Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EKS in AWS Curvenote account #2652

Merged
merged 53 commits into from
Sep 25, 2023
Merged

EKS in AWS Curvenote account #2652

merged 53 commits into from
Sep 25, 2023

Commits on Jul 12, 2023

  1. curvenote-aws: bootstrap and vpc

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    7e44698 View commit details
    Browse the repository at this point in the history

  2. EKS with permissions boundaries and other workarounds

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    6518eab View commit details
    Browse the repository at this point in the history

  3. Use remote state and dynamodb lock

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    54057f1 View commit details
    Browse the repository at this point in the history

  4. Add serviceaccounts.tf

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    ece451d View commit details
    Browse the repository at this point in the history

  5. Update version

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    de030c8 View commit details
    Browse the repository at this point in the history

  6. Service link role deployed separately, this now works!

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    408510a View commit details
    Browse the repository at this point in the history

  7. terraform/aws/curvenote linting/formatting

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    e061b7c View commit details
    Browse the repository at this point in the history

  8. Move terraform lint to separate workflow

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    16cccd9 View commit details
    Browse the repository at this point in the history

  9. Do not gitignore .terraform.lock.hcl 

    Changes in providers may lead to unexpected changes in infrastructure even if nothing else has changed
    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    8504574 View commit details
    Browse the repository at this point in the history

  10. Update README, add OIDC tf that can be run by admin

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    e964117 View commit details
    Browse the repository at this point in the history

  11. Manually created OIDC IRSA is now indicated with var oidc_created

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    c872505 View commit details
    Browse the repository at this point in the history

  12. oidc_created=true

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    72411d6 View commit details
    Browse the repository at this point in the history

  13. Add GitHub OIDC 

    https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services
    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    565ebef View commit details
    Browse the repository at this point in the history

  14. Add GitHub OIDC for manics/mybinder.org-deploy for initial dev

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    d1feb31 View commit details
    Browse the repository at this point in the history

  15. Add GH workflow to check EKS access

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    0ccb81f View commit details
    Browse the repository at this point in the history

  16. GitHub OIDC: fix typo (eks not ecr)

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    a94c8de View commit details
    Browse the repository at this point in the history

  17. Ignore .terraform.lock.hcl apart from aws/curvenote

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    a2b83b6 View commit details
    Browse the repository at this point in the history

  18. Need kubernetes provider to manage EKS auth configmap

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    b07dd43 View commit details
    Browse the repository at this point in the history

  19. Add hashicorp/kubernetes version, update versions

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    de4e919 View commit details
    Browse the repository at this point in the history

  20. Add role to allow anyone in AWS account to access EKS as cluster admin

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    d5236eb View commit details
    Browse the repository at this point in the history

  21. Add binderhub-eks-access to aws-auth configmap

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    693bb50 View commit details
    Browse the repository at this point in the history

  22. Parameterise number of nodes, disk size, bottlerocket

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    2449223 View commit details
    Browse the repository at this point in the history

  23. Update VPC, fix ECR token IAM permissions

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    b91432b View commit details
    Browse the repository at this point in the history

  24. Update serviceaccounts

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    127eb63 View commit details
    Browse the repository at this point in the history

  25. Update curvenote terraform README

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    f44c97c View commit details
    Browse the repository at this point in the history

  26. aws-dev GH workflow: include main

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    2089dac View commit details
    Browse the repository at this point in the history

  27. Some tfsec fixes

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    604d592 View commit details
    Browse the repository at this point in the history

  28. Couple more cleanups

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    ef445dd View commit details
    Browse the repository at this point in the history

  29. aws-curvenote: allow all AWS roles to manage KMS key

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    77e9198 View commit details
    Browse the repository at this point in the history

  30. Set kms_key_administrators to avoid changing when deployed by differe… 

    …nt users/roles
    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    814891d View commit details
    Browse the repository at this point in the history

  31. aws/curvenote: Comment out outputs

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    7a98cf2 View commit details
    Browse the repository at this point in the history

  32. Deploy aws/curvenote Terraform

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    995fa77 View commit details
    Browse the repository at this point in the history

  33. Update aws/curvenote README to explain GH workflow

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    0978ed5 View commit details
    Browse the repository at this point in the history

  34. rm .github/workflows/aws-dev.yml

    @manics
    manics committed Jul 12, 2023
    Configuration menu
    Copy the full SHA
    5baff90 View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2023

  1. aws-curvenote: use 2 nodes

    @manics
    manics committed Jul 31, 2023
    Configuration menu
    Copy the full SHA
    c6d21a1 View commit details
    Browse the repository at this point in the history

  2. Add walkthrough of how the terraform GH deployment approval works

    @manics
    manics committed Jul 31, 2023
    Configuration menu
    Copy the full SHA
    19213de View commit details
    Browse the repository at this point in the history

  3. eks: node size cant be changed by terraform

    @manics
    manics committed Jul 31, 2023
    Configuration menu
    Copy the full SHA
    80bdbe2 View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2023

  1. Move curvenote terraform to generic binder-eks module

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    6cb8d3c View commit details
    Browse the repository at this point in the history

  2. Add outputs to binder-eks module

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    02cb10f View commit details
    Browse the repository at this point in the history

  3. aws/curvenote is now just a single file that references the binder-ek… 

    …s module
    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    ea59795 View commit details
    Browse the repository at this point in the history

  4. Use worker_group_1 instead of worker_group-1

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    55dd529 View commit details
    Browse the repository at this point in the history

  5. binder-eks: uncomment outputs

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    2d4c439 View commit details
    Browse the repository at this point in the history

  6. Update AWS/EKS readmes

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    a735a08 View commit details
    Browse the repository at this point in the history

  7. Update pre-commit, cleanup old comments

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    432f115 View commit details
    Browse the repository at this point in the history

  8. Rename bootstrap state bucket var

    @manics
    manics committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    aebaa80 View commit details
    Browse the repository at this point in the history

Commits on Sep 18, 2023

  1. terraform-deploy-aws-curvenote.yml: remove extra branch

    @manics
    manics authored Sep 18, 2023
    Configuration menu
    Copy the full SHA
    8c1cfb1 View commit details
    Browse the repository at this point in the history

Commits on Sep 22, 2023

  1. curvenote tfplan: replace gpg with age

    @manics
    manics committed Sep 22, 2023
    Configuration menu
    Copy the full SHA
    d7036e0 View commit details
    Browse the repository at this point in the history

  2. curvenote: Install age in GH workflow

    @manics
    manics committed Sep 22, 2023
    Configuration menu
    Copy the full SHA
    af3d573 View commit details
    Browse the repository at this point in the history

  3. Fix gh trigger paths for terraform-deploy-aws-curvenote.yml

    @manics
    manics committed Sep 22, 2023
    Configuration menu
    Copy the full SHA
    315ad74 View commit details
    Browse the repository at this point in the history

  4. Remove aws_s3_bucket_server_side_encryption_configuration from bootstrap

    @manics
    manics committed Sep 22, 2023
    Configuration menu
    Copy the full SHA
    f48c4f7 View commit details
    Browse the repository at this point in the history

  5. Remove dev OIDC access

    @manics
    manics committed Sep 22, 2023
    Configuration menu
    Copy the full SHA
    55666c1 View commit details
    Browse the repository at this point in the history

Commits on Sep 24, 2023

  1. Output Terraform plan to GH summary 

    https://github.blog/2022-05-09-supercharging-github-actions-with-job-summaries/
    @manics
    manics committed Sep 24, 2023
    Configuration menu
    Copy the full SHA
    1851b2a View commit details
    Browse the repository at this point in the history

  2. vpc.tf: Remove old commented azs

    @manics
    manics committed Sep 24, 2023
    Configuration menu
    Copy the full SHA
    c00c237 View commit details
    Browse the repository at this point in the history