Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: add AMI building harness and supporting tools #624

Merged
merged 2 commits into from
Jan 14, 2020
Merged

ci: add AMI building harness and supporting tools #624

merged 2 commits into from
Jan 14, 2020

Commits on Jan 14, 2020

  1. ci: add amiize CI build harness & supporting tools 

    This adds a CI specific harness for creating AMIs from built disk
images. To accomplish the task at hand, the script "create-ami-image"
manages the use of build artifacts and kicks off the amiize process
according to its build environment. "ensure-key-pair" validates and/or
creates an EC2 key pair for its use during automated builds. This key
may be rotated (by way of deletion) as needed with additional
straightforward & well scoped permissions needed for the build task to
manage its own key pair (aside from the overlapping EC2 permissions
needed for amiizing):

- ssm:PutParameter
- ssm:GetParameter
- ec2:ImportKey
- ec2:DescribeKeyPairs
- kms:Encrypt
- kms:Decrypt

The KMS documentation page regarding SSM Parameter Store has much more
outlined on restricting the usage of SSM' AWS-Managed CMK to the SSM
Parameters involved as well.

Signed-off-by: Jacob Vallejo <[email protected]>
    @jahkeup
    jahkeup committed Jan 14, 2020
    Configuration menu
    Copy the full SHA
    e83a912 View commit details
    Browse the repository at this point in the history

  2. ci: use bash function library for logger

    @jahkeup
    jahkeup committed Jan 14, 2020
    Configuration menu
    Copy the full SHA
    b348e58 View commit details
    Browse the repository at this point in the history