Initial commit

ecs_datadog.tf

@@ -0,0 +1,61 @@
+resource "aws_ecs_task_definition" "datadog" {
+  family        = "${var.env}-${var.identifier}-datadog-task"
+  task_role_arn = "${aws_iam_role.ecs-datadog-role.arn}"
+
+  container_definitions = <<EOF
+[
+  {
+    "name": "${var.env}-${var.identifier}",
+    "image": "datadog/agent:latest",
+    "cpu": 10,
+    "memory": 256,
+    "environment": [{
+      "name" : "DD_API_KEY",
+      "value" : "${var.datadog-api-key}"
+    }],
+    "command": [
+      "bash",
+      "-c",
+      "${var.datadog-extra-config}"
+    ],
+    "mountPoints": [{
+      "sourceVolume": "docker-sock",
+      "containerPath": "/var/run/docker.sock",
+      "readOnly": true
+    },{
+      "sourceVolume": "proc",
+      "containerPath": "/host/proc",
+      "readOnly": true
+    },{
+      "sourceVolume": "cgroup",
+      "containerPath": "/host/sys/fs/cgroup",
+      "readOnly": true
+    }]
+  }
+]
+EOF
+
+  volume {
+    name      = "docker-sock"
+    host_path = "/var/run/docker.sock"
+  }
+
+  volume {
+    name      = "proc"
+    host_path = "/proc/"
+  }
+
+  volume {
+    name      = "cgroup"
+    host_path = "/cgroup/"
+  }
+}
+
+resource "aws_ecs_service" "datadog" {
+  name            = "${var.env}-${var.identifier}-datadog-ecs-service"
+  cluster         = "${var.ecs-cluster-id}"
+  task_definition = "${aws_ecs_task_definition.datadog.arn}"
+
+  # This allows running once for every instance
+  scheduling_strategy = "DAEMON"
+}

ecs_datadog_iam.tf

@@ -0,0 +1,45 @@
+resource "aws_iam_role" "ecs-datadog-role" {
+  name = "${var.env}-${var.identifier}-jenkins-ecs-datadog-role"
+  assume_role_policy = "${data.aws_iam_policy_document.ecs-task-role-assume.json}"
+}
+
+resource "aws_iam_role_policy_attachment" "ecs-datadog" {
+  role = "${aws_iam_role.ecs-datadog-role.name}"
+  policy_arn = "${aws_iam_policy.ecs-datadog-role-policy.arn}"
+}
+
+resource "aws_iam_policy" "ecs-datadog-role-policy" {
+  name = "${var.env}-${var.identifier}-datadog-agent-ecs-iam-role-policy"
+  policy = "${data.aws_iam_policy_document.ecs-datadog-role.json}"
+}
+
+data "aws_iam_policy_document" "ecs-datadog-role" {
+
+  statement {
+    sid = "AllowDatadogToReadECSMetrics",
+    effect = "Allow"
+    actions = [
+      "ecs:RegisterContainerInstance",
+      "ecs:DeregisterContainerInstance",
+      "ecs:DiscoverPollEndpoint",
+      "ecs:Submit*",
+      "ecs:Poll",
+      "ecs:StartTask",
+      "ecs:StartTelemetrySession"
+    ]
+    resources = [ "*" ]
+  }
+
+}
+
+data "aws_iam_policy_document" "ecs-task-role-assume" {
+  statement {
+    effect = "Allow"
+    actions = [ "sts:AssumeRole" ]
+    principals {
+      type = "Service"
+      identifiers = [ "ecs-tasks.amazonaws.com" ]
+    }
+  }
+}
+

outputs.tf

@@ -0,0 +1,7 @@
+output "ecs-task-definition-arn" {
+  value = "${aws_ecs_task_definition.datadog.arn}"
+}
+
+output "ecs-task-definition-family" {
+  value = "${aws_ecs_task_definition.datadog.family}"
+}

variables.tf

@@ -0,0 +1,5 @@
+variable "env" {}
+variable "identifier" {}
+variable "datadog-api-key" {}
+variable "datadog-extra-config" {}
+variable "ecs-cluster-id" {}