kite 0.2.0 → 1.0.0

data/tpl/gcp/terraform/main.tf

@@ -1,70 +0,0 @@
-provider "google" {
-  credentials = "${file("${var.credentials}")}"
-  project = "${var.project}"
-  region = "${var.region}"
-  version = "= 0.1.3"
-}
-
-# Allow SSH to Platform Bastion
-resource "google_compute_firewall" "bastion" {
-  name    = "bastion-rules"
-  network = "${google_compute_network.platform.name}"
-
-  allow {
-    protocol = "icmp"
-  }
-
-  allow {
-    protocol = "tcp"
-    ports    = ["22"]
-  }
-
-  target_tags = ["bastion"]
-}
-
-# Bastion host
-resource "google_compute_address" "bastion" {
-  name = "bastion-ip"
-}
-
-resource "google_compute_instance" "bastion" {
-  name         = "bastion"
-  machine_type = "g1-small"
-  zone         = "${var.zone}"
-
-  tags = ["bastion", "platform-internal"]
-
-  boot_disk {
-    initialize_params {
-      image = "debian-cloud/debian-8"
-    }
-  }
-
-  network_interface {
-    subnetwork = "${google_compute_subnetwork.platform_net.name}"
-    access_config {
-      nat_ip = "${google_compute_address.bastion.address}"
-    }
-  }
-
-  can_ip_forward = true
-
-  metadata {
-    sshKeys = "kite:${file(var.public_key)}"
-  }
-
-  metadata_startup_script = <<EOT
-#!/bin/bash
-sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"
-iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
-EOT
-
-  service_account {
-    scopes = ["userinfo-email", "compute-ro", "storage-ro"]
-  }
-}
-
-# Ingress
-resource "google_compute_address" "ingress" {
-  name = "ingress-ip"
-}

data/tpl/gcp/terraform/network.tf

@@ -1,52 +0,0 @@
-resource "google_compute_network" "platform" {
-  name       = "${var.vpc_name}"
-}
-
-# Subnet for the Platform tools
-resource "google_compute_subnetwork" "platform_net" {
-  name          = "${var.platform_subnet_name}"
-  ip_cidr_range = "${var.subnet_cidr}"
-  network       = "${google_compute_network.platform.self_link}"
-}
-
-resource "google_compute_route" "platform-gate" {
-  name                   = "platform-gate"
-  dest_range             = "0.0.0.0/0"
-  network                = "${google_compute_network.platform.name}"
-  next_hop_instance      = "${google_compute_instance.bastion.name}"
-  next_hop_instance_zone = "${var.zone}"
-  priority               = 800
-  tags                   = ["no-ip"]
-  project                = "${var.project}"
-}
-
-# Allow open access between internal VM
-resource "google_compute_firewall" "platform_internal" {
-  name    = "platform-internal"
-  network = "${google_compute_network.platform.name}"
-
-  allow {
-    protocol = "icmp"
-  }
-
-  allow {
-    protocol = "tcp"
-  }
-
-  allow {
-    protocol = "udp"
-  }
-  target_tags = ["platform-internal"]
-  source_tags = ["platform-internal"]
-}
-
-# Allow concourse
-resource "google_compute_firewall" "allow_concourse" {
-  name    = "allow-concourse"
-  network = "${google_compute_network.platform.name}"
-
-  allow {
-    protocol = "all"
-  }
-
-}

data/tpl/gcp/terraform/outputs.tf

@@ -1,7 +0,0 @@
-output "bastion_ip" {
-  value = "${google_compute_address.bastion.address}"
-}
-
-output "ingress_ip" {
-  value = "${google_compute_address.ingress.address}"
-}

data/tpl/gcp/terraform/terraform.tfvars.tt

@@ -1,15 +0,0 @@
-# Kite config
-keypair_name = "<%= @values['kite']['keypair_name'] %>"
-public_key = "<%= @values['kite']['public_key_path'] %>"
-private_key = "<%= @values['kite']['private_key_path'] %>"
-
-# Credentials
-credentials = "<%= @values['gcp']['service_account'] %>"
-project = "<%= @values['gcp']['project'] %>"
-region = "<%= @values['gcp']['region'] %>"
-zone = "<%= @values['gcp']['zone'] %>"
-
-# Network Config
-vpc_name = "<%= @values['gcp']['vpc_name'] %>"
-platform_subnet_name = "<%= @values['gcp']['subnet_name'] %>"
-subnet_cidr = "<%= @values['gcp']['subnet_cidr'] %>"

data/tpl/gcp/terraform/variables.tf

@@ -1,37 +0,0 @@
-
-variable "project" {
-    type = "string"
-}
-
-variable "region" {
-    type = "string"
-    default = "us-east1"
-}
-
-variable "zone" {
-    type = "string"
-    default = "us-east1-d"
-}
-
-variable "credentials" {
-    type = "string"
-}
-
-variable "vpc_name" {
-    type = "string"
-    default = "platform-tools"
-}
-
-variable "platform_subnet_name" {
-    type = "string"
-    default = "platform-net"
-}
-
-variable "subnet_cidr" {
-    type = "string"
-    default = "10.0.0.0/24"
-}
-
-variable "public_key" {
-  type = "string"
-}

data/tpl/service/%output_path%/pipelines/tasks/helm-deploy.yml.tt

@@ -1,22 +0,0 @@
----
-platform: linux
-
-image_resource:
-  type: docker-image
-  source:
-    repository: heliostech/kite
-
-inputs:
-  - name: <%= @name %>-repository
-
-run:
-  path: "sh"
-  args:
-    - "-exc"
-    - |
-      helm init --client-only
-      echo ${GOOGLE_APPLICATION_JSON} > gcr_credentials.json
-      export GOOGLE_APPLICATION_CREDENTIALS="${PWD}/gcr_credentials.json"
-      echo ${KUBECONFIG_FILE} | tr -d ' ' | base64 -d > kubeconfig
-      export KUBECONFIG="${PWD}/kubeconfig"
-      helm install <%= @name %>-repository/.kite/charts/<%= @name %>

data/tpl/service/%output_path%/pipelines/tasks/run-master-tests.yml.tt

@@ -1,12 +0,0 @@
----
-platform: linux
-image_resource:
-  type: docker-image
-  source:
-    repository: <%= @image %>
-    username: _json_key
-    password: ((gcr_password))
-
-run:
-  path: sh
-  args: ["-exc", "echo Success"]

data/tpl/service/%output_path%/pipelines/tasks/run-pr-tests.yml.tt

@@ -1,12 +0,0 @@
----
-platform: linux
-image_resource:
-  type: docker-image
-  source:
-    repository: <%= @image %>
-    username: _json_key
-    password: ((gcr_password))
-
-run:
-  path: sh
-  args: ["-exc", "echo Success"]