boozallen / devsecops-example-helloworld Goto Github PK
View Code? Open in Web Editor NEWExample of a CI/CD Pipeline using Jenkins Multi-branch Pipelines hosted at AWS
Example of a CI/CD Pipeline using Jenkins Multi-branch Pipelines hosted at AWS
Hello,
I am kind of a noob to cloudformation, learning and trying out the example as I progress. So, apologies in advance, if this is something too obvious.
I was able to get as far in the installation as creating the stack with network/hello-world using the listed policy. However, the step of updating the stack with security/hello-world(https://github.com/boozallen/devsecops-example-helloworld/blob/master/cloud-formation/security/helloworld/main.yml) fails with the error
An error occurred (InsufficientCapabilitiesException) when calling the UpdateStack operation: Requires capabilities : [CAPABILITY_NAMED_IAM]
I attempted adding the --capabilities CAPABILITY_IAM to my CLI as below, but that didn't help.
aws cloudformation update-stack --stack-name myteststack --template-url https://s3.amazonaws.com/sushanttest/cloud-formation/security/helloworld/main.yml --parameters ParameterKey=Environment,ParameterValue=dev ParameterKey=VPCCIDRBlock,ParameterValue=172.27.10.0/24 ParameterKey=PrivilegedCIDR1,ParameterValue=172.27.0.10 ParameterKey=ProvisioningBucket,ParameterValue=resourcesdevsecops --capabilities CAPABILITY_IAM
Is there a specific IAM role that I need to create separately? It should be part of the stack, right?
Thanks in advance
Hi,
I can't get pass the last step of creating the jenkins app. I keep getting this error that the configuration failed. I verify that I was able to access the S3 bucket install scripts, but now I do not know which part of the configuration is failing. Any help would be greatly appreciated.
09:02:38 UTC-0700 | ROLLBACK_IN_PROGRESS | AWS::CloudFormation::Stack | DSO-shared-jenkins-app | The following resource(s) failed to create: [InstanceIsReady]. . Rollback requested by user. |
---|---|---|---|---|
Physical ID:arn:aws:cloudformation:us-west-2:298161602238:stack/DSO-shared-jenkins-app/bf060ca0-da00-11e8-bb27-024f59caef00 | ||||
Client Request Token:Console-CreateStack-c3960ea4-9e05-42bf-931d-87af29201576 |
09:02:37 UTC-0700 | CREATE_FAILED | AWS::CloudFormation::WaitCondition | InstanceIsReady | WaitCondition received failed message: 'Configuration failed.' for uniqueId: i-0dd018270a4a711ad |
---|---|---|---|---|
Physical ID:arn:aws:cloudformation:us-west-2:298161602238:stack/DSO-shared-jenkins-app/bf060ca0-da00-11e8-bb27-024f59caef00/InstanceReadyHandle | ||||
Client Request Token:Console-CreateStack-c3960ea4-9e05-42bf-931d-87af29201576 | ||||
08:56:01 UTC-0700 | CREATE_COMPLETE | AWS::EC2::Instance | Instance |
I was able to Run the cloud-formation stack in helloworld/app using the listed policy with the Environment and SecurityContext value as dev. The change set shows status as completed. But no ec2 instance is created. Don't see any error. I tried both using CLI and GUI with same result. Attached is the image of my changeset.
Looks I am missing something obvious. But can't pinpoint it as yet.
Thanks in advance
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.