【AWS】DevOps（CI/CD）の導入手順（Angular、Git、CodePipeline、CodeCommit、CodeBuild、CodeDeploy、Auto Scaling、ALB の組み合わせ）

c:\work>cd my-angular-project

c:\work\my-angular-project>git remote add origin https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/MyAngularRepo01

c:\work\my-angular-project>git push origin master 
Enumerating objects: 56, done. 
Counting objects: 100% (56/56), done. 
Delta compression using up to 8 threads 
Compressing objects: 100% (54/54), done. 
Writing objects: 100% (56/56), 140.03 KiB | 5.83 MiB/s, done. 
Total 56 (delta 10), reused 0 (delta 0), pack-reused 0 
To https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/MyAngularRepo01 
 * [new branch]      master -> master 
 
c:\work\my-angular-project> 

C:\work\my-angular-project> git config -l 
diff.astextplain.textconv=astextplain 
filter.lfs.clean=git-lfs clean — %f 
filter.lfs.smudge=git-lfs smudge — %f 
filter.lfs.process=git-lfs filter-process 
filter.lfs.required=true 
http.sslbackend=openssl 
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt 
core.autocrlf=true 
core.fscache=true 
core.symlinks=false 
pull.rebase=false 
credential.helper=manager-core　←　credential.helper 設定が有効になっていて、認証情報がキャッシュ、またはファイル保存されています。 
credential.https://dev.azure.com.usehttppath=true 
init.defaultbranch=master 
core.editor=”C:\Users\xxxx\AppData\Local\Programs\Microsoft VS Code\Code.exe” –wait 
user.email=xxxxxxx@gmail.com 
user.name=xxxxxxx 
core.repositoryformatversion=0 
core.filemode=true 
core.bare=false 
core.logallrefupdates=true 
core.ignorecase=true 
core.precomposeunicode=true 
remote.origin.url=https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/xxxxxxxxxx 
remote.origin.fetch=+refs/heads/*:refs/remotes/origin/* 
PS C:\work\my-angular-project> 

[diff “astextplain”]         
    textconv = astextplain     
[filter “lfs”]         
    clean = git-lfs clean — %f     
    smudge = git-lfs smudge — %f     
    process = git-lfs filter-process     
    required = true     
[http]         
    sslBackend = openssl     
    sslCAInfo = C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt     
[core]         
    autocrlf = true     
    fscache = true     
    symlinks = false     
[pull]         
    rebase = false     
[credential]         
    helper = manager-core　←　この helper の行を削除します。     
[credential “https://dev.azure.com”]         
    useHttpPath = true     
[init]         
    defaultBranch = master     

[diff “astextplain”]     
    textconv = astextplain 
[filter “lfs”]     
    clean = git-lfs clean — %f 
    smudge = git-lfs smudge — %f 
    process = git-lfs filter-process 
    required = true 
[http]     
    sslBackend = openssl 
    sslCAInfo = C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt 
[core]     
    autocrlf = true 
    fscache = true 
    symlinks = false 
[pull]     
    rebase = false 
[credential]     
     
[credential “https://dev.azure.com”]     
    useHttpPath = true 
[init]     
    defaultBranch = master 

$ git push origin master

version: 0.2 
phases: 
  install: 
    runtime-versions: 
      nodejs: 12 
    commands: 
      – npm install -g @angular/cli@9.0.6 
  pre_build: 
    commands: 
      – npm install 
  build: 
    commands: 
      – ng build –prod 
artifacts: 
  base-directory: dist/my-angular-project 
  files: 
    – ‘**/*’ 

    “Version”: “2012-10-17”, 
    “Statement”: [ 
        { 
            “Action”: [ 
                “s3:GetObject”, 
                “s3:GetObjectVersion”, 
                “s3:ListBucket” 
            ], 
            “Effect”: “Allow”, 
            “Resource”: “*” 
        } 
    ] 
}

[ec2-user@ip-10-0-10-234 ~]$ sudo su –
[root@ip-10-0-10-234 ~]# yum update

[root@ip-10-0-10-234 ~]# yum install ruby

[root@ip-10-0-10-234 ~]# wget https://aws-codedeploy-ap-northeast-1.s3.ap-northeast-1.amazonaws.com/latest/install

[root@ip-10-0-10-234 ~]# chmod +x ./install

[root@ip-10-0-10-234 ~]# ./install auto

[root@ip-10-0-10-234 ~]# service codedeploy-agent status
The AWS CodeDeploy agent is running as PID 7737
[root@ip-10-0-10-234 ~]#

[root@ip-10-0-10-234 ~]# amazon-linux-extras install nginx1

[root@ip-10-0-10-234 ~]# systemctl status nginx 
● nginx.service – The nginx HTTP and reverse proxy server 
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled) 
   Active: inactive (dead) 
[root@ip-10-0-10-234 ~]# 

[root@ip-10-0-10-234 ~]# systemctl start nginx

[root@ip-10-0-10-234 ~]# systemctl status nginx 
● nginx.service – The nginx HTTP and reverse proxy server 
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled) 
   Active: active (running) since Tue 2021-09-28 14:54:17 UTC; 2s ago 
  Process: 7978 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS) 
  Process: 7974 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS) 
  Process: 7973 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS) 
 Main PID: 7980 (nginx) 
   CGroup: /system.slice/nginx.service 
           tq7980 nginx: master process /usr/sbin/nginx 
           mq7981 nginx: worker process 
 
Sep 28 14:54:17 ip-10-0-10-234.ap-northeast-1.compute.internal systemd[1]: Starting The nginx HTTP and rever…. 
Sep 28 14:54:17 ip-10-0-10-234.ap-northeast-1.compute.internal nginx[7974]: nginx: the configuration file /e…k 
Sep 28 14:54:17 ip-10-0-10-234.ap-northeast-1.compute.internal nginx[7974]: nginx: configuration file /etc/n…l 
Sep 28 14:54:17 ip-10-0-10-234.ap-northeast-1.compute.internal systemd[1]: Started The nginx HTTP and revers…. 
Hint: Some lines were ellipsized, use -l to show in full. 
[root@ip-10-0-10-234 ~]# 

[root@ip-10-0-10-234 ~]# systemctl enable nginx 
Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service. 
[root@ip-10-0-10-234 ~]#  

[root@ip-10-0-10-234 ~]# systemctl list-unit-files | grep nginx 
nginx.service                                 enabled 
[root@ip-10-0-10-234 ~]# 

[root@ip-10-0-10-234 ~]# mkdir -p /var/www/my-angular-project 

[root@ip-10-0-10-234 ~]# vi /etc/nginx/nginx.conf 
 
 
    server { 
        listen       80; 
        listen       [::]:80; 
        server_name  _; 
        root         /var/www/my-angular-project; 　←　root フォルダを設定します。
 

[root@ip-10-0-10-234 ~]# systemctl restart nginx 

[root@ip-10-0-10-234 ~]# systemctl status nginx 
● nginx.service – The nginx HTTP and reverse proxy server 
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled) 
   Active: active (running) since Tue 2021-09-28 15:01:11 UTC; 4s ago 
  Process: 8068 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS) 
  Process: 8064 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS) 
  Process: 8062 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS) 
 Main PID: 8071 (nginx) 
   CGroup: /system.slice/nginx.service 
           tq8071 nginx: master process /usr/sbin/nginx 
           mq8072 nginx: worker process 
 
Sep 28 15:01:11 ip-10-0-10-234.ap-northeast-1.compute.internal systemd[1]: Stopped The nginx HTTP and revers…. 
Sep 28 15:01:11 ip-10-0-10-234.ap-northeast-1.compute.internal systemd[1]: Starting The nginx HTTP and rever…. 
Sep 28 15:01:11 ip-10-0-10-234.ap-northeast-1.compute.internal nginx[8064]: nginx: the configuration file /e…k 
Sep 28 15:01:11 ip-10-0-10-234.ap-northeast-1.compute.internal nginx[8064]: nginx: configuration file /etc/n…l 
Sep 28 15:01:11 ip-10-0-10-234.ap-northeast-1.compute.internal systemd[1]: Started The nginx HTTP and revers…. 
Hint: Some lines were ellipsized, use -l to show in full. 
[root@ip-10-0-10-234 ~]# 

version: 0.0 
os: linux 
files: 
  – source: dist/my-angular-project 
    destination: /var/www/my-angular-project　←　nginx.conf で設定した root に合わせます。
permissions: 
  – object: /var/www/my-angular-project 
    pattern: ‘**’ 
    mode: ‘0755’ 
    owner: root 
    group: root 
    type: 
      – file 
      – directory 
hooks: 
  ApplicationStart: 
    – location: deploy-scripts/application-start-hook.sh 
      timeout: 300  

#!/bin/bash

sudo service nginx restart  

{ 
    “Version”: “2012-10-17”, 
    “Statement”: [ 
        { 
            “Effect”: “Allow”, 
            “Action”: [ 
                “autoscaling:CompleteLifecycleAction”, 
                “autoscaling:DeleteLifecycleHook”, 
                “autoscaling:DescribeAutoScalingGroups”, 
                “autoscaling:DescribeLifecycleHooks”, 
                “autoscaling:PutLifecycleHook”, 
                “autoscaling:RecordLifecycleActionHeartbeat”, 
                “autoscaling:CreateAutoScalingGroup”, 
                “autoscaling:UpdateAutoScalingGroup”, 
                “autoscaling:EnableMetricsCollection”, 
                “autoscaling:DescribePolicies”, 
                “autoscaling:DescribeScheduledActions”, 
                “autoscaling:DescribeNotificationConfigurations”, 
                “autoscaling:SuspendProcesses”, 
                “autoscaling:ResumeProcesses”, 
                “autoscaling:AttachLoadBalancers”, 
                “autoscaling:AttachLoadBalancerTargetGroups”, 
                “autoscaling:PutScalingPolicy”, 
                “autoscaling:PutScheduledUpdateGroupAction”, 
                “autoscaling:PutNotificationConfiguration”, 
                “autoscaling:PutWarmPool”, 
                “autoscaling:DescribeScalingActivities”, 
                “autoscaling:DeleteAutoScalingGroup”, 
                “ec2:DescribeInstances”, 
                “ec2:DescribeInstanceStatus”, 
                “ec2:TerminateInstances”, 
                “tag:GetResources”, 
                “sns:Publish”, 
                “cloudwatch:DescribeAlarms”, 
                “cloudwatch:PutMetricAlarm”, 
                “elasticloadbalancing:DescribeLoadBalancers”, 
                “elasticloadbalancing:DescribeInstanceHealth”, 
                “elasticloadbalancing:RegisterInstancesWithLoadBalancer”, 
                “elasticloadbalancing:DeregisterInstancesFromLoadBalancer”, 
                “elasticloadbalancing:DescribeTargetGroups”, 
                “elasticloadbalancing:DescribeTargetHealth”, 
                “elasticloadbalancing:RegisterTargets”, 
                “elasticloadbalancing:DeregisterTargets” 
            ], 
            “Resource”: “*” 
        } 
    ] 
}

[root@ip-10-0-10-234 deployment-logs]# pwd 
/opt/codedeploy-agent/deployment-root/deployment-logs 
[root@ip-10-0-10-234 deployment-logs]# ls 
codedeploy-agent-deployments.log 
[root@ip-10-0-10-234 deployment-logs]# less codedeploy-agent-deployments.log 
# Logfile created on 2021-10-01 12:47:34 +0000 by logger.rb/41954 
[2021-10-01 12:47:34.755] [d-MKTGCO03D]LifecycleEvent – ApplicationStart 
[2021-10-01 12:47:34.755] [d-MKTGCO03D]Script – deploy-scripts/application-start-hook.sh 
[2021-10-01 12:47:34.841] [d-MKTGCO03D][stderr]Redirecting to /bin/systemctl restart nginx.service 
[root@ip-10-0-10-234 deployment-logs]# 

[root@ip-10-0-10-234 ~]# yum install amazon-cloudwatch-agent

[root@ip-10-0-10-234 ~]# /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-config-wizard 
============================================================= 
= Welcome to the AWS CloudWatch Agent Configuration Manager = 
============================================================= 
On which OS are you planning to use the agent? 
1. linux 
2. windows 
3. darwin 
default choice: [1]: 
1 
Trying to fetch the default region based on ec2 metadata… 
Are you using EC2 or On-Premises hosts? 
1. EC2 
2. On-Premises 
default choice: [1]: 
1 
Which user are you planning to run the agent? 
1. root 
2. cwagent 
3. others 
default choice: [1]: 
2 
Do you want to turn on StatsD daemon? 
1. yes 
2. no 
default choice: [1]: 
2 
Do you want to monitor metrics from CollectD? 
1. yes 
2. no 
default choice: [1]: 
2 
Do you want to monitor any host metrics? e.g. CPU, memory, etc. 
1. yes 
2. no 
default choice: [1]: 
2 
Do you have any existing CloudWatch Log Agent (http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AgentReference.html) configuration file to import for migration? 
1. yes 
2. no 
default choice: [2]: 
2 
Do you want to monitor any log files? 
1. yes 
2. no 
default choice: [1]: 
1 
Log file path: 
/opt/codedeploy-agent/deployment-root/deployment-logs/codedeploy-agent-deployments.log 
Log group name: 
default choice: [codedeploy-agent-deployments.log] 
 
Log stream name: 
default choice: [{instance_id}] 
 
Do you want to specify any additional log files to monitor? 
1. yes 
2. no 
default choice: [1]: 
2 
Saved config file to /opt/aws/amazon-cloudwatch-agent/bin/config.json successfully. 
Current config as follows: 
{ 
        “agent”: { 
                “run_as_user”: “cwagent” 
        }, 
        “logs”: { 
                “logs_collected”: { 
                        “files”: { 
                                “collect_list”: [ 
                                        { 
                                                “file_path”: “/opt/codedeploy-agent/deployment-root/deployment-logs/codedeploy-agent-deployments.log”, 
                                                “log_group_name”: “codedeploy-agent-deployments.log”, 
                                                “log_stream_name”: “{instance_id}” 
                                        } 
                                ] 
                        } 
                } 
        } 
} 
Please check the above content of the config. 
The config file is also located at /opt/aws/amazon-cloudwatch-agent/bin/config.json. 
Edit it manually if needed. 
Do you want to store the config in the SSM parameter store? 
1. yes 
2. no 
default choice: [1]: 
2 
Program exits now. 

[root@ip-10-0-10-234 ~]# less /opt/aws/amazon-cloudwatch-agent/bin/config.json 
{ 
        “agent”: { 
                “run_as_user”: “cwagent” 
        }, 
        “logs”: { 
                “logs_collected”: { 
                        “files”: { 
                                “collect_list”: [ 
                                        { 
                                                “file_path”: “/opt/codedeploy-agent/deployment-root/deployment-logs/codedeploy-agent-deployments.log”, 
                                                “log_group_name”: “codedeploy-agent-deployments.log”, 
                                                “log_stream_name”: “{instance_id}” 
                                        } 
                                ] 
                        } 
                } 
        } 
}

[root@ip-10-0-10-234 ~]# vi /opt/aws/amazon-cloudwatch-agent/bin/config.json 
{ 
        “agent”: { 
                “run_as_user”: “cwagent” 
        }, 
        “logs”: { 
                “logs_collected”: { 
                        “files”: { 
                                “collect_list”: [ 
                                        { 
                                                “file_path”: “/opt/codedeploy-agent/deployment-root/deployment-logs/codedeploy-agent-deployments.log”, 
                                                “log_group_name”: “codedeploy-agent-deployments.log”, 
                                                “log_stream_name”: “{instance_id}”, 
                                                “timestamp_format”: “[%Y-%m-%d %H:%M:%S.%f]”　←　この1行を追加します。
                                        } 
                                ] 
                        } 
                } 
        } 
} 

[root@ip-10-0-10-234 ~]# /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a fetch-config -m ec2 -c file:/opt/aws/amazon-cloudwatch-agent/bin/config.json -s 
****** processing amazon-cloudwatch-agent ****** 
/opt/aws/amazon-cloudwatch-agent/bin/config-downloader –output-dir /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d –download-source file:/opt/aws/amazon-cloudwatch-agent/bin/config.json –mode ec2 –config /opt/aws/amazon-cloudwatch-agent/etc/common-config.toml –multi-config default 
Successfully fetched the config and saved in /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/file_config.json.tmp 
Start configuration validation… 
/opt/aws/amazon-cloudwatch-agent/bin/config-translator –input /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json –input-dir /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d –output /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.toml –mode ec2 –config /opt/aws/amazon-cloudwatch-agent/etc/common-config.toml –multi-config default 
2021/10/01 23:34:59 Reading json config file path: /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/file_config.json.tmp … 
Valid Json input schema. 
I! Detecting run_as_user… 
No csm configuration found. 
No metric configuration found. 
Configuration validation first phase succeeded 
/opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent -schematest -config /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.toml 
Configuration validation second phase succeeded 
Configuration validation succeeded 
amazon-cloudwatch-agent has already been stopped 
Created symlink from /etc/systemd/system/multi-user.target.wants/amazon-cloudwatch-agent.service to /etc/systemd/system/amazon-cloudwatch-agent.service. 
Redirecting to /bin/systemctl restart amazon-cloudwatch-agent.service 

[root@ip-10-0-10-234 ~]#

[root@ip-10-0-10-234 ~]# ps -ef | grep cloudwatch-agent 
cwagent   3480     1  0 23:35 ?        00:00:00 /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent -config /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.toml -envconfig /opt/aws/amazon-cloudwatch-agent/etc/env-config.json -pidfile /opt/aws/amazon-cloudwatch-agent/var/amazon-cloudwatch-agent.pid 
ec2-user  3503  3227  0 23:36 pts/0    00:00:00 grep –color=auto cloudwatch-agent 
[root@ip-10-0-10-234 ~]#

[root@ip-10-0-10-234 ~]# /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -m ec2 -a status 
{ 
  “status”: “running”, 
  “starttime”: “2021-10-01T23:35:00+0000”, 
  “configstatus”: “configured”, 
  “cwoc_status”: “stopped”, 
  “cwoc_starttime”: “”, 
  “cwoc_configstatus”: “not configured”, 
  “version”: “1.247347.4” 
} 
[root@ip-10-0-10-234 ~]#

[root@ip-10-0-10-234 ~]# sudo systemctl list-unit-files | grep cloudwatch 
amazon-cloudwatch-agent.service               enabled 
[root@ip-10-0-10-234 ~]#

[root@ip-10-0-10-234 ~]# rm -f /var/www/my-angular-project/* 
[root@ip-10-0-10-234 ~]# ls /var/www/my-angular-project/*
[root@ip-10-0-10-234 ~]#