brave/infra-ci

Name: infra-ci

Owner: Brave Software

Description: CI pipeline for terraform using cloudformation

Created: 2018-05-03 07:23:11.0

Updated: 2018-05-17 16:18:40.0

Pushed: 2018-05-17 16:10:42.0

Homepage: null

Size: 282

Language: HCL

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

Infra CI (WIP)

Terraform CI with no external dependencies to AWS. This does not actually apply the changes currently.

Bootstrap

Currently this expects cloudflare_parameter_name and fastly_parameter_name to be references to SSM parameter store items containing CLOUDFLARE_TOKEN and FASTLY_API_KEY. Later this would likely be referenced cross account. You can use the following to set these in AWS.

ssm put-parameter --type SecureString --name '/CodeBuild/FASTLY_API_KEY' --value "$(echo -n 'enter secret: ' 1>&2; read s; echo -n $s)"
ssm put-parameter --type SecureString --name '/CodeBuild/CLOUDFLARE_TOKEN' --value "$(echo -n 'enter secret: ' 1>&2; read s; echo -n $s)"

With docker installed run the following

rofile> is the profile to load from ~/.aws/credentials

ripts/tf.sh <profile> init
ripts/tf.sh <profile> apply

Worth noting ./scripts/tf.sh passes arguments to terraform so can run any other tf commands as well.