integ.api.ts

import { App, Stack, CfnOutput } from 'aws-cdk-lib';
import { BlockDeviceVolume, Port, Vpc } from 'aws-cdk-lib/aws-ec2';
import { ManagedPolicy, Role, ServicePrincipal } from 'aws-cdk-lib/aws-iam';
import { GitlabContainerRunner } from './index';
const env = {
  region: process.env.CDK_DEFAULT_REGION,
  account: process.env.CDK_DEFAULT_ACCOUNT,
};
const mockApp = new App();
const stack = new Stack(mockApp, 'testing-stack', { env });
const role = new Role(stack, 'runner-role', {
  assumedBy: new ServicePrincipal('ec2.amazonaws.com'),
  description: 'For Gitlab EC2 Runner Test Role',
  roleName: 'TestRole',
});

const vpc = Vpc.fromLookup(stack, 'defaultVpc', {
  isDefault: true,
});
const runner = new GitlabContainerRunner(stack, 'testing', {
  gitlabtoken: stack.node.tryGetContext('GITLAB_TOKEN') ?? 'glrt-GITLAB_TOKEN',
  ec2type: 't3.large',
  ec2iamrole: role,
  onDemandEbsConfig: BlockDeviceVolume.ebs(100),
  selfvpc: vpc,
  // spotFleet: true,
  dockerVolumes: [
    {
      hostPath: '/tmp/cahce',
      containerPath: '/tmp/cahce',
    },
  ],
  gitlabRunnerVersion: '15.10',
  enabledIMDSv2: true,
});

//runner.expireAfter(Duration.hours(1));
runner.runnerRole.addManagedPolicy(
  ManagedPolicy.fromAwsManagedPolicyName('AmazonS3ReadOnlyAccess'),
);
runner.defaultRunnerSG.connections.allowFromAnyIpv4(Port.tcp(80));
runner.defaultRunnerSG.connections.allowFromAnyIpv4(Port.tcp(443));

//runner.runnerEc2.connections.allowFrom(Peer.ipv4('0.0.0.0/0'), Port.tcp(8080));
new CfnOutput(stack, 'role', { value: runner.runnerRole.roleArn });
//new CfnOutput(stack, 'InstanceID', { value: runner.runnerEc2.instanceId });