Etusivu Tutki Apua
Rekisteröidy Kirjaudu sisään
lusa
/
gd32450i-eval
1
0
Haarauta 0
Tiedostot Esitykset 0 Vetopyynnöt 0 Wiki
Haara: master
Haarat Tunnisteet
gd32450i-eval
/
app
/
goahead-5.1.0
/
paks
/
assist
lusa 878dc53b0f init project 5 vuotta sitten
..
gulp 878dc53b0f init project 5 vuotta sitten
README.md 878dc53b0f init project 5 vuotta sitten
aws-get-keys 878dc53b0f init project 5 vuotta sitten
blend.js 878dc53b0f init project 5 vuotta sitten
build-parts 878dc53b0f init project 5 vuotta sitten
cdrc 878dc53b0f init project 5 vuotta sitten
common 878dc53b0f init project 5 vuotta sitten
configure 878dc53b0f init project 5 vuotta sitten
configure-node 878dc53b0f init project 5 vuotta sitten
deploy-parts 878dc53b0f init project 5 vuotta sitten
docker-deploy-elb 878dc53b0f init project 5 vuotta sitten
docker-deploy-instance 878dc53b0f init project 5 vuotta sitten
docker-login 878dc53b0f init project 5 vuotta sitten
docker-publish 878dc53b0f init project 5 vuotta sitten
gitlab-app.yml 878dc53b0f init project 5 vuotta sitten
gitlab-makeme.yml 878dc53b0f init project 5 vuotta sitten
gitlab-ui.yml 878dc53b0f init project 5 vuotta sitten
gitlab-website.yml 878dc53b0f init project 5 vuotta sitten
index.js 878dc53b0f init project 5 vuotta sitten
json2env 878dc53b0f init project 5 vuotta sitten
package-parts 878dc53b0f init project 5 vuotta sitten
pak.json 878dc53b0f init project 5 vuotta sitten
publish-parts 878dc53b0f init project 5 vuotta sitten
remote-access 878dc53b0f init project 5 vuotta sitten
s3-publish-files 878dc53b0f init project 5 vuotta sitten
secrets 878dc53b0f init project 5 vuotta sitten

README.md

assist - Build Assistance

These files "assist" when building with MakeMe, Gulp and working with GitLab.

  • build-parts - Invoke "me", "make" or "gulp" to build parts of an app
  • cdrc - Copy to .cdrc to define environment for interactive use
  • common - Included by other scripts
  • configure - Core logic for top level configure script
  • configure-node - Configuration for node apps
  • deploy-parts - Invoke "me", "make" or "gulp" to deploy parts of an app
  • docker-login - Functions to login to the AWS ECR docker repository
  • docker-publish - Publish an image to the AWS ECR docker repository
  • gitlab-app.yml - Gitlab rules for a "gulp" based app
  • gitlab-makeme.yml - Gitlab rules for MakeMe projects
  • gitlab-website.yml - Gitlab rules for web site projects
  • index.js - Module to read configuration for gulp projects
  • json2env - Convert a JSON config file to environment key=value commands
  • publish-parts - Invoke "me", "make" or "gulp" to publish parts of an app
  • remote-access - Included script to configure remote access via SSH to AWS
  • s3-publish-files - Copy file tree to S3

Secrets

Secrets are needed when building and executing applications. This development pattern stores secrets encrypted in S3 and in the application repository.

S3 Secrets

  • Keys stored encrypted in S3 for use by Gitlab for CI/CD. The secrets are stored in buckets named {PROFILE}.config.
  • The "secrets" script is used to get/set secrets.
  • Gitlab build scripts use these secrets to access AWS accounts.
  • The gitlab repository defines the secrets in the "keys" directory and includes a MakeMe script to define in S3.
  • gitlab/keys/* has the actual AWS ops account keys to use by gitlab

  • In the future, we need script to update these keys with the output from terraform commands.

    eval $(paks/assist/secrets --env '' --profile "${PROFILE}" --aws-profile "${AWS_PROFILE}" get)