Skip to content

ministryofjustice/cloud-platform

Repository files navigation

Ministry of Justice Cloud Platform

About this repository

This is the Ministry of Justice (MOJ) Cloud Platform team's repository for public facing documentation, feature work, enhancements, and issues.

The Cloud Platform team utilises GitHub issues to manage their work, and a team Github Project to surface GitHub issues into a product management board.

It's best to search our GitHub issues before adding new issues in an effort to reduce duplicates and encourage activity through existing conversations.

Link checker

This repository has a GitHub action that checks all links in *.md files and creates a GitHub issue if the link returns a non-200 status code. If you have a link that doesn't resolve through the public internet (e.g. 127.0.0.1, localhost, or other internal links), please update the .ignore-links file including the fully-qualified domain name (FQDN).

Other Cloud Platform repositories

We have a series of repositories for our work. We have adopted the naming convention of naming each repository starting with cloud-platform-*. Where some repositories have similar purposes, we try to follow a common prefix (e.g. cloud-platform-terraform-* for Terraform modules). We also name things so that users can understand what a repository does through its name.

Core

Name Description
Cloud Platform (this repository) Public facing documentation, feature work, enhancements, and issues
Cloud Platform environments User-created environments that are hosted on the Cloud Platform
Cloud Platform infrastructure Core infrastructure for the Cloud Platform
Cloud Platform user guide User-focussed documentation for how to get started and use the Cloud Platform

Terraform modules

User-facing

Find an up to date list in our user guide

Team-facing

Name Description
Auth0 Creates the auth0 clients for the Kubernetes server and its components
AWS Read-Only - SSO Allow web console logins using Github credentials via SAML
AWS Account Baselines Holds security and operational baselines implemented in Cloud Platform AWS accounts
Bastion Deploys a bastion instance
CertManager Deploys certmanager for automated TLS certificates
Cluster Autoscaler Deploys Cluster Autoscaler
Concourse Deploys ConcourseCI within a Kubernetes cluster
Descheduler Deploys Descheduler
EKS Addons Deploys Cloud Platform EKS Add ons
EFS CSI - ** NOT IN USE ** Enables AWS EFS (NFS compatible) storage backend for Kubernetes
EKS CSI Storage Enables EKS CSI storage backend for Kubernetes (EBS volumes)
External DNS Deploys external-dns to control DNS records dynamically
Global Auth0 Deploys Auth0 actions globally for auth0 tenant
IAM Configuration Holds Cloud Platform team IAM configuration for AWS Accounts
Ingress controller Deploys an NGINX ingress controller
Kuberhealthy Deploys Kuberhealthy Operator and custom checks
Kuberos Deploys kuberos which enables users to authenticate to the cluster
Logging Deploys standard logging tools such as fluentbit, etc.
Monitoring Deploys standard monitoring tools such as AlertManager, exporters, etc.
Gatekeeper Deploys Gatekeeper policy controller and required policies
Starter Pack Deploys Helloworld and multicontainer app
Trivy Operator Deploys Trivy Operator
Velero Deploys Velero to manage backup and restore
VPC Flow logs Enables AWS Flow logs to capture information about the IP traffic going to and from network interfaces in VPC.
OpenSearch CloudWatch Alarm Deploys the recommended Amazon OpenSearch CloudWatch Alarm and sends alerts to an SNS topic

Other

Demonstration and reference applications

Name Description
Multi-container app Reference application for multi-container services
Go app Reference application written in Go
Ruby app Reference application written in Ruby

Miscelleanous

Name Description
Canary Deploys AWS Synthetics Canary resource
Custom error pages Customised error pages for uncaught routes
Environments checker Detects orphaned namespaces and AWS resources
Helm charts Custom Cloud Platform helm charts
Kuberos A fork of original Kuberos, managed by Cloud Platform
Tools image Docker image containing tools used by pipelines

Useful links

It may be useful to look at: