├── .gitignore
├── Jenkinsfile
├── README.md
├── main.go
├── main.tf
├── main_test.go
├── schema.png
└── variables.tf


/.gitignore:
--------------------------------------------------------------------------------
1 | .terraform
2 | *.zip
3 | *.tfstate
4 | *.tfstate.backup
5 | main


--------------------------------------------------------------------------------
/Jenkinsfile:
--------------------------------------------------------------------------------
 1 | def bucket = 'deployment-packages-mlabouardy'
 2 | def functionName = 'Fibonacci'
 3 | def region = 'eu-west-3'
 4 | 
 5 | node('slaves'){
 6 |     stage('Checkout'){
 7 |         checkout scm
 8 |     }
 9 | 
10 |     stage('Test'){
11 |         sh 'go get -u github.com/golang/lint/golint'
12 |         sh 'go get -t ./...'
13 |         //sh 'golint -set_exit_status'
14 |         sh 'go vet .'
15 |         sh 'go test .'
16 |     }
17 | 
18 |     stage('Build'){
19 |         sh 'GOOS=linux go build -o main main.go'
20 |         sh "zip ${commitID()}.zip main"
21 |     }
22 | 
23 |     stage('Push'){
24 |         sh "aws s3 cp ${commitID()}.zip s3://${bucket}"
25 |     }
26 | 
27 |     stage('Deploy'){
28 |         sh "aws lambda update-function-code --function-name ${functionName} \
29 |                 --s3-bucket ${bucket} \
30 |                 --s3-key ${commitID()}.zip \
31 |                 --region ${region}"
32 |     }
33 | 
34 |     if (env.BRANCH_NAME == 'master') {
35 |         stage('Publish') {
36 |             def lambdaVersion = sh(
37 |                 script: "aws lambda publish-version --function-name ${functionName} --region ${region} | jq -r '.Version'",
38 |                 returnStdout: true
39 |             )
40 |             sh "aws lambda update-alias --function-name ${functionName} --name production --region ${region} --function-version ${lambdaVersion}"
41 |         }
42 |     }
43 | }
44 | 
45 | def commitID() {
46 |     sh 'git rev-parse HEAD > .git/commitID'
47 |     def commitID = readFile('.git/commitID').trim()
48 |     sh 'rm .git/commitID'
49 |     commitID
50 | }


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # CI/CD for Lambda Functions with Jenkins
2 | 
3 | <p align="center">
4 |   <img src="schema.png"/>
5 | </p>
6 | 


--------------------------------------------------------------------------------
/main.go:
--------------------------------------------------------------------------------
 1 | package main
 2 | 
 3 | import (
 4 | 	"errors"
 5 | 
 6 | 	"github.com/aws/aws-lambda-go/lambda"
 7 | )
 8 | 
 9 | func fibonacci(n int) int {
10 | 	if n <= 1 {
11 | 		return n
12 | 	}
13 | 	return fibonacci(n-1) + fibonacci(n-2)
14 | }
15 | 
16 | func handler(n int) (int, error) {
17 | 	if n < 0 {
18 | 		return -1, errors.New("Input must be a positive number")
19 | 	}
20 | 	return fibonacci(n), nil
21 | }
22 | 
23 | func main() {
24 | 	lambda.Start(handler)
25 | }
26 | 


--------------------------------------------------------------------------------
/main.tf:
--------------------------------------------------------------------------------
  1 | // Provider configuration
  2 | provider "aws" {
  3 |   region = "${var.region}"
  4 | }
  5 | 
  6 | // S3 bucket
  7 | resource "aws_s3_bucket" "bucket" {
  8 |   bucket = "${var.bucket}"
  9 |   acl    = "private"
 10 | }
 11 | 
 12 | // Jenkins slave instance profile
 13 | resource "aws_iam_instance_profile" "worker_profile" {
 14 |   name = "JenkinsWorkerProfile"
 15 |   role = "${aws_iam_role.worker_role.name}"
 16 | }
 17 | 
 18 | resource "aws_iam_role" "worker_role" {
 19 |   name = "JenkinsBuildRole"
 20 |   path = "/"
 21 | 
 22 |   assume_role_policy = <<EOF
 23 | {
 24 |     "Version": "2012-10-17",
 25 |     "Statement": [
 26 |         {
 27 |             "Action": "sts:AssumeRole",
 28 |             "Principal": {
 29 |                "Service": "ec2.amazonaws.com"
 30 |             },
 31 |             "Effect": "Allow",
 32 |             "Sid": ""
 33 |         }
 34 |     ]
 35 | }
 36 | EOF
 37 | }
 38 | 
 39 | resource "aws_iam_policy" "s3_policy" {
 40 |   name = "PushToS3Policy"
 41 |   path = "/"
 42 | 
 43 |   policy = <<EOF
 44 | {
 45 |   "Version": "2012-10-17",
 46 |   "Statement": [
 47 |     {
 48 |       "Action": [
 49 |         "s3:PutObject",
 50 |         "s3:GetObject"
 51 |       ],
 52 |       "Effect": "Allow",
 53 |       "Resource": "${aws_s3_bucket.bucket.arn}/*"
 54 |     }
 55 |   ]
 56 | }
 57 | EOF
 58 | }
 59 | 
 60 | resource "aws_iam_policy" "lambda_policy" {
 61 |   name = "DeployLambdaPolicy"
 62 |   path = "/"
 63 | 
 64 |   policy = <<EOF
 65 | {
 66 |   "Version": "2012-10-17",
 67 |   "Statement": [
 68 |     {
 69 |       "Action": [
 70 |         "lambda:UpdateFunctionCode",
 71 |         "lambda:PublishVersion",
 72 |         "lambda:UpdateAlias"
 73 |       ],
 74 |       "Effect": "Allow",
 75 |       "Resource": "*"
 76 |     }
 77 |   ]
 78 | }
 79 | EOF
 80 | }
 81 | 
 82 | resource "aws_iam_role_policy_attachment" "worker_s3_attachment" {
 83 |   role       = "${aws_iam_role.worker_role.name}"
 84 |   policy_arn = "${aws_iam_policy.s3_policy.arn}"
 85 | }
 86 | 
 87 | resource "aws_iam_role_policy_attachment" "worker_lambda_attachment" {
 88 |   role       = "${aws_iam_role.worker_role.name}"
 89 |   policy_arn = "${aws_iam_policy.lambda_policy.arn}"
 90 | }
 91 | 
 92 | // Lambda IAM role
 93 | resource "aws_iam_role" "lambda_role" {
 94 |   name = "FibonacciFunctionRole"
 95 |   path = "/"
 96 | 
 97 |   assume_role_policy = <<EOF
 98 | {
 99 |     "Version": "2012-10-17",
100 |     "Statement": [
101 |         {
102 |             "Action": "sts:AssumeRole",
103 |             "Principal": {
104 |                "Service": "lambda.amazonaws.com"
105 |             },
106 |             "Effect": "Allow",
107 |             "Sid": ""
108 |         }
109 |     ]
110 | }
111 | EOF
112 | }
113 | 
114 | // Lambda function
115 | resource "aws_lambda_function" "function" {
116 |   filename      = "deployment.zip"
117 |   function_name = "Fibonacci"
118 |   role          = "${aws_iam_role.lambda_role.arn}"
119 |   handler       = "main"
120 |   runtime       = "go1.x"
121 | }
122 | 


--------------------------------------------------------------------------------
/main_test.go:
--------------------------------------------------------------------------------
 1 | package main
 2 | 
 3 | import (
 4 | 	"errors"
 5 | 	"testing"
 6 | 
 7 | 	"github.com/stretchr/testify/assert"
 8 | )
 9 | 
10 | func TestFibonnaciInputLessOrEqualToOne(t *testing.T) {
11 | 	assert.Equal(t, 1, fibonacci(1))
12 | }
13 | 
14 | func TestFibonnaciInputGreatherThanOne(t *testing.T) {
15 | 	assert.Equal(t, 13, fibonacci(7))
16 | }
17 | 
18 | func TestHandlerNegativeNumber(t *testing.T) {
19 | 	responseNumber, responseError := handler(-1)
20 | 	assert.Equal(t, -1, responseNumber)
21 | 	assert.Equal(t, errors.New("Input must be a positive number"), responseError)
22 | }
23 | 
24 | func TestHandlerPositiveNumber(t *testing.T) {
25 | 	responseNumber, responseError := handler(5)
26 | 	assert.Equal(t, 5, responseNumber)
27 | 	assert.Nil(t, responseError)
28 | }
29 | 


--------------------------------------------------------------------------------
/schema.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mlabouardy/lambda-ci/255f72eb6424a9e92947850d7b13f1e1a9c79dde/schema.png


--------------------------------------------------------------------------------
/variables.tf:
--------------------------------------------------------------------------------
1 | variable "region" {
2 |   default = "eu-west-3"
3 | }
4 | 
5 | variable "bucket" {
6 |   default = "deployment-packages-mlabouardy"
7 | }
8 | 


--------------------------------------------------------------------------------