This is our API Proxy code for use by trusted Unicorn Rentals partners, and less trusted DevOps teams. Its purpose is to proxy API calls to our backend. Every 4 minutes it uses a different auth secret to auth to the backend, and to validate the result with caller. Currently the auth is updated by a gitpush every 4 minutes.
Below was/is the proposed architecture for deploying this application. We have partially fulfilled the design in our MVP deployment.
If you want to locally test etc:
- Have python 2.7
This will deploy the python dependencies, and run a local web server.
pip install -r requirements.txt
python app.py
If deploying with CICD tooling, run tests via CodeBuild or any other CI tool.
python tests_app.py -v
Or you can manually test with cURL, httpie or a browser.
Configure AWS Parameter Store BACKEND_API value.
Then deploy how suits you, but included is a Dockerfile if you want to use Docker, and an appspec.yml for CodeDeploy.
docker build -t unicorn_api .
docker run unicorn_api -p 5000:5000
Optionally have AWS xray deployed (executable not in this repo):
curl https://s3.dualstack.us-east-1.amazonaws.com/aws-xray-assets.us-east-1/xray-daemon/aws-xray-daemon-linux-2.x.zip -o xray.zip
unzip xray.zip
chmod +x xray
nohup ./xray &
And have a default AWS region set, either via environment variable, or aws configure.
Python
Flask
flask_restful
Requests
watchtower