Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Infrastructure #76

Closed
wants to merge 92 commits into from
Closed

Infrastructure #76

wants to merge 92 commits into from

Commits on Aug 17, 2023

  1. adds the trust policy, the role, a readme to include some comments ab… 

    …out the json files
    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    997580b View commit details
    Browse the repository at this point in the history

  2. removes github directory from the gitignore file in order to use gith… 

    …ub actions to create the infra and perform other tasks
    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    706fbd6 View commit details
    Browse the repository at this point in the history

  3. creates the cv-eks-cluster-role role using githubactions to avoid doi… 

    …ng manually everytime
    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    4869c36 View commit details
    Browse the repository at this point in the history

  4. removes action not found

    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    1c19650 View commit details
    Browse the repository at this point in the history

  5. removes action not found

    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    73a5482 View commit details
    Browse the repository at this point in the history

  6. adds aws-default-region since This is a problem with awscli trying to… 

    … detect the region and failing when run in certain virtualised environments and to fix it I needed to specify the region manually.
    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    8ddc0d1 View commit details
    Browse the repository at this point in the history

  7. adds aws configure command rather than aws iam create-role directly

    @carlosvalarezo
    carlosvalarezo committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    96b2c13 View commit details
    Browse the repository at this point in the history

Commits on Aug 18, 2023

  1. uses env to get the secrets and use them in aws configure

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    f7a4308 View commit details
    Browse the repository at this point in the history

  2. uses echo to check values

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    aae39af View commit details
    Browse the repository at this point in the history

  3. uses DEVELOP as part of the env variable in order to retrieve the sec… 

    …rets
    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    bbc0f8c View commit details
    Browse the repository at this point in the history

  4. removes unnecesary echo

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    20ef118 View commit details
    Browse the repository at this point in the history

  5. uses env to validate the secrets available

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    38887d5 View commit details
    Browse the repository at this point in the history

  6. uses env to validate the secrets available

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    5cdc4b3 View commit details
    Browse the repository at this point in the history

  7. adds enviroment o define the environment

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    8088326 View commit details
    Browse the repository at this point in the history

  8. uses env variables to pass secrets to ther aws configure command

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    faed0ad View commit details
    Browse the repository at this point in the history

  9. checks if the credentials file was created

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    b0f29b4 View commit details
    Browse the repository at this point in the history

  10. checks if the credentials file was created

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    9e1e8b5 View commit details
    Browse the repository at this point in the history

  11. checks if the credentials file was created

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    18202a8 View commit details
    Browse the repository at this point in the history

  12. adds region to the command and validates the creds to execute commands

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    a09fa5b View commit details
    Browse the repository at this point in the history

  13. adds region to the command and validates the creds to execute commands

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    86cc2a0 View commit details
    Browse the repository at this point in the history

  14. adds region to the command and validates the creds to execute commands

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    22535ee View commit details
    Browse the repository at this point in the history

  15. adds region to the command and validates the creds to execute commands

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    ffab863 View commit details
    Browse the repository at this point in the history

  16. adds region to the command and validates the creds to execute commands

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    f9a9d0f View commit details
    Browse the repository at this point in the history

  17. sets the env vars for all the steps

    @carlosvalarezo
    carlosvalarezo committed Aug 18, 2023
    Configuration menu
    Copy the full SHA
    b50e1ec View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2023

  1. updates the name of the job and adds the step to attach the policy to… 

    … the new role
    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    d3f9e9d View commit details
    Browse the repository at this point in the history

  2. updates the ubuntu runner and installs jq to extract values later

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    cc419cd View commit details
    Browse the repository at this point in the history

  3. moves to env vars cluster role and policy name and use them in the re… 

    …spective command
    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    8b00ebb View commit details
    Browse the repository at this point in the history

  4. removes unnecesary install of jq and updates the name of the env vars

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    06408da View commit details
    Browse the repository at this point in the history

  5. adds the steps to create the role and to attach the policy for the no… 

    …degroup
    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    2ea1787 View commit details
    Browse the repository at this point in the history

  6. configures the yaml file to create the k8s eks cluster via eksctl

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    5faa55f View commit details
    Browse the repository at this point in the history

  7. setup the runner installing eksctl

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    3a0feba View commit details
    Browse the repository at this point in the history

  8. setup the runner installing eksctl

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    ad3f00f View commit details
    Browse the repository at this point in the history

  9. setup the runner installing eksctl

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    2fe543c View commit details
    Browse the repository at this point in the history

  10. updates the path of the script file

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    98946d6 View commit details
    Browse the repository at this point in the history

  11. updates the path of the script file

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    f899779 View commit details
    Browse the repository at this point in the history

  12. updates the path of the script file

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    9ea53fc View commit details
    Browse the repository at this point in the history

  13. creates the cluster

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    c30549e View commit details
    Browse the repository at this point in the history

  14. uses the correct file to create the cluster using eksctl

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    45414eb View commit details
    Browse the repository at this point in the history

  15. create the ssh key files getting the values from the secrets repo

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    ac8f9fe View commit details
    Browse the repository at this point in the history

  16. creates the .ssh directory

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    72490f4 View commit details
    Browse the repository at this point in the history

  17. adds new comments and separates the setup of the roles and policies f… 

    …rom the creation of the cluster
    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    d51df7f View commit details
    Browse the repository at this point in the history

  18. moves to infrastructure branch and updates the workflow

    @carlosvalarezo
    carlosvalarezo committed Aug 21, 2023
    Configuration menu
    Copy the full SHA
    e7f5dff View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2023

  1. removes unnecesary code from original repo and updates the deployemnt… 

    … steps
    @carlosvalarezo
    carlosvalarezo committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    2ed9284 View commit details
    Browse the repository at this point in the history

  2. adds eksctl-install.sh file

    @carlosvalarezo
    carlosvalarezo committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    ec9d679 View commit details
    Browse the repository at this point in the history

  3. adds missing step to checkout code in the infra pipeline

    @carlosvalarezo
    carlosvalarezo committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    6d43045 View commit details
    Browse the repository at this point in the history

Commits on Aug 23, 2023

  1. encrypts kubeconfig file to use in the develop workflow and have acce… 

    …ss to the eks k8s cluster. It uses gpg keys that were generated somewhere else and uploaded as secrets in the repo. It also updates the README describing the instructions to generate the gpg key set
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    ce56861 View commit details
    Browse the repository at this point in the history

  2. encrypts kubeconfig file to use in the develop workflow and have acce… 

    …ss to the eks k8s cluster. It uses gpg keys that were generated somewhere else and uploaded as secrets in the repo. It also updates the README describing the instructions to generate the gpg key set
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    7b602ea View commit details
    Browse the repository at this point in the history

  3. uses curly brackets for all the env vars and shows the current env vars

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    ad53ed0 View commit details
    Browse the repository at this point in the history

  4. encodes the encrypted value to sort out the problem of gpg is multili… 

    …ne rather than single line as github store secrets
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    af53e47 View commit details
    Browse the repository at this point in the history

  5. updates the command to include GPG_PRIVATE_KEY as value to import the… 

    … gpg
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    f2c7da8 View commit details
    Browse the repository at this point in the history

  6. updates the command to include GPG_PRIVATE_KEY as value to import the… 

    … gpg and the README
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    cb440a2 View commit details
    Browse the repository at this point in the history

  7. updates the command to decode the GPG_PRIVATE_KEY

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    5a4dc5d View commit details
    Browse the repository at this point in the history

  8. uses the GPG_PUBLIC KEY and encrypts the file to be decrypted by the … 

    …public key. Skips one step and one job
    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    6528e01 View commit details
    Browse the repository at this point in the history

  9. removes the skip one step

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    e7d9f1e View commit details
    Browse the repository at this point in the history

  10. removes the skip one step

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    46ca5da View commit details
    Browse the repository at this point in the history

  11. removes the skip one step

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    8e3d791 View commit details
    Browse the repository at this point in the history

  12. skips a couple of steps

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    2e45b08 View commit details
    Browse the repository at this point in the history

  13. skips a couple of steps

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    6ebff87 View commit details
    Browse the repository at this point in the history

  14. skips a couple of steps

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    4a3e7a5 View commit details
    Browse the repository at this point in the history

  15. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    a50bfd8 View commit details
    Browse the repository at this point in the history

  16. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    51bc5b7 View commit details
    Browse the repository at this point in the history

  17. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    de58aa2 View commit details
    Browse the repository at this point in the history

  18. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    89fa539 View commit details
    Browse the repository at this point in the history

  19. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    85a4274 View commit details
    Browse the repository at this point in the history

  20. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    53cbc78 View commit details
    Browse the repository at this point in the history

  21. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    dba4277 View commit details
    Browse the repository at this point in the history

  22. disables interactive tty

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    ecd2963 View commit details
    Browse the repository at this point in the history

  23. tries another gpg command to encrypt with symmetric option

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    e13eaba View commit details
    Browse the repository at this point in the history

  24. tries openssl alternative rather than gpg

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    f6d6e91 View commit details
    Browse the repository at this point in the history

  25. uses passphrase for openssl

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    c4306fe View commit details
    Browse the repository at this point in the history

  26. uses passphrase for openssl

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    5b9f7c7 View commit details
    Browse the repository at this point in the history

  27. uses passphrase for openssl

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    9d89950 View commit details
    Browse the repository at this point in the history

  28. uses passphrase to encrypt the file using openssl

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    0d13e10 View commit details
    Browse the repository at this point in the history

  29. updates the workflow and enables the skipped steps

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    3724de9 View commit details
    Browse the repository at this point in the history

  30. updates the workflow and enables the skipped steps

    @carlosvalarezo
    carlosvalarezo committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    860a6cd View commit details
    Browse the repository at this point in the history

Commits on Aug 25, 2023

  1. creates the role, policy and trust-policy for codepipeline and codebu… 

    …ild. Also, it updates the branch to use only infrastructure to do infra changes
    @carlosvalarezo
    carlosvalarezo committed Aug 25, 2023
    Configuration menu
    Copy the full SHA
    6b8a59f View commit details
    Browse the repository at this point in the history

  2. corrects some typos in the name of the files

    @carlosvalarezo
    carlosvalarezo committed Aug 25, 2023
    Configuration menu
    Copy the full SHA
    2e5b162 View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2023

  1. tries gpg to encrypt the files using these strategies: import the tru… 

    …st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    4d02585 View commit details
    Browse the repository at this point in the history

  2. tries gpg to encrypt the files using these strategies: import the tru… 

    …st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    f7c493b View commit details
    Browse the repository at this point in the history

  3. splits the trust-owners import command in two steps

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    e3a2763 View commit details
    Browse the repository at this point in the history

  4. uses base64 in order to avoid errors like: missing semicolon and othe… 

    …r error related to characters missing due to the nature of the shell commands
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    b4fa74e View commit details
    Browse the repository at this point in the history

  5. uses file rather than env variable for gpg trust owners

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    caacce3 View commit details
    Browse the repository at this point in the history

  6. show the content of trust-file

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    f9a954c View commit details
    Browse the repository at this point in the history

  7. includes the missing env var

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    2f31b04 View commit details
    Browse the repository at this point in the history

  8. alters the order to formerly import the keys and lately import the tr… 

    …ust owners
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    8450391 View commit details
    Browse the repository at this point in the history

  9. alters the order to formerly import the trust owners and lately the keys

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    5446c30 View commit details
    Browse the repository at this point in the history

  10. removes the armos and sign flags from gpg command

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    3b4cb21 View commit details
    Browse the repository at this point in the history

  11. lists the files to check if the file got encrypted

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    427d085 View commit details
    Browse the repository at this point in the history

  12. updates the path of the encrypted file and show the directory where i… 

    …t was saved
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    632cefc View commit details
    Browse the repository at this point in the history

  13. removes the openssl command and uses gpg to encrypt the file

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    d99f10e View commit details
    Browse the repository at this point in the history

  14. removes unnecesary code

    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    2aa81e6 View commit details
    Browse the repository at this point in the history

  15. creates fake kubeconfig file to test the encryption without creation … 

    …the cluster
    @carlosvalarezo
    carlosvalarezo committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    1c4ea99 View commit details
    Browse the repository at this point in the history