Infrastructure #76

carlosvalarezo · 2023-08-28T22:33:07Z

No description provided.

…out the json files

…ub actions to create the infra and perform other tasks

…ng manually everytime

… detect the region and failing when run in certain virtualised environments and to fix it I needed to specify the region manually.

…rets

… the new role

…spective command

…degroup

…ild. Also, it updates the branch to use only infrastructure to do infra changes

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

…r error related to characters missing due to the nature of the shell commands

…ust owners

…t was saved

…the cluster

carlosvalarezo added 30 commits August 16, 2023 20:09

adds the trust policy, the role, a readme to include some comments ab…

997580b

…out the json files

removes github directory from the gitignore file in order to use gith…

706fbd6

…ub actions to create the infra and perform other tasks

creates the cv-eks-cluster-role role using githubactions to avoid doi…

4869c36

…ng manually everytime

removes action not found

1c19650

removes action not found

73a5482

adds aws-default-region since This is a problem with awscli trying to…

8ddc0d1

… detect the region and failing when run in certain virtualised environments and to fix it I needed to specify the region manually.

adds aws configure command rather than aws iam create-role directly

96b2c13

uses env to get the secrets and use them in aws configure

f7a4308

uses echo to check values

aae39af

uses DEVELOP as part of the env variable in order to retrieve the sec…

bbc0f8c

…rets

removes unnecesary echo

20ef118

uses env to validate the secrets available

38887d5

uses env to validate the secrets available

5cdc4b3

adds enviroment o define the environment

8088326

uses env variables to pass secrets to ther aws configure command

faed0ad

checks if the credentials file was created

b0f29b4

checks if the credentials file was created

9e1e8b5

checks if the credentials file was created

18202a8

adds region to the command and validates the creds to execute commands

a09fa5b

adds region to the command and validates the creds to execute commands

86cc2a0

adds region to the command and validates the creds to execute commands

22535ee

adds region to the command and validates the creds to execute commands

ffab863

adds region to the command and validates the creds to execute commands

f9a9d0f

sets the env vars for all the steps

b50e1ec

updates the name of the job and adds the step to attach the policy to…

d3f9e9d

… the new role

updates the ubuntu runner and installs jq to extract values later

cc419cd

moves to env vars cluster role and policy name and use them in the re…

8b00ebb

…spective command

removes unnecesary install of jq and updates the name of the env vars

06408da

adds the steps to create the role and to attach the policy for the no…

2ea1787

…degroup

configures the yaml file to create the k8s eks cluster via eksctl

5faa55f

carlosvalarezo added 26 commits August 22, 2023 23:01

disables interactive tty

ecd2963

tries another gpg command to encrypt with symmetric option

e13eaba

tries openssl alternative rather than gpg

f6d6e91

uses passphrase for openssl

c4306fe

uses passphrase for openssl

5b9f7c7

uses passphrase for openssl

9d89950

uses passphrase to encrypt the file using openssl

0d13e10

updates the workflow and enables the skipped steps

3724de9

updates the workflow and enables the skipped steps

860a6cd

creates the role, policy and trust-policy for codepipeline and codebu…

6b8a59f

…ild. Also, it updates the branch to use only infrastructure to do infra changes

corrects some typos in the name of the files

2e5b162

tries gpg to encrypt the files using these strategies: import the tru…

4d02585

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

tries gpg to encrypt the files using these strategies: import the tru…

f7c493b

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

splits the trust-owners import command in two steps

e3a2763

uses base64 in order to avoid errors like: missing semicolon and othe…

b4fa74e

…r error related to characters missing due to the nature of the shell commands

uses file rather than env variable for gpg trust owners

caacce3

show the content of trust-file

f9a954c

includes the missing env var

2f31b04

alters the order to formerly import the keys and lately import the tr…

8450391

…ust owners

alters the order to formerly import the trust owners and lately the keys

5446c30

removes the armos and sign flags from gpg command

3b4cb21

lists the files to check if the file got encrypted

427d085

updates the path of the encrypted file and show the directory where i…

632cefc

…t was saved

removes the openssl command and uses gpg to encrypt the file

d99f10e

removes unnecesary code

2aa81e6

creates fake kubeconfig file to test the encryption without creation …

1c4ea99

…the cluster

carlosvalarezo requested a review from a team as a code owner August 28, 2023 22:33

carlosvalarezo requested review from SudKul and removed request for a team August 28, 2023 22:33

carlosvalarezo closed this Aug 28, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Infrastructure #76

Infrastructure #76

carlosvalarezo commented Aug 28, 2023

Infrastructure #76

Infrastructure #76

Conversation

carlosvalarezo commented Aug 28, 2023