@newskit-render/core 0.0.0-d55b7d88

package/infrastructure/INFRASTRUCTURE.md

@@ -0,0 +1,142 @@
+# Core infrastructure
+
+## ECR docker repo
+
+### Description
+
+`terraform-ecr` folder contains terraform code that creates an ECR repo in AWS and allows EKS clusters to pull images from it.
+
+```
+terraform-ecr/
+├── dev.tfvars
+├── ecr.tf
+├── main.tf
+└── variables.tf
+```
+
+### Variables
+
+You should already have created an entry in the Service Catalogue for your project. The following info is used to tag the AWS resources:
+
+- `<% SERVICE_CATALOGUE_ID >`
+- `<% SERVICE_NAME >`
+- `<% ENVIRONMENT >`
+
+`<% PROJECT_NAME >` is used to name the ECR repo and usually is the same as the git repo name
+
+## Helm
+
+### Description
+
+Defines a helm chart for deploying the kubernetes resources needed for the project
+
+```
+helm
+├── Chart.yaml
+├── templates
+│   ├── _helpers.tpl
+│   ├── deployment.yaml
+│   ├── horizontalpodautoscaler.yaml
+│   ├── ingress.yaml
+│   ├── networkpolicy.yaml
+│   ├── secret.yaml
+│   └── service.yaml
+├── values-dev.yaml
+├── values-local.yaml
+├── values-pr.yaml
+├── values-prod.yaml
+├── values-staging.yaml
+└── values.yaml
+```
+
+`templates` folder includes the generalized templates for kubernetes resources and a helpers file defining common variables used in them
+Different values files include specific values for those templates for different environments.
+
+### Variables
+
+- `<% PROJECT_NAME >` - is used to name the chart and k8s resources and usually is the same as the git repo name
+- `<% REPOSITORY_NAME >` - Name of the repository created with the ECR terraform code
+- `<% SERVICE_NAME >` - Service name from the Service Catalogue
+
+## CircleCI
+
+### Description
+
+Provides a sample CircleCI configuration file.
+
+```
+.circleci/
+└── config.yml
+```
+
+The configuration uses an inline orb to define most of the job needed for a proper build and deploy workflow.
+
+There are 3 workflows:
+
+- pull_request - should be triggered on on pull requests and create separate environment used by devs for features
+
+![pull_request](pull_request.png)
+
+- remove_pr - remove PR environment after merge
+
+![remove_pr](remove_pr.png)
+
+- build_and_depoy - main workflow after feature branch merge to build test and deploy the product
+
+![build_and_deploy](build_and_deploy.png)
+
+### Variables
+
+This configuration relies on getting values from CircleCI contexts. There should be one context per environment in the format: `<% PROJECT_NAME >-<% ENVIRONMENT >`
+
+- stage
+  - `AWS_ACCESS_KEY_ID` - AWS credentials for EKS cluster
+  - `AWS_SECRET_ACCESS_KEY` - AWS credentials for EKS cluster
+  - `AWS_EKS_CLUSTER`- name of eks cluster - ceng-eng-dev
+  - `AWS_ASSUME_ROLE_ARN` - user role used in EKS cluster
+  - `AWS_DEFAULT_REGION` - usually eu-west-1
+  - `GIT_EMAIL` - Github user configuration
+  - `GIT_USERNAME` - Github user configuration
+  - `NEWSKIT_API_ENV_URL` - Newskit API configuration
+  - `NEWSKIT_API_X_API_KEY` - Newskit API configuration
+- dev - same as stage plus the following:
+  - `AWS_ACCOUNT_ID` - The account id for ECR repo
+  - `ECR_AWS_ACCESS_KEY_ID` - AWS credentials for ECR
+  - `ECR_AWS_SECRET_ACCESS_KEY` - AWS credentials for ECR
+  - `ECR_AWS_ASSUME_ROLE_ARN` - AWS role for ECR
+  - `PACT_BROKER_TOKEN` - pact broker configuration
+  - `PACT_BROKER_URL` - pact broker configuration
+- prod - same as stage plus the following
+  - `BOOK_RELEASE_ROLE_ARN` - AWS IAM role giving access to S3 bucket with release sheet credentials
+  - `GIT_ACCESS_TOKEN` - Github personal access token used to created releases
+  - `GIT_EMAIL` - Email for user creating releases
+  - `GIT_USERNAME` - Username for user creating releases
+  - `PRODUCT_OWNER` - Product owner used for releases - needs to be in Remedy on Demand
+  - `RELEASE_AWS_ACCESS_KEY_ID` - AWS credentials for release role
+  - `RELEASE_AWS_SECRET_ACCESS_KEY` - AWS credentials for release role
+  - `SLACK_RELEASES_WEBHOOK` - Webhook for releases slack channel
+
+The following placeholders are used in the CircleCI `config.yml` configuration:
+
+- `<% HELM_BUCKET_NAME >` - S3 bucket that is going to host helm charts
+- `<% HELM_RELEASE_NAME >` - Name of the helm release. Usually alligns with `<% PROJECT_NAME >`
+- `<% TEAM >`- Used to generate the S3 bucket key i.e. product-platforms
+- `<% PACKAGE_MANAGER >` - package manage i.e. yarn or npm
+- `<% PACKAGE_MANAGER_LOCK_FILE >` - lock file i.e. yarn.lock or package-lock.json
+- `<% PACKAGE_INSTALL >` - install command for package manager
+- `<% PACKAGE_RUN > ` - run command for package manager
+- `<% K8S_NAMESPACE >`- Kubernetes namespace without environment suffix
+- `<% TERRAFORM_FOLDER >` - folder inside the package containing terraform code
+- `<% GIT_REPO` > - URL for the Github repo used in link to release info
+- `<% SSH_KEY `> - Fingerprint for SSH key with write access used by CircleCI
+
+## Release-documentation-cli
+
+### Description
+
+The release-documentation-cli tool is used in NewsUK for automating the release process. Further usage information can be found here: https://github.com/newsuk/release-documentation-cli
+
+There is a configuration file that specifies the release details according to the [Release Request Form](https://docs.google.com/forms/d/e/1FAIpQLSc_6O1hWIStREGZOEelg9P5D-kxnZaddStwed1CUx0KxTCjxw/formResponse) that should be in the root of the project/ package: [release-documentation-cli.config.json](./release-documentation-cli.config.json). Check the form for possible values.
+
+> [!Note]
+> The `rodConfigurationItemName` and `rodConfigurationItemReconId` need to be created in Remedy on Demand system.

package/infrastructure/helm/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: <% PROJECT_NAME >
+description: A <% PROJECT_NAME > Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+version: 0.1.3
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application.
+appVersion: 0.0.2

package/infrastructure/helm/templates/_helpers.tpl

@@ -0,0 +1,87 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "core.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "core.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "core.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Labels
+*/}}
+{{- define "core.labels" -}}
+{{ include "core.selectors" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+news.co.uk/service-catalogue-id: {{ .Values.tags.serviceCatalogueId | quote }}
+news.co.uk/service-name: {{ .Values.tags.serviceName }}
+news.co.uk/environment: {{ .Values.environment }}
+{{- end -}}
+
+
+
+{{/*
+Selector labels
+*/}}
+{{- define "core.selectors" -}}
+app.kubernetes.io/name: {{ include "core.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}
+
+{{- define "core.annotations" -}}
+meta.helm.sh/release-name: {{ .Chart.Name | quote }}
+meta.helm.sh/release-namespace: {{ .Values.namespace | quote }}
+app.kubernetes.io/managed-by: "Helm"  
+{{- end }}
+
+{{/*
+Annotations for ALB
+*/}}
+{{- define "alb.annotations" -}}
+{{- if ne .Values.environment "local" -}}
+annotations:
+  kubernetes.io/ingress.class: alb
+  alb.ingress.kubernetes.io/inbound-cidrs: "0.0.0.0/0"
+  alb.ingress.kubernetes.io/healthcheck-path: /api/health-check
+  alb.ingress.kubernetes.io/healthcheck-interval-seconds: '300'
+  alb.ingress.kubernetes.io/scheme: internet-facing
+  alb.ingress.kubernetes.io/tags: "Environment={{ .Values.environment }},ServiceName={{ .Values.tags.serviceName }},ServiceCatalogueId={{ .Values.tags.serviceCatalogueId }}"
+  alb.ingress.kubernetes.io/certificate-arn: {{ .Values.alb.certificate }}
+  alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
+  alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
+{{- if ne .Values.environment "pr" }}
+  external-dns.alpha.kubernetes.io/hostname: {{ .Values.alb.hostname }}
+{{- else }}
+  alb.ingress.kubernetes.io/group.name: {{ .Values.namespace }}
+  external-dns.alpha.kubernetes.io/hostname: {{ .Values.alb.prSuffix }}-{{ .Values.alb.hostname }}
+  external-dns.alpha.kubernetes.io/ttl: "60"
+{{- end -}}
+{{- end -}}
+{{- end -}}

package/infrastructure/helm/templates/deployment.yaml

@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "core.fullname" . }}
+  namespace: {{ .Values.namespace }}
+  labels: {{ include "core.labels" . | nindent 4 }}
+  annotations: {{ include "core.annotations" . | nindent 4 }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  revisionHistoryLimit: {{ .Values.revisionHistoryLimit }}
+  selector:
+    matchLabels: {{ include "core.selectors" . | nindent 6 }}
+  template:
+    metadata:
+      annotations:
+        {{- if eq .Values.environment "pr" }}
+        rollme: {{ randAlphaNum 5 }}
+        {{- end }}
+        checksum/config: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
+      labels: {{ include "core.selectors" . | nindent 8 }}
+    spec:
+      imagePullSecrets: {{ toYaml .Values.imagePullSecrets | nindent 8 }}
+      containers:
+        - name: {{ .Chart.Name }}
+          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          env:
+          {{- range $key, $val := .Values.envs }}
+            - name: {{ $key }}
+              value: {{ $val | quote }}
+          {{- end }}
+          {{- range $key, $value := .Values.secret.items }}
+            - name: {{ $key }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "core.fullname" $ }}
+                  key: {{ $key }}
+          {{- end }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+              protocol: TCP
+          readinessProbe: {{ toYaml .Values.readinessProbe | nindent 12 }}
+          livenessProbe: {{ toYaml .Values.livenessProbe | nindent 12 }}
+          resources: {{ toYaml .Values.resources | nindent 12 }}

package/infrastructure/helm/templates/horizontalpodautoscaler.yaml

@@ -0,0 +1,21 @@
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ include "core.fullname" . }}-hpa
+  namespace: {{ .Values.namespace }}
+  labels: {{ include "core.labels" . | nindent 4 }}
+  annotations: {{ include "core.annotations" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "core.fullname" . }}
+  minReplicas: {{ .Values.horizontalAutoScale.min }}
+  maxReplicas: {{ .Values.horizontalAutoScale.max }}
+  metrics:
+  - type: Resource
+    resource:
+      name: {{ .Values.horizontalAutoScale.resource }}
+      target:
+        type: Utilization
+        averageUtilization: {{ .Values.horizontalAutoScale.utilization }}

package/infrastructure/helm/templates/ingress.yaml

@@ -0,0 +1,31 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "core.fullname" . }}
+  namespace: {{ .Values.namespace }}
+  {{- include "alb.annotations" . | nindent 2 }}
+  labels:
+    app: {{ include "core.fullname" . }}
+spec:
+  rules:
+    {{- if eq .Values.environment "pr" }}
+    - host: "{{ .Values.alb.prSuffix}}-{{ .Values.alb.hostname }}"
+      http:
+    {{- else }}
+    - http:
+    {{- end }}
+        paths:
+         - pathType: Prefix
+           path: /
+           backend: 
+             service:
+              name: ssl-redirect
+              port:
+                name: use-annotation 
+         - pathType: Prefix
+           path: /
+           backend:
+              service:
+                name: {{ include "core.fullname" . }}
+                port: 
+                  number: {{ .Values.service.port }}

package/infrastructure/helm/templates/networkpolicy.yaml

@@ -0,0 +1,26 @@
+{{- if .Values.networkpolicy.enabled -}}
+{{- $fullName := include "core.fullname" . -}}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ $fullName }}-allowed-traffic
+  namespace: {{ .Values.namespace }}
+  labels: {{ include "core.labels" . | nindent 4 }}
+  annotations: {{ include "core.annotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchExpressions :
+      - key: app.kubernetes.io/name
+        operator: In
+        values:
+          - {{ include "core.name" . }}
+  ingress:
+    - ports:
+      - port: {{ .Values.service.port }}
+        protocol: TCP
+  egress:
+    - {}
+  policyTypes:
+    - Ingress
+    - Egress
+{{- end }}

package/infrastructure/helm/templates/secret.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "core.fullname" . }}
+  namespace: {{ .Values.namespace }}
+  labels: {{ include "core.labels" . | nindent 4 }}
+  annotations: {{ include "core.annotations" . | nindent 4 }}
+type: Opaque
+data:
+  {{- range $key, $value := .Values.secret.items }}
+  {{ $key }}: {{ $value | toString | b64enc | quote }}
+  {{- end }}

package/infrastructure/helm/templates/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "core.fullname" . }}
+  namespace: {{ .Values.namespace }}
+  labels: {{ include "core.labels" . | nindent 4 }}
+  annotations: {{ include "core.annotations" . | nindent 4 }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: {{ .Values.service.port }}
+      protocol: TCP
+      name: http
+  selector: {{ include "core.selectors" . | nindent 4 }}

package/infrastructure/helm/values-dev.yaml

@@ -0,0 +1,39 @@
+# Default values for NewsKit Render.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+namespace: <% PROJECT_NAME >-dev
+
+replicaCount: 1
+revisionHistoryLimit: 3
+
+envs:
+  NEWSKIT_API_ENV_URL: 'https://newskit.dev.newsapis.co.uk/graphql'
+  PUBLISHER: ''
+  TITLE: ''
+  SITEMAP_PUBLICATION_NAME: ''
+  SITEMAP_FIRST_PUBLICATION_DATE: ''
+  TWITTER_USERNAME: ''
+  GSC_ID: ''
+  NEW_RELIC_APP_NAME: '<% PROJECT_PREFIX >:<% PROJECT_NAME >:dev'
+  NEW_RELIC_ENABLED: true
+
+resources:
+  limits:
+    cpu: 1
+    memory: 512Mi
+  requests:
+    cpu: 200m
+    memory: 256Mi
+
+environment: dev
+
+alb:
+  certificate: arn:aws:acm:eu-west-1:720262317718:certificate/eb7cf157-d5c3-4d6a-9c2c-70714526a653
+  # needs to work with external-dns in EKS cluster
+  hostname: <% PROJECT_NAME >.ceng-dev.newsuk.tech
+
+horizontalAutoScale:
+  min: 1
+  max: 2
+  resource: cpu
+  utilization: 60

package/infrastructure/helm/values-local.yaml

@@ -0,0 +1,30 @@
+# Default values for NewsKit Render.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+namespace: <% PROJECT_NAME >-local
+
+replicaCount: 1
+revisionHistoryLimit: 3
+
+imagePullSecrets:
+  - name: regcred
+
+
+envs:
+  NEWSKIT_API_ENV_URL: "https://newskit.dev.newsapis.co.uk/graphql"
+
+resources:
+  limits:
+    cpu: 1
+    memory: 512Mi
+  requests:
+    cpu: 200m
+    memory: 256Mi
+
+environment: local
+
+horizontalAutoScale:
+  min: 1
+  max: 2
+  resource: cpu
+  utilization: 60

package/infrastructure/helm/values-pr.yaml

@@ -0,0 +1,40 @@
+# Default values for NewsKit Render.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+namespace: <% PROJECT_NAME >-pr
+
+replicaCount: 1
+revisionHistoryLimit: 3
+
+envs:
+  NEWSKIT_API_ENV_URL: 'https://newskit.dev.newsapis.co.uk/graphql'
+  PUBLISHER: ''
+  TITLE: ''
+  SITEMAP_PUBLICATION_NAME: ''
+  SITEMAP_FIRST_PUBLICATION_DATE: ''
+  TWITTER_USERNAME: ''
+  GSC_ID: ''
+  NEW_RELIC_APP_NAME: '<% PROJECT_PREFIX >:<% PROJECT_NAME >:dev'
+  NEW_RELIC_ENABLED: false
+
+resources:
+  limits:
+    cpu: 1
+    memory: 512Mi
+  requests:
+    cpu: 200m
+    memory: 256Mi
+
+environment: pr
+
+alb:
+  certificate: arn:aws:acm:eu-west-1:720262317718:certificate/eb7cf157-d5c3-4d6a-9c2c-70714526a653
+  # needs to work with external-dns in EKS cluster
+  hostname: <% PROJECT_NAME >.ceng-dev.newsuk.tech
+  prSuffix: ''
+
+horizontalAutoScale:
+  min: 1
+  max: 2
+  resource: cpu
+  utilization: 60

package/infrastructure/helm/values-prod.yaml

@@ -0,0 +1,39 @@
+# Default values for NewsKit Render.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+namespace: <% PROJECT_NAME >-prod
+
+replicaCount: 2
+revisionHistoryLimit: 5
+
+envs:
+  NEWSKIT_API_ENV_URL: 'https://newskit.newsapis.co.uk/graphql'
+  PUBLISHER: ''
+  TITLE: ''
+  SITEMAP_PUBLICATION_NAME: ''
+  SITEMAP_FIRST_PUBLICATION_DATE: ''
+  TWITTER_USERNAME: ''
+  GSC_ID: ''
+  NEW_RELIC_APP_NAME: '<% PROJECT_PREFIX >:<% PROJECT_NAME >:prod'
+  NEW_RELIC_ENABLED: true
+
+resources:
+  limits:
+    cpu: 1
+    memory: 512Mi
+  requests:
+    cpu: 200m
+    memory: 256Mi
+
+environment: prod
+
+alb:
+  certificate: arn:aws:acm:eu-west-1:474887192380:certificate/ec49c52e-1347-4150-a577-276b397f2c53
+  # needs to work with external-dns in EKS cluster
+  hostname: <% PROJECT_NAME >.prod.ceng.newsuk.tech
+
+horizontalAutoScale:
+  min: 2
+  max: 4
+  resource: cpu
+  utilization: 60

package/infrastructure/helm/values-staging.yaml

@@ -0,0 +1,39 @@
+# Default values for NewsKit Render.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+namespace: <% PROJECT_NAME >-staging
+
+replicaCount: 2
+revisionHistoryLimit: 5
+
+envs:
+  NEWSKIT_API_ENV_URL: 'https://newskit.staging.newsapis.co.uk/graphql'
+  PUBLISHER: ''
+  TITLE: ''
+  SITEMAP_PUBLICATION_NAME: ''
+  SITEMAP_FIRST_PUBLICATION_DATE: ''
+  TWITTER_USERNAME: ''
+  GSC_ID: ''
+  NEW_RELIC_APP_NAME: '<% PROJECT_PREFIX >:<% PROJECT_NAME >:staging'
+  NEW_RELIC_ENABLED: true
+
+resources:
+  limits:
+    cpu: 1
+    memory: 512Mi
+  requests:
+    cpu: 200m
+    memory: 256Mi
+
+environment: staging
+
+alb:
+  certificate: arn:aws:acm:eu-west-1:033746730321:certificate/ba403625-cb5d-4bad-af6e-3dc1a452937b
+  # needs to work with external-dns in EKS cluster
+  hostname: <% PROJECT_NAME >.staging.ceng.newsuk.tech
+
+horizontalAutoScale:
+  min: 2
+  max: 4
+  resource: cpu
+  utilization: 60

package/infrastructure/helm/values.yaml

@@ -0,0 +1,44 @@
+image:
+  repository: <% REPOSITORY_NAME >
+  tag: ""
+  pullPolicy: Always
+
+imagePullSecrets: []
+nameOverride: ""
+fullnameOverride: ""
+
+service:
+  type: NodePort
+  port: 3000
+
+tags:
+  serviceCatalogueId: <% SERVICE_CATALOGUE_ID >
+  serviceName: <% SERVICE_NAME >
+
+envs:
+  NODE_ENV: prod
+
+secret:
+  items:
+    {}
+
+networkpolicy:
+  enabled: true
+  annotations: {}
+
+# Health check endpoint
+readinessProbe:
+  httpGet:
+    path: /api/health-check
+    port: 3000
+  initialDelaySeconds: 5
+  periodSeconds: 1
+
+livenessProbe:
+  httpGet:
+    path: /api/health-check
+    port: 3000
+  initialDelaySeconds: 5
+  timeoutSeconds: 2
+  periodSeconds: 3
+  failureThreshold: 5

package/infrastructure/release-documentation-cli.config.json

@@ -0,0 +1,18 @@
+{
+  "gitConfigPath": ".git/config",
+  "releaseDetails": {
+    "emailAddress": "<sample_email@news.co.uk>",
+    "title": "<Sample Project>",
+    "platform": "<Sample Platform>",
+    "osType": "<sample OS>",
+    "partner": "<sample Partner>",
+    "priority": "<sample priority>",
+    "businessJustification": "<sample justification>",
+    "testingMethod": "<sample testing method>",
+    "testingToolsUsed": "<sample testing tools>",
+    "releaseDurationMinutes": 15,
+    "rodConfigurationItemName": "<rod item>",
+    "rodConfigurationItemReconId": "<rod recon id>"
+  },
+  "localChangelogPath": "./CHANGELOG.md"
+}

package/infrastructure/terraform-ecr/dev.tfvars

@@ -0,0 +1,3 @@
+# account IDs for following EKS accounts: dev, staging, prod
+ecr_read_only_principals = ["720262317718", "033746730321", "474887192380"]
+