Initial commit of source

.eslintrc.js

@@ -0,0 +1,22 @@
+module.exports = {
+  root: true,
+  // Specifies the ESLint parser
+  parser: '@typescript-eslint/parser',
+  extends: [
+    // Uses the recommended rules from @typescript-eslint/eslint-plugin
+    'plugin:@typescript-eslint/recommended',
+    'prettier',
+    // Enables eslint-plugin-prettier and eslint-config-prettier. This will display prettier errors as ESLint errors.
+    // Make sure this is always the last configuration in the extends array.
+    'plugin:prettier/recommended',
+  ],
+  parserOptions: {
+    ecmaVersion: 2018, // Allows for the parsing of modern ECMAScript features
+    sourceType: 'module', // Allows for the use of imports
+  },
+  rules: {
+    // Place to specify ESLint rules. Can be used to overwrite rules specified from the extended configs
+    // e.g. "@typescript-eslint/explicit-function-return-type": "off",
+  },
+  settings: {},
+};

.github/workflows/publish.yaml

@@ -0,0 +1,28 @@
+name: Node.js Package
+on:
+  push:
+    # Sequence of patterns matched against refs/tags
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    # Setup .npmrc file to publish to npm
+    - uses: actions/setup-node@v1
+      with:
+        node-version: '16.x'
+        registry-url: 'https://registry.npmjs.org'
+    - run: npm install
+    - run: npm run compile
+    - run: cd build && npm publish
+      env:
+        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+    # - run: npm run docs
+    # - name: Deploy docs
+    #   uses: JamesIves/[email protected]
+    #   with:
+    #     branch: gh-pages
+    #     folder: docs

.github/workflows/test.yaml

@@ -0,0 +1,23 @@
+name: "Run linting and tests"
+
+on: push
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container: ubuntu:focal
+
+    strategy:
+      matrix:
+        node-version: [16.x]
+
+    steps:
+    - uses: actions/checkout@v3
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v1
+      with:
+        node-version: ${{ matrix.node-version }}
+    - run: npm ci
+    - run: npm run lint-check
+    # - run: npm run compile
+    # - run: npm run -- docs --treatWarningsAsErrors

.gitignore

@@ -0,0 +1,115 @@
+# Typescript things
+*.d.ts
+build/
+*.js
+!jest.config.js
+!.prettierrc.js
+!.eslintrc.js
+
+# Docs
+docs/
+
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# TypeScript v1 declaration files
+typings/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variables file
+.env
+.env.test
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+
+# Next.js build output
+.next
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and *not* Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# TernJS port file
+.tern-port

.npmrc

@@ -0,0 +1,2 @@
+registry=https://registry.npmjs.org/
+tag-version-prefix=""

.nvmrc

@@ -0,0 +1 @@
+v16

.prettierrc.js

@@ -0,0 +1,15 @@
+module.exports = {
+    semi: true,
+    trailingComma: 'all',
+    singleQuote: true,
+    printWidth: 200,
+    tabWidth: 2,
+    overrides: [
+        {
+            files: ['*.js', '*.ts'],
+            options: {
+                tabWidth: 4,
+            },
+        },
+    ],
+};

README.md

@@ -0,0 +1 @@
+# datadog-ecs-cdk

index.ts

@@ -0,0 +1,131 @@
+import { Construct } from 'constructs';
+
+import * as cdk from 'aws-cdk-lib';
+import * as ecs from 'aws-cdk-lib/aws-ecs';
+import type * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
+
+export interface EcsDatadogDaemonServiceProps {
+    readonly ecsCluster: ecs.Cluster;
+    readonly datadogApiKeySecret: secretsmanager.ISecret;
+    readonly datadogSite?: string;
+    readonly logsDisabled?: boolean;
+}
+
+export class EcsDatadogDaemonService extends Construct {
+    constructor(scope: Construct, id: string, props: EcsDatadogDaemonServiceProps) {
+        super(scope, id);
+
+        // To match as documented at
+        // https://docs.datadoghq.com/containers/amazon_ecs/?tab=awscli#setup
+        // and
+        // https://docs.datadoghq.com/containers/amazon_ecs/logs/?tab=linux
+        const taskDefinition = new ecs.Ec2TaskDefinition(this, 'TaskDefinition', {
+            family: 'datadog-agent-task',
+        });
+
+        const container = taskDefinition.addContainer('datadog-agent', {
+            image: ecs.ContainerImage.fromRegistry('public.ecr.aws/datadog/agent:latest'),
+            cpu: 100,
+            memoryLimitMiB: 512,
+            essential: true,
+            environment: {
+                DD_SITE: props.datadogSite ?? 'datadoghq.com',
+                ...(props.logsDisabled
+                    ? {}
+                    : {
+                          DD_LOGS_ENABLED: 'true',
+                          DD_LOGS_CONFIG_CONTAINER_COLLECT_ALL: 'true',
+                      }),
+            },
+            secrets: {
+                DD_API_KEY: ecs.Secret.fromSecretsManager(props.datadogApiKeySecret),
+            },
+            healthCheck: {
+                command: ['CMD-SHELL', 'agent health'],
+                retries: 3,
+                timeout: cdk.Duration.seconds(5),
+                interval: cdk.Duration.seconds(10),
+                startPeriod: cdk.Duration.seconds(15),
+            },
+            logging: ecs.LogDrivers.awsLogs({
+                streamPrefix: 'datadog-agent',
+            }),
+        });
+
+        container.addMountPoints(
+            {
+                containerPath: '/var/run/docker.sock',
+                sourceVolume: 'docker_sock',
+                readOnly: true,
+            },
+            {
+                containerPath: '/host/sys/fs/cgroup',
+                sourceVolume: 'cgroup',
+                readOnly: true,
+            },
+            {
+                containerPath: '/host/proc',
+                sourceVolume: 'proc',
+                readOnly: true,
+            },
+        );
+
+        if (!props.logsDisabled) {
+            container.addMountPoints(
+                {
+                    containerPath: '/opt/datadog-agent/run',
+                    sourceVolume: 'pointdir',
+                    readOnly: false,
+                },
+                {
+                    containerPath: '/var/lib/docker/containers',
+                    sourceVolume: 'containers_root',
+                    readOnly: true,
+                },
+            );
+        }
+
+        taskDefinition.addVolume({
+            name: 'docker_sock',
+            host: {
+                sourcePath: '/var/run/docker.sock',
+            },
+        });
+
+        taskDefinition.addVolume({
+            name: 'proc',
+            host: {
+                sourcePath: '/proc/',
+            },
+        });
+
+        taskDefinition.addVolume({
+            name: 'cgroup',
+            host: {
+                sourcePath: '/sys/fs/cgroup/',
+            },
+        });
+
+        if (!props.logsDisabled) {
+            taskDefinition.addVolume({
+                name: 'pointdir',
+                host: {
+                    sourcePath: '/opt/datadog-agent/run',
+                },
+            });
+
+            taskDefinition.addVolume({
+                name: 'containers_root',
+                host: {
+                    sourcePath: '/var/lib/docker/containers',
+                },
+            });
+        }
+
+        new ecs.Ec2Service(this, 'Service', {
+            cluster: props.ecsCluster,
+            taskDefinition,
+            daemon: true,
+        });
+    }
+}

jest.config.js

@@ -0,0 +1,16 @@
+module.exports = {
+    roots: ['<rootDir>/test'],
+    testMatch: ['**/*.test.ts'],
+    transform: {
+        '^.+\\.ts$': 'ts-jest',
+    },
+    collectCoverage: true,
+    coverageThreshold: {
+        global: {
+            statements: 0,
+            branches: 0,
+            functions: 100,
+            lines: 0,
+        },
+    },
+};