{"push_id":930295088,"size":21,"distinct_size":2,"ref":"refs/heads/109878560_secure_concourse","head":"4be0d2539a34322c85b809acfe08379db8822034","before":"ea39bb1f37f20336bbcdf44407252ca2a7a68a6a","commits":[{"sha":"440664dc79073365e5dd16a59b68354a80c2ecc5","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@mattbostock.com","name":"Matt Bostock"},"message":"Clarify where to install Fly\n\nI tried installing Fly inside Vagrant; it's preferable to run it on your host machine (i.e. not in Vagrant).","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/440664dc79073365e5dd16a59b68354a80c2ecc5"},{"sha":"b124728296b5e80599806e814b5d524e254cfad8","author":{"email":"60c6d277a8bd81de7fdde19201bf9c58a3df08f4@tomlins.org.uk","name":"Alex Tomlins"},"message":"Merge pull request #30 from alphagov/run_on_host\n\nClarify where to install Fly","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/b124728296b5e80599806e814b5d524e254cfad8"},{"sha":"64fa8885fdc1326cb6aaf5c0b61a9b997af0f50e","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Create deployer.sh: fix typo\n\nFix typo in environment name assignment (from parameter vs from env.)","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/64fa8885fdc1326cb6aaf5c0b61a9b997af0f50e"},{"sha":"48f1ade41bc89a1efce8248621b3c0d58ac69489","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"New AWS Vagrantfile\n\nDeploy concourse in AWS instead in local VM/provider. Configure zone,\nsec. group, name and other AWS properties.\n\nWe are using concourse provided AMI, which they build with each release\nand is only available on us-west-1.\nCurrent version 0.70","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/48f1ade41bc89a1efce8248621b3c0d58ac69489"},{"sha":"5d177c117dc6713b8ff5fd0dbb125ce146496747","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Enable concourse basic auth on Vagrant\n\nUse shell provisioner to run a script on concourse to enable the basic auth.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/5d177c117dc6713b8ff5fd0dbb125ce146496747"},{"sha":"96e20655629509ac5d09d76027d94fe8e0edb706","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Add vagrant concourse lite deploy script\n\nDeploys AWS Vagrant bootstrap concourse lite, sets up auth and adds\ncreate-deployer and destroy-deployer pipelines.\n\nSome automatic passwords are generated for concourse DB and concourse interface.\nFor that we use a hash of the current AWS credentials, the environment name and\nthe service id.\n\nThis allows create secure, unique and repeteable passwords.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/96e20655629509ac5d09d76027d94fe8e0edb706"},{"sha":"bb8de58a48bbd6aaa1ec518b26dee401c3b62db4","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Add vagrant concourse lite destroy script\n\nA destroy script that currently only destroys the AWS Vagrant concourse.\n\nStill left to implement (if we desire so):\n  1. Run destroy pipeline in deployer concourse\n  2. Run destroy pipeline in bootstrap concourse","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/bb8de58a48bbd6aaa1ec518b26dee401c3b62db4"},{"sha":"60849a0be5837aff6788413fa2f2f058f70ada96","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"New vagrant dir for vagrant related things\n\nAs there will be more vagrant related things (provision scripts etc.),\nmove all vagrant related items into separate directory.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/60849a0be5837aff6788413fa2f2f058f70ada96"},{"sha":"6ba5f58b3b2e5076830d1a2388f2bdec8eaddf79","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Add vagrant_cidr into ssh and concourse SGs\n\nThe new AWS bootstrap-concourse Vagrant box needs to be able to connect\nto the deployer concourse in eu-west-1. For this, add vagrant_cidrs\nvariable. Empty by default and configured at runtime when AWS vagrant\nIP is known. To handle empty IP, we used concat and compact TF\nfunctions, to create a valid list of SG cidrs. We chose this approach\ninstead of using some dummy default IP (e.g. 127.0.0.1).","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/6ba5f58b3b2e5076830d1a2388f2bdec8eaddf79"},{"sha":"15c3a45e05cc7eb2d6752d15296cb095de0a4cea","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Configure Vagrant IP automatically\n\nPass VAGRANT_IP variable from deploy.sh script. Update create-deployer\nscript to pass the variable as well. Add and use the variable in the\npipeline as well.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/15c3a45e05cc7eb2d6752d15296cb095de0a4cea"},{"sha":"476d3d34c7d7be4041d92cf31a4154bb249b74a9","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Remove vagrant IP from SGs after deployment\n\nRemove Vagrant IP from ssh and concourse security groups after concourse\nis deployed. Vagrant no longer needs to access it, unless it runs the\ndeployment again. In that case it will temporarily enable it's access\nagain. This is so that we don't leave the vagrant IP in the SG even\nafter we destroy (or stop) the Vagrant box and lose the public IP,\nwhich then gets used by someone else.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/476d3d34c7d7be4041d92cf31a4154bb249b74a9"},{"sha":"6b0ef654b2bf081f424b7b499421aa7e83eea0e1","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Download fly command binary in the project dir\n\nAfter starting the vagrant instance, we download the fly command in the\nproject directory to be used by the bootstrap pipelines.\n\nThis commit only changes the scripts for the create-deployer and\ndestroy-deployer scripts.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/6b0ef654b2bf081f424b7b499421aa7e83eea0e1"},{"sha":"c1833c79784d748d08b7dc363150ded75d79e0a9","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Split out environment setup of vagrant/deploy.sh\n\nSplit out environment setup of vagrant/deploy.sh to\nvagrant/environment.sh, so that it can be reused and called\nindependently.\n\nThis script will contain the logic generate all the password credentials.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/c1833c79784d748d08b7dc363150ded75d79e0a9"},{"sha":"2e1cc9463adc5ed910f85d0bd703508f3f033412","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Document AWS vagrant boostrap in README.md\n\nRewrite the README.md to explain all the bootstrap process using a AWS\nvagrant instance.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/2e1cc9463adc5ed910f85d0bd703508f3f033412"},{"sha":"1582cd523137b405c86d3b8f84e61c9bba9520c4","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"AWS Vagrant: use ephemeral storage for containers\n\nMount instance ephemeral disk to /var/vcap/data/garden. This way all\ncontainer related data get stored on a large instance disk vs local\nimage root (which had only 6GB space left).","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/1582cd523137b405c86d3b8f84e61c9bba9520c4"},{"sha":"c64500d370b7615e871bc2ebb3b3f69daed285e8","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Fix warnings from shellcheck analiser\n\nMost of them are missing quotes on variables.\n\nWe do want to execute the output of the environment.sh script, so we\nignore that test.","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/c64500d370b7615e871bc2ebb3b3f69daed285e8"},{"sha":"694f3c838f1d112c382d1952740cd91b05281e6b","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Retrieve public AWS IP by querying metadata\n\nSSH to the remote instance and query directly the metadata. This ensures\nthat we retrieve the valid public IP and not a DNS alias or other IP.\n\nWe must do this because the AWS vagrant provider does not provide a way\nto query the assigned public IP. The only way is via parsing the output\nof `vagrant ssh-config` but depending on the plugin version you might\nget the IP or DNS VM alias\n(See https://github.com/mitchellh/vagrant-aws/pull/355)","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/694f3c838f1d112c382d1952740cd91b05281e6b"},{"sha":"af239aebfa1fd6f39602421cf9c8ec0ab6e5b473","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Create a SSH tunnel to concourse-lite port 8080\n\nInstead of allowing a non secure HTTP connection via the internet to the\nconcourse-lite AWS instance, we create a SSH tunnel to redirect the port\n8080 to localhost.\n\nThe script vagrant/deploy.sh starts a daemonized SSH redirection with\ncontrolpath enabled to allow check the connection and avoid duplicated\ncommands.\n\nSee http://stackoverflow.com/a/15198031 for more details","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/af239aebfa1fd6f39602421cf9c8ec0ab6e5b473"},{"sha":"05ef1258a4ef57cf530487e5ba26ee12dde06055","author":{"email":"60c6d277a8bd81de7fdde19201bf9c58a3df08f4@tomlins.org.uk","name":"Alex Tomlins"},"message":"Merge pull request #27 from alphagov/111132940-aws-vagrant\n\n[#111132940] Use vagrant concourse-lite with AWS provider","distinct":false,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/05ef1258a4ef57cf530487e5ba26ee12dde06055"},{"sha":"eeba3728c21d6fd7c91ee14c71b492934a7bee7c","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Terraform config for Concourse ELB\n\n* Create concourse ELB\n* Configure security groups\n* Create CNAME record\n* Close direct insecure HTTP access to Concourse\n* Configure the ELB with an SSL certrificate that must already exist in IAM","distinct":true,"url":"https://api.github.com/repos/alphagov/paas-cf/commits/eeba3728c21d6fd7c91ee14c71b492934a7bee7c"}]}