c720dd30b434aa36a2d28c4e0c7fcf"},{"name":"terragrunt.hcl","path":"main/us-east-1/mgmt/openvpn-server/terragrunt.hcl","sha":"aaf206a2c80987a888872ef7812bb93984cf26d1"}]},{"name":"vpc","children":[{"name":"README.md","path":"main/us-east-1/mgmt/vpc/README.md","sha":"495e2b8828a490c03ea7e153e695239f2bb92512"},{"name":"terragrunt.hcl","path":"main/us-east-1/mgmt/vpc/terragrunt.hcl","sha":"d6fad3a7e2397ea7bc62fa77ea6e138ec27e4335"}]}]},{"name":"prod","children":[{"name":"README.md","path":"main/us-east-1/prod/README.md","sha":"f15da18661ef3624d5f63deb288bad072e93df57"},{"name":"cloudwatch-dashboard","children":[{"name":"README.md","path":"main/us-east-1/prod/cloudwatch-dashboard/README.md","sha":"766cff97af8b2bbbdb90c2262c150b4d0bc88c62"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/cloudwatch-dashboard/terragrunt.hcl","sha":"ff055251d5427c0116d0e382f38c537b09db96ee"}]},{"name":"data-stores","children":[{"name":"elasticsearch","children":[{"name":"README.md","path":"main/us-east-1/prod/data-stores/elasticsearch/README.md","sha":"de10ddf77c3ae0b341ebbd7152f8d3c086d7ba20"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/data-stores/elasticsearch/terragrunt.hcl","sha":"736a4bdbdcc1b54dcd909671a76f09988c226436"}]},{"name":"kafka","children":[{"name":"README.md","path":"main/us-east-1/prod/data-stores/kafka/README.md","sha":"3681db5950b18676e92d6f00df190ff553c06404"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/data-stores/kafka/terragrunt.hcl","sha":"89d57ee0e689e1f28141c383924b03937b46fb3b"}]},{"name":"mysql","children":[{"name":"README.md","path":"main/us-east-1/prod/data-stores/mysql/README.md","sha":"3ff802dea2beeb94b34a9d2087fa1ce332702ba0"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/data-stores/mysql/terragrunt.hcl","sha":"681f993523ec8336c4f6be26a41ab1148b127ce8"}]},{"name":"redis","children":[{"name":"README.md","path":"main/us-east-1/prod/data-stores/redis/README.md","sha":"7f5426659066280ce18fad93eb14dd573e3de1b0"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/data-stores/redis/terragrunt.hcl","sha":"e7d7171695ad1ca039db9171ac31f1fb210f51f5"}]},{"name":"zookeeper","children":[{"name":"README.md","path":"main/us-east-1/prod/data-stores/zookeeper/README.md","sha":"3aa643354b946d75610e3a8d10e616e1080717bc"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/data-stores/zookeeper/terragrunt.hcl","sha":"ed94a3d0277beb71cd9500f1d29053e2f5b99f28"}]}]},{"name":"env.yaml","path":"main/us-east-1/prod/env.yaml","sha":"90e2d18e481b6e35ddc57391f752874ffc0058cf"},{"name":"kms-master-key","children":[{"name":"README.md","path":"main/us-east-1/prod/kms-master-key/README.md","sha":"7bf1a8da34427b8314d99904b01c20937604e1e0"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/kms-master-key/terragrunt.hcl","sha":"fb4afa8978a7b719c852756ac51883c5e87f5ab8"}]},{"name":"lambda","children":[{"name":"long-running-scheduled","children":[{"name":"README.md","path":"main/us-east-1/prod/lambda/long-running-scheduled/README.md","sha":"a6a7503b1168dd015618028f30b74aeb1ba7baf3"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/lambda/long-running-scheduled/terragrunt.hcl","sha":"c05243749ec7d3bd386c0563936b0f5e0b4bbbe6"}]},{"name":"s3-image-processing","children":[{"name":"README.md","path":"main/us-east-1/prod/lambda/s3-image-processing/README.md","sha":"1b149a62078c71549d77e59b0ea995f7181a7d8b"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/lambda/s3-image-processing/terragrunt.hcl","sha":"68b62dc42154055b1eaf522fd2240992df4d7814"}]}]},{"name":"networking","children":[{"name":"alb-internal","children":[{"name":"README.md","path":"main/us-east-1/prod/networking/alb-internal/README.md","sha":"5880e9468a3bf336b613dc7132b052ea89a0f99a"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/networking/alb-internal/terragrunt.hcl","sha":"7ad684cfd8fc90140bf149e0f7fa689a2bd6ace0"}]},{"name":"alb-public","children":[{"name":"README.md","path":"main/us-east-1/prod/networking/alb-public/README.md","sha":"5880e9468a3bf336b613dc7132b052ea89a0f99a"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/networking/alb-public/terragrunt.hcl","sha":"ad8fd584b78fdd026ac76554e60653f2c23cf765"}]},{"name":"route53-private","children":[{"name":"README.md","path":"main/us-east-1/prod/networking/route53-private/README.md","sha":"9160c66a0b04a407981db7bf9ee40dad8c5d9434"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/networking/route53-private/terragrunt.hcl","sha":"df4f82c4dc568fbe251eef10adbc28f1b1ccc263"}]}]},{"name":"services","children":[{"name":"ecs-cluster","children":[{"name":"README.md","path":"main/us-east-1/prod/services/ecs-cluster/README.md","sha":"560d730485383f188833313b77599681d146bdd7"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/ecs-cluster/terragrunt.hcl","sha":"38c41c4c8583f8569c2d37e51321acf4a0af6f5f"}]},{"name":"eks-cluster","children":[{"name":"README.md","path":"main/us-east-1/prod/services/eks-cluster/README.md","sha":"84d53a02559d844d8c62ee9d11a558265b3ae5b5"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/eks-cluster/terragrunt.hcl","sha":"e80ff0c733463d17c33d8c7062121e985d1cd1e8"}]},{"name":"eks-core-services","children":[{"name":"README.md","path":"main/us-east-1/prod/services/eks-core-services/README.md","sha":"298969aaf6db9c7e972cd735cef2d43cda899e3f"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/eks-core-services/terragrunt.hcl","sha":"1e8a88f4c8330f10848fea04daa719ab92c74d53"}]},{"name":"k8s-applications-namespace","children":[{"name":"README.md","path":"main/us-east-1/prod/services/k8s-applications-namespace/README.md","sha":"5e0a3640be89e96aece9e4ac8f8b7967e4d57056"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/k8s-applications-namespace/terragrunt.hcl","sha":"120cab356ca4590c262bd3b727d60f6c8294792b"}]},{"name":"k8s-sample-app-backend-acme","children":[{"name":"README.md","path":"main/us-east-1/prod/services/k8s-sample-app-backend-acme/README.md","sha":"4737c31d75b6d6c7565fa3d391177c9d3d022a5e"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/k8s-sample-app-backend-acme/terragrunt.hcl","sha":"c4e9d2aaad8a61ebcb1148800e50858e1023d959"}]},{"name":"k8s-sample-app-frontend-acme","children":[{"name":"README.md","path":"main/us-east-1/prod/services/k8s-sample-app-frontend-acme/README.md","sha":"43161374e0c977f15e8af04913e3554894ed2a82"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/k8s-sample-app-frontend-acme/terragrunt.hcl","sha":"9ab415e18bdf994e3b78f9a6ade6cd3b0fb87e5f"}]},{"name":"sample-app-backend-acme-asg","children":[{"name":"README.md","path":"main/us-east-1/prod/services/sample-app-backend-acme-asg/README.md","sha":"90c4b69a937239b4b51e99c4404360f4aba4edde"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/sample-app-backend-acme-asg/terragrunt.hcl","sha":"940d42befd46a394d63124cfd0d5830c6cea44b2"}]},{"name":"sample-app-backend-acme","children":[{"name":"README.md","path":"main/us-east-1/prod/services/sample-app-backend-acme/README.md","sha":"db3e1635aae0577080a9e2518633d4b5830a259a"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/sample-app-backend-acme/terragrunt.hcl","sha":"c2f4509348ff2f45c10901bbd06f7e409b888e14"}]},{"name":"sample-app-beanstalk","children":[{"name":"README.md","path":"main/us-east-1/prod/services/sample-app-beanstalk/README.md","sha":"27f6c3930f0621262b5dd0400f59e1122631da65"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/sample-app-beanstalk/terragrunt.hcl","sha":"2eaf051ae2cb3f4871be2cb78d3c9edec2da212e"}]},{"name":"sample-app-frontend-acme-asg","children":[{"name":"README.md","path":"main/us-east-1/prod/services/sample-app-frontend-acme-asg/README.md","sha":"ab9db3714676828cb0b766b5a3329f37115b1729"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/sample-app-frontend-acme-asg/terragrunt.hcl","sha":"2d6811f17d17c94bdf9f06c74bf74a3424555c3b"}]},{"name":"sample-app-frontend-acme","children":[{"name":"README.md","path":"main/us-east-1/prod/services/sample-app-frontend-acme/README.md","sha":"c0bc1f93aef1ab1bcf3e22aaec14a1744da74dfb"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/sample-app-frontend-acme/terragrunt.hcl","sha":"84c663da537b9e7485f4e3eff18ffaabfc90ff4b"}]},{"name":"static-website","children":[{"name":"README.md","path":"main/us-east-1/prod/services/static-website/README.md","sha":"16d262eab6ca158ae60d84010bc4804a948673cf"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/services/static-website/terragrunt.hcl","sha":"bb0530a96785e00136cb13da4dd2aca6583ba393"}]}]},{"name":"vpc","children":[{"name":"README.md","path":"main/us-east-1/prod/vpc/README.md","sha":"eb0cfd86345b2983b4a9c9572501728493bfcde4"},{"name":"terragrunt.hcl","path":"main/us-east-1/prod/vpc/terragrunt.hcl","sha":"5a5f20f83d3935f43b48c71b88c0f44443eb11ed"}]}]},{"name":"region.yaml","path":"main/us-east-1/region.yaml","sha":"d56afa3d82e6cea0d792e84748de56dafb0bad70"},{"name":"stage","children":[{"name":"README.md","path":"main/us-east-1/stage/README.md","sha":"b24ba21bf01baf19ff84a2de457697a757d905c5"},{"name":"cloudwatch-dashboard","children":[{"name":"README.md","path":"main/us-east-1/stage/cloudwatch-dashboard/README.md","sha":"766cff97af8b2bbbdb90c2262c150b4d0bc88c62"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/cloudwatch-dashboard/terragrunt.hcl","sha":"feb471fd97d340798fd7ea565195faf4c4328f82"}]},{"name":"data-stores","children":[{"name":"elasticsearch","children":[{"name":"README.md","path":"main/us-east-1/stage/data-stores/elasticsearch/README.md","sha":"de10ddf77c3ae0b341ebbd7152f8d3c086d7ba20"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/data-stores/elasticsearch/terragrunt.hcl","sha":"b65b647edff6298b3a5a010d8ebe13f022b7c54d"}]},{"name":"kafka","children":[{"name":"README.md","path":"main/us-east-1/stage/data-stores/kafka/README.md","sha":"3681db5950b18676e92d6f00df190ff553c06404"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/data-stores/kafka/terragrunt.hcl","sha":"5ba7184e22ee433462c2d05c97ad6bb47c13786b"}]},{"name":"mysql","children":[{"name":"README.md","path":"main/us-east-1/stage/data-stores/mysql/README.md","sha":"3ff802dea2beeb94b34a9d2087fa1ce332702ba0"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/data-stores/mysql/terragrunt.hcl","sha":"d5d7ac741e73afbce47d99af1cbb16219e8af208"}]},{"name":"redis","children":[{"name":"README.md","path":"main/us-east-1/stage/data-stores/redis/README.md","sha":"7f5426659066280ce18fad93eb14dd573e3de1b0"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/data-stores/redis/terragrunt.hcl","sha":"224dc41a716053b231af5c557d7fe95a67af6d51"}]},{"name":"zookeeper","children":[{"name":"README.md","path":"main/us-east-1/stage/data-stores/zookeeper/README.md","sha":"3aa643354b946d75610e3a8d10e616e1080717bc"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/data-stores/zookeeper/terragrunt.hcl","sha":"c084625c9b909a6e5c7cc45995752645e1a9a577"}]}]},{"name":"env.yaml","path":"main/us-east-1/stage/env.yaml","sha":"5767506e27e978f52524dadbbd8fb9f8ad115599"},{"name":"kms-master-key","children":[{"name":"README.md","path":"main/us-east-1/stage/kms-master-key/README.md","sha":"0fc848e518ff6551caae5f234b89f3f2c2a3b015"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/kms-master-key/terragrunt.hcl","sha":"49762d286ee1ed5b999973a5f82688c01bdcf679"}]},{"name":"lambda","children":[{"name":"long-running-scheduled","children":[{"name":"README.md","path":"main/us-east-1/stage/lambda/long-running-scheduled/README.md","sha":"a6a7503b1168dd015618028f30b74aeb1ba7baf3"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/lambda/long-running-scheduled/terragrunt.hcl","sha":"c05243749ec7d3bd386c0563936b0f5e0b4bbbe6"}]},{"name":"s3-image-processing","children":[{"name":"README.md","path":"main/us-east-1/stage/lambda/s3-image-processing/README.md","sha":"1b149a62078c71549d77e59b0ea995f7181a7d8b"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/lambda/s3-image-processing/terragrunt.hcl","sha":"2ab4fe1b159bfe0797662dee0c24aba8b9b3e106"}]}]},{"name":"networking","children":[{"name":"alb-internal","children":[{"name":"README.md","path":"main/us-east-1/stage/networking/alb-internal/README.md","sha":"c1c8edd637ebd686cc5d7675013d750b8ca4ad52"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/networking/alb-internal/terragrunt.hcl","sha":"d90749b2f63ce2187c0fb1ee95723a57fb7e4097"}]},{"name":"alb-public","children":[{"name":"README.md","path":"main/us-east-1/stage/networking/alb-public/README.md","sha":"c1c8edd637ebd686cc5d7675013d750b8ca4ad52"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/networking/alb-public/terragrunt.hcl","sha":"fc8f137af22da522f85614dc22de19f962bdb285"}]},{"name":"route53-private","children":[{"name":"README.md","path":"main/us-east-1/stage/networking/route53-private/README.md","sha":"9160c66a0b04a407981db7bf9ee40dad8c5d9434"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/networking/route53-private/terragrunt.hcl","sha":"df4f82c4dc568fbe251eef10adbc28f1b1ccc263"}]}]},{"name":"services","children":[{"name":"ecs-cluster","children":[{"name":"README.md","path":"main/us-east-1/stage/services/ecs-cluster/README.md","sha":"94916a4be4208e4c1e1e7b7ee0d6dfa2fbfaf38c"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/ecs-cluster/terragrunt.hcl","sha":"744840965cbe10f02eb8d363ee2407201be2baf9"}]},{"name":"eks-cluster","children":[{"name":"README.md","path":"main/us-east-1/stage/services/eks-cluster/README.md","sha":"6db608bd68f9b1d4ee2741d72b2949d0dcf3e33d"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/eks-cluster/terragrunt.hcl","sha":"40da930fe85423d42896eac63f0a084847d85f53"}]},{"name":"eks-core-services","children":[{"name":"README.md","path":"main/us-east-1/stage/services/eks-core-services/README.md","sha":"0311f74f5aca78b831407ac5396907ae792d2297"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/eks-core-services/terragrunt.hcl","sha":"b8d6845c4bbca33df0a3cde51cbe1ef597095050"}]},{"name":"k8s-applications-namespace","children":[{"name":"README.md","path":"main/us-east-1/stage/services/k8s-applications-namespace/README.md","sha":"c96645baedf7aba16fc04d003608c61f9353ff4a"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/k8s-applications-namespace/terragrunt.hcl","sha":"dbd60d465e5cbb46c8a9d21620dca06f9b70dd63"}]},{"name":"k8s-sample-app-backend-acme","children":[{"name":"README.md","path":"main/us-east-1/stage/services/k8s-sample-app-backend-acme/README.md","sha":"430e8d870a1f1895093df8cb4e88e0bf2bb82bc1"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/k8s-sample-app-backend-acme/terragrunt.hcl","sha":"479f85df9855c21e4f095d6251ce4ca6d127b08c"}]},{"name":"k8s-sample-app-frontend-acme","children":[{"name":"README.md","path":"main/us-east-1/stage/services/k8s-sample-app-frontend-acme/README.md","sha":"3efad94b3379996e29355319fbe2de5c426c71dc"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/k8s-sample-app-frontend-acme/terragrunt.hcl","sha":"e0035433fce291da1ce64e77370c20790a4f063d"}]},{"name":"sample-app-backend-acme-asg","children":[{"name":"README.md","path":"main/us-east-1/stage/services/sample-app-backend-acme-asg/README.md","sha":"e2d00c960fa47118b3010550ecddf1133518d5fa"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/sample-app-backend-acme-asg/terragrunt.hcl","sha":"91940573b9a659202289c6815bd9871e50ac4d20"}]},{"name":"sample-app-backend-acme","children":[{"name":"README.md","path":"main/us-east-1/stage/services/sample-app-backend-acme/README.md","sha":"4d0bc076e9d8a51bde996c7c9f77e91bcc3e6125"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/sample-app-backend-acme/terragrunt.hcl","sha":"e240269caa4c5e60e932ebed487cf688a4c22227"}]},{"name":"sample-app-beanstalk","children":[{"name":"README.md","path":"main/us-east-1/stage/services/sample-app-beanstalk/README.md","sha":"1b3f68cb5baac277414f45585221f7048b801c26"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/sample-app-beanstalk/terragrunt.hcl","sha":"4deb3dbc95ed927e33211e473868915c1f86b5b3"}]},{"name":"sample-app-frontend-acme-asg","children":[{"name":"README.md","path":"main/us-east-1/stage/services/sample-app-frontend-acme-asg/README.md","sha":"c4df19131aafdf152f08998a2d1121ccd58c4207"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/sample-app-frontend-acme-asg/terragrunt.hcl","sha":"1d8aaccc8608aa1c2b46338c592a10f27e5b3aea"}]},{"name":"sample-app-frontend-acme","children":[{"name":"README.md","path":"main/us-east-1/stage/services/sample-app-frontend-acme/README.md","sha":"20e39909320df4775e21dd2cea70f3dabdd94c1e"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/sample-app-frontend-acme/terragrunt.hcl","sha":"2597d32b7c9d865e9f3701aa7c02a30ee4deeb01"}]},{"name":"static-website","children":[{"name":"README.md","path":"main/us-east-1/stage/services/static-website/README.md","sha":"16d262eab6ca158ae60d84010bc4804a948673cf"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/services/static-website/terragrunt.hcl","sha":"9a9cb3c9830902ef05fd497bfd21028a7fac38df"}]}]},{"name":"vpc","children":[{"name":"README.md","path":"main/us-east-1/stage/vpc/README.md","sha":"d1e3f82de82c4b8f4eaca81b3a8ec63ed040a0b5"},{"name":"terragrunt.hcl","path":"main/us-east-1/stage/vpc/terragrunt.hcl","sha":"c2429ca5412fd6f0ff00e89dc4a1541e46b07d00"}]}]}]}]}]},"detailsContent":"<h1 class=\"preview__body--title\" id=\"build-tests-and-deployment-ci-cd\">Build, tests, and deployment (CI/CD)</h1><div class=\"preview__body--border\"></div><p>In the previous section, you <a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme/_docs/05-dev-environment.md\" class=\"preview__body--description--blue\">ran the app in the dev environment</a>, made some changes to the code,\nand committed those changes to Git. Now it's time to see how you deploy your changes to AWS.</p>\n<ul>\n<li><a href=\"#deploying-app-changes\" class=\"preview__body--description--blue\">Deploying app changes</a>: how to deploy changes to application code, such as a Ruby, Python,\nor Java web service packaged with Packer or Docker.</li>\n<li><a href=\"#deploying-infrastructure-changes\" class=\"preview__body--description--blue\">Deploying infrastructure changes</a>: how to deploy changes to infrastructure code,\nsuch as Terraform modules that configure your VPCs, databases, DNS settings, etc.</li>\n</ul>\n<h2 class=\"preview__body--subtitle\" id=\"deploying-app-changes\">Deploying app changes</h2>\n<p>Changes to your apps are deployed via an automated Continuous Integration (CI) and Continuous Delivery (CD) pipeline:</p>\n<ul>\n<li><a href=\"#trigger-a-build\" class=\"preview__body--description--blue\">Trigger a build</a></li>\n<li><a href=\"#build-and-test-the-code\" class=\"preview__body--description--blue\">Build and test the code</a></li>\n<li><a href=\"#package-the-code\" class=\"preview__body--description--blue\">Package the code</a></li>\n<li><a href=\"#deploy-the-code\" class=\"preview__body--description--blue\">Deploy the code</a></li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"trigger-a-build\">Trigger a build</h3>\n<ul>\n<li>\n<p>We have configured CircleCi to run a build on every commit and new tag in your Git repos.</p>\n</li>\n<li>\n<p>Note <em>only</em> changes in version control can kick off a CircleCi build; there is no way to trigger one manually!</p>\n</li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"build-and-test-the-code\">Build and test the code</h3>\n<ul>\n<li>\n<p>CircleCi is configured to build and test your code using a <code>circle.yml</code> file in the root of your repo. Check out the\n<a href=\"https://circleci.com/docs/1.0/configuration/\" class=\"preview__body--description--blue\" target=\"_blank\">Configuring CircleCI docs</a> for details on what you can configure\nwith the <code>circle.yml</code> file.</p>\n</li>\n<li>\n<p>Any build steps should typically go into <code>compile</code> section of <code>circle.yml</code>.</p>\n</li>\n<li>\n<p>Test steps should typically go into the <code>test</code> section of <code>circle.yml</code>.</p>\n</li>\n<li>\n<p>If any of the build steps fails, the entire build will fail, and the followers of that repo will get email\nnotifications.</p>\n</li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"package-the-code\">Package the code</h3>\n<p>We package the code as follows:</p>\n<ul>\n<li>Build a new Docker image for the app</li>\n<li>Tag the image with the Git revision (the sha1 hash) of the commit that triggered the build. This makes it easy to\ntrack Docker images back to the commits they contain.</li>\n<li>Push the image to <a href=\"https://aws.amazon.com/ecr/\" class=\"preview__body--description--blue\" target=\"_blank\">Amazon ECR</a></li>\n<li>You can now deploy this new Docker image</li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"deploy-the-code\">Deploy the code</h3>\n<p>The <code>deployment</code> section of <code>circle.yml</code> configures the following deployment settings:</p>\n<ul>\n<li>Commits to the master branch are automatically deployed to staging.</li>\n<li>Tags of the format <code>release-xxx</code> are automatically deployed to production.</li>\n</ul>\n<p>The automated deployment process works as follows:</p>\n<ol>\n<li>Git clone the <a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme\" class=\"preview__body--description--blue\">infrastructure-live-acme</a> repo.</li>\n<li>Update the <code>version</code> property in the service's <code>terragrunt.hcl</code> file to the new Docker image tag.</li>\n<li><code>git commit</code> and <code>git push</code> the changes to the <code>infrastructure-live-acme</code> repo.</li>\n<li>Run <code>terragrunt apply</code> on the Terraform code to deploy the changes.</li>\n</ol>\n<h2 class=\"preview__body--subtitle\" id=\"deploying-infrastructure-changes\">Deploying infrastructure changes</h2>\n<p>Deploying app changes is fairly easy, as all app deployments are roughly the same, and the cost of an error is fairly\nsmall. Deploying arbitrary infrastructure changes is more complicated. Due to the complexity and risks involved (e.g.,\nan apply deployment going wrong usually does little damage, whereas an infrastructure deployment going wrong could, for\nexample, delete a database!), we do not have a fully automated CI/CD pipeline for deploying infrastructure changes\n(note: Gruntwork is currently working on it; email <a href=\"mailto:support@gruntwork.io\" class=\"preview__body--description--blue\" target=\"_blank\">support@gruntwork.io</a> for details), so\nhere's the process you should use:</p>\n<ul>\n<li><a href=\"#check-out-the-infrastructure-repos\" class=\"preview__body--description--blue\">Check out the infrastructure repos</a></li>\n<li><a href=\"#update-the-code\" class=\"preview__body--description--blue\">Update the code</a></li>\n<li><a href=\"#test-your-changes-in-a-sandbox-environment\" class=\"preview__body--description--blue\">Test your changes in a sandbox environment</a></li>\n<li><a href=\"#submit-a-pull-request\" class=\"preview__body--description--blue\">Submit a pull request</a></li>\n<li><a href=\"#merge-in-your-changes\" class=\"preview__body--description--blue\">Merge in your changes</a></li>\n<li><a href=\"#release-a-new-version\" class=\"preview__body--description--blue\">Release a new version</a></li>\n<li><a href=\"#promote-the-new-version-to-prod\" class=\"preview__body--description--blue\">Promote the new version to prod</a></li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"check-out-the-infrastructure-repos\">Check out the infrastructure repos</h3>\n<p>All of the infrastructure code lives in the <a href=\"/repos/infrastructure-modules-acme\" class=\"preview__body--description--blue\">infrastructure-modules-acme</a>\nand <a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme\" class=\"preview__body--description--blue\">infrastructure-live-acme</a> repos (see\n<a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme/_docs/04-how-code-is-organized.md\" class=\"preview__body--description--blue\">How the code is organized</a>).</p>\n<pre>git <span class=\"hljs-keyword\">clone</span> <span class=\"hljs-title\">git</span>@github.com:gruntwork-io/<span class=\"hljs-literal\">inf</span>rastructure-modules-acme.git\ngit <span class=\"hljs-keyword\">clone</span> <span class=\"hljs-title\">git</span>@github.com:gruntwork-io/<span class=\"hljs-literal\">inf</span>rastructure-live-acme.git\n</pre>\n<h3 class=\"preview__body--subtitle\" id=\"update-the-code\">Update the code</h3>\n<p>Make the appropriate changes in either infrastructure-modules-acme or infrastructure-live-acme.</p>\n<ul>\n<li>\n<p>If you want to change some settings for an existing module in an environment, make those changes in the\n<code>terragrunt.hcl</code> files in infrastructure-live-acme.</p>\n</li>\n<li>\n<p>If you want to change how the underlying modules work or add a new module, make those changes in\ninfrastructure-modules-acme. Note that after those changes are committed, you'll need to release a new\nversion of infrastructure-modules-acme and update infrastructure-live-acme to use that new version\n(both of these steps are described below).</p>\n</li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"test-your-changes-in-a-sandbox-environment\">Test your changes in a sandbox environment</h3>\n<p>Every company should have a "sandbox" environment where developers can make Terraform changes without:</p>\n<ol>\n<li>Having to commit those changes to version control.</li>\n<li>Having to worry that if they break something, it will cause problems for the rest of the team.</li>\n</ol>\n<p>While the company is small, a single shared sandbox environment is usually enough. As you grow bigger, you may need\nmore to avoid conflicts. The gold standard is to have each developer spin up their own completely isolated environment\nfor testing and to tear it down when they are done. Since all of your infrastructure is defined as code, you should be\nable to automate this process!</p>\n<p>Once you've figured out where you are going to test, to apply your changes, do the following:</p>\n<ol>\n<li>\n<p>Install <a href=\"/repos/terragrunt\" class=\"preview__body--description--blue\">Terragrunt</a>. We use Terragrunt to keep the Terraform code as\nDRY as possible, so you'll need Terragrunt to make changes. See <a href=\"/repos/terragrunt#keep-your-terraform-code-dry\" class=\"preview__body--description--blue\">Keep your Terraform code\nDRY</a> and <a href=\"/repos/terragrunt#keep-your-remote-state-configuration-dry\" class=\"preview__body--description--blue\">Keep your remote state\nconfiguration DRY</a> for\nbackground info on how we're taking advantage of Terragrunt.</p>\n</li>\n<li>\n<p>Configure your AWS credentials as <a href=\"http://docs.aws.amazon.com/cli/latest/userguide/cli-environment.html\" class=\"preview__body--description--blue\" target=\"_blank\">environment variables</a>.</p>\n</li>\n<li>\n<p>For some modules, you will also need to install <a href=\"/repos/kubergrunt\" class=\"preview__body--description--blue\">kubergrunt</a> and\n<a href=\"https://kubernetes.io/docs/tasks/tools/install-kubectl/\" class=\"preview__body--description--blue\" target=\"_blank\">kubectl</a>.\n<code>kubergrunt</code> is a collection of scripts packaged as a Go binary that provides certain functionality to make it easier\nto work with Kubernetes and EKS. <code>kubectl</code> is a comprehensive CLI for interacting with Kubernetes. You can check out\nthe README for any infrastructure code to see if it requires them.</p>\n</li>\n<li>\n<p>Any modules that deploy applications to EKS will also need access to Helm. You can use the <code>kubergrunt helm configure</code> command to setup access on your machine. See the relevant section in <a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme/_docs/09-accounts-and-auth.md#helm\" class=\"preview__body--description--blue\">section 8 "Accounts and Auth" of\nthis document</a> for more info. You can also look at the <a href=\"/repos/kubergrunt#helm-configure\" class=\"preview__body--description--blue\">command\ndocumentation</a> for more details on the command itself.</p>\n</li>\n<li>\n<p>Go into the appropriate folder in infrastructure-live-acme for your sandbox environment.</p>\n</li>\n<li>\n<p>Run <code>terragrunt plan</code> to see what impact your changes will have.</p>\n</li>\n<li>\n<p>If the plan looks good, run <code>terragrunt apply</code> to deploy those changes.</p>\n</li>\n</ol>\n<p>Note: if you've made changes in infrastructure-modules-acme, use the <code>--terragrunt-source</code> parameter to point\nTerragrunt at your local checkout of infrastructure-modules-acme. E.g., if you checked out\ninfrastructure-modules-acme to <code>~/source/infrastructure-modules-acme</code>, then you can test your changes\nlocally, without creating a new release of infrastructure-modules-acme, by running\n<code>terragrunt plan --terragrunt-source ~/source/infrastructure-modules-acme/my-module</code> and\n<code>terragrunt apply --terragrunt-source ~/source/infrastructure-modules-acme/my-module</code>.</p>\n<p>Note: you can also create <em>automated</em> tests for your modules using the\n<a href=\"/repos/terratest\" class=\"preview__body--description--blue\">Terratest</a> library. Check out the <code>test</code> folder in any Gruntwork module\nfor examples, such as the <a href=\"/repos/module-ecs/test\" class=\"preview__body--description--blue\">module-ecs tests</a> and\n<a href=\"/repos/module-asg/test\" class=\"preview__body--description--blue\">module-asg tests</a>.</p>\n<h3 class=\"preview__body--subtitle\" id=\"submit-a-pull-request\">Submit a pull request</h3>\n<p>Once your code is working in the sandbox environment:</p>\n<ul>\n<li>\n<p>Commit your changes to a new branch</p>\n</li>\n<li>\n<p>Submit a pull request so other team members can review your code.</p>\n</li>\n<li>\n<p>If you only made changes in the sandbox environment in infrastructure-live-acme, then your pull request\nshould include analogous changes in all the other environments in infrastructure-live-acme (but, of course,\ndon't apply those changes yet!).</p>\n</li>\n<li>\n<p>If you made changes in infrastructure-modules-acme, then submit the pull request in that repo first. After\nthat pull request has been merged and a new version released, you can submit a pull request (or multiple pull\nrequests) in infrastructure-live-acme updating all environments to use the new version. All of this is\ndescribed in the next few sections.</p>\n</li>\n</ul>\n<h3 class=\"preview__body--subtitle\" id=\"merge-in-your-changes\">Merge in your changes</h3>\n<p>If the code looks good, merge your changes into the master branch. The basic idea is that master should always reflect\nwhat's deployed in prod, so the next step is to deploy the code!</p>\n<h3 class=\"preview__body--subtitle\" id=\"release-a-new-version\">Release a new version</h3>\n<p>If your code changes included a change to infrastructure-modules-acme, you should release a new version by\ncreating a new Git tag. If you use GitHub, you can do this by creating a new release on the releases page.\nAlternatively, you can do it with the Git CLI:</p>\n<pre>git <span class=\"hljs-keyword\">tag</span> <span class=\"hljs-title\">-a</span> v0.<span class=\"hljs-number\">0.2</span> -m <span class=\"hljs-string\">\"added module foo\"</span>\ngit push --follow-tags\n</pre>\n<h3 class=\"preview__body--subtitle\" id=\"promote-the-new-version-to-prod\">Promote the new version to prod</h3>\n<p>You can now begin deploying this new, immutable version of your infrastructure through all of your environments:\ne.g, qa -> stage -> prod. There are two ways to do this:</p>\n<ol>\n<li>\n<p>You can submit a single pull request in infrastructure-live-acme to update all the environments. Once its\nmerged, you can run <code>terragrunt plan</code> and <code>terragrunt apply</code> in each environment to deploy the changes.</p>\n</li>\n<li>\n<p>If you need to test the changes in each environment before deploying to the next environment, you may want to do a\nseparate pull request for each environment, and merge and deploy them one at a time.</p>\n</li>\n</ol>\n<p>As you deploy each environment, make sure to carefully check that the <code>plan</code> output matches what you expect!</p>\n<h2 class=\"preview__body--subtitle\" id=\"next-steps\">Next steps</h2>\n<p>Now that your code is built, tested, and deployed, it's time to take a look at <a href=\"/repos/v0.0.1-08112020/infrastructure-live-acme/_docs/07-monitoring-alerting-logging.md\" class=\"preview__body--description--blue\">Monitoring, Alerting, and\nLogging</a>.</p>\n","repoName":"infrastructure-live-acme","repoRef":"v0.0.1-01172020","serviceDescriptor":{"serviceName":"Single-account Reference Architecture","serviceRepoName":"infrastructure-live-acme","serviceRepoOrg":"gruntwork-io","cloudProviders":["aws"],"description":"End-to-end tech stack designed to deploy into a single AWS account. Includes VPCs, EKS, ALBs, CI / CD, monitoring, alerting, VPN, DNS, and more.","imageUrl":"grunt.png","licenseType":"subscriber","technologies":["Terraform","Go","Bash","Python"],"compliance":[],"tags":[""]},"serviceCategoryName":"Reference Architecture","fileName":"06-ci-cd.md","filePath":"/_docs/06-ci-cd.md","title":"Repo Browser: Single-account Reference Architecture","description":"Browse the repos in the Gruntwork Infrastructure as Code Library."}
_docs
.gitignore
