mirror of
https://github.com/gravitational/teleport
synced 2024-10-20 01:03:40 +00:00
acbf575230
This PR updates our various Drone pipelines to use AWS roles for publishing. Our AWS FTR requires that we do not use any long lived credentials in our AWS accounts and instead use roles. This means we need to move from attaching policies directly to users to attaching policies to roles and having policyless users assume those roles. https://aws.amazon.com/partners/foundational-technical-review/ Contributes to https://github.com/gravitational/SecOps/issues/213
55 lines
1.5 KiB
Go
55 lines
1.5 KiB
Go
// Copyright 2021 Gravitational, Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package main
|
|
|
|
import "path"
|
|
|
|
// This function calls the build-apt-repos tool which handles the APT portion of RFD 0058.
|
|
func promoteAptPipeline() pipeline {
|
|
return getAptPipelineBuilder().buildPromoteOsPackagePipeline()
|
|
}
|
|
|
|
func migrateAptPipeline(triggerBranch string, migrationVersions []string) pipeline {
|
|
return getAptPipelineBuilder().buildMigrateOsPackagePipeline(triggerBranch, migrationVersions)
|
|
}
|
|
|
|
func getAptPipelineBuilder() *OsPackageToolPipelineBuilder {
|
|
optpb := NewOsPackageToolPipelineBuilder(
|
|
"drone-s3-aptrepo-pvc",
|
|
"deb",
|
|
"apt",
|
|
NewRepoBucketSecrets(
|
|
"APT_REPO_NEW_AWS_S3_BUCKET",
|
|
"APT_REPO_NEW_AWS_ACCESS_KEY_ID",
|
|
"APT_REPO_NEW_AWS_SECRET_ACCESS_KEY",
|
|
"APT_REPO_NEW_AWS_ROLE",
|
|
),
|
|
)
|
|
|
|
optpb.environmentVars["APTLY_ROOT_DIR"] = value{
|
|
raw: path.Join(optpb.pvcMountPoint, "aptly"),
|
|
}
|
|
|
|
optpb.requiredPackages = []string{
|
|
"aptly",
|
|
}
|
|
|
|
optpb.extraArgs = []string{
|
|
"-aptly-root-dir \"$APTLY_ROOT_DIR\"",
|
|
}
|
|
|
|
return optpb
|
|
}
|