aboutsummaryrefslogtreecommitdiff
path: root/terraform/aws
Commit message (Collapse)AuthorAge
* Improve the from_port setting in various AWS security groupsHEADmasterChristopher Baines2019-08-28
| | | | Thanks to schmie for looking in to this.
* Set environment variables when creating data snapshotsChristopher Baines2019-01-07
| | | | This means that govuk data can access the data from S3.
* Add Terraform configuration for the gcroot directoriesChristopher Baines2019-01-06
| | | | On the AWS backend.
* Disable apparmor on the AWS backendChristopher Baines2019-01-06
|
* Move towards using the S3 bucket dataChristopher Baines2018-12-31
| | | | Rather than the govuk-puppet backup source on the machine.
* Add guile-sqlite3 to the profile on the AWS backend machineChristopher Baines2018-12-31
|
* Up AWS root volume sizesChristopher Baines2018-08-07
| | | | | The PostgreSQL data takes over 70GB now, so up the overall root filesystem size to 150GB.
* Install openssl and nss-certs on the build machineChristopher Baines2018-07-05
| | | | In AWS. This fixes downloading custom revisions of packages.
* Improve the public ip address handlingChristopher Baines2018-07-05
| | | | | Support multiple addresses to handle the GOV.UK PaaS, which has multiple egress points.
* Increase the number of build usersChristopher Baines2018-07-04
| | | | | For some reason, having more build users than allowed max-jobs isn't sufficient in some cases. So, add some more.
* Shorten the guix builder user nameChristopher Baines2018-07-04
| | | | | This makes it easier to see in tools like htop, top and ps, as they truncate the user name.
* Pass the terraform credentials to the remote state configurationChristopher Baines2018-07-04
| | | | | This fixes the mini environment Terraform working, now that the backend is protected by basic authentication.
* Use bash from Guix when fetching revisions remotelyChristopher Baines2018-07-04
|
* Change the backend instance to a t2.xlargerelease_10Christopher Baines2018-07-03
| | | | The builds can be quite expensive, so the extra resource is useful.
* Increase the resources for AWS mini environmentsChristopher Baines2018-07-03
| | | | | From a t2.large to a t2.xlarge. Running every service requires close to 16GB of memory.
* Set GDS_GUIX_GOVUK_PUPPET_BACKUPS_DIRECTORYChristopher Baines2018-07-03
| | | | On the AWS build machine.
* Copy the root profile when provisioningChristopher Baines2018-07-03
| | | | | | Then switch to just installing guile. Also, always create the ~/.guix-profile symlink, as this isn't stored on EFS and thus needs creating everytime the machine is created.
* Make the ~/.config directory during provisioningChristopher Baines2018-07-03
| | | | This ensures that it's owned by the ubuntu user.
* Change the spot_type of the spot requests to one-timeChristopher Baines2018-07-03
| | | | | | The setup for these machines is dependant on the Terraform provisioners, so make the spot requests one time rather than persistent.
* Specify the mini_environment_up output for the AWS backendrelease_2Christopher Baines2018-06-28
|
* Ensure the log directory exists in the AWS backendChristopher Baines2018-06-28
|
* Specify the disk size for the AWS build machineChristopher Baines2018-06-28
|
* Increase the number of build users in AWSChristopher Baines2018-06-28
|
* Switch to using the public AWS domain of the build machineChristopher Baines2018-06-23
| | | | | | Rather than the configured domain, as the corresponding SSH key shouldn't change for the AWS domain (whereas it does for the configured domain, if the machine changes).
* Add support for managing Terraform AWS backends from the show pageChristopher Baines2018-06-23
|
* Handle SSH keys via the databaseChristopher Baines2018-06-23
| | | | | This makes it more explicit, and works around Terraform being unpredictable when dealing with SSH agents.
* Share /var/cache and /var/lib with the hostChristopher Baines2018-06-03
| | | | | In the AWS backend. This means that they don't end up on a tmpfs and using up RAM.
* Give AWS mini environments 100GB of spaceChristopher Baines2018-06-03
| | | | To make room for data snapshots.
* Change the AWS backend instance type to a t2.largeChristopher Baines2018-06-03
| | | | | | Which is an increase in resources from the t2.medium. The 8GB of RAM (an increase from 4GB), will come in useful when working with data snapshots.
* Change how the EFS File System is handledChristopher Baines2018-06-03
| | | | | | | | | | For the AWS backend. Bring it in to the Terraform configuration for the backend, where previously only the id was known. Also, alter the provisioning so that it can handle an empty EFS file system. This reduces the amount of manual setup required for AWS.
* Improve the AWS backendChristopher Baines2018-05-03
| | | | | | This gets the AWS backend to the point where you can deploy the backend, and then a mini environment without any actions outside of the govuk-mini-environment-admin.
* Provide the AWS access key and secret as variablesChristopher Baines2018-04-03
| | | | To terraform.
* Add some govuk-guix related jobsChristopher Baines2018-03-29
| | | | And various other views and routes.
* AWS related tweaksChristopher Baines2018-03-29
|
* Add terraform backend and initial guix configurationChristopher Baines2018-03-29