-
-
Notifications
You must be signed in to change notification settings - Fork 27
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* fix menu links * add announcements * fix markdown * fix css
- Loading branch information
Showing
7 changed files
with
118 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
--- | ||
title: "Announcements" | ||
--- | ||
Welcome to the developer hub and documentation for Cloud Posse! Here you'll find announcements pertaining to new projects, terraform modules, helm charts, and other offerings. | ||
|
||
Check out our blog: https://cloudposse.com/blog | ||
|
19 changes: 19 additions & 0 deletions
19
content/announcements/aws-assumed-roles-repo-deprecated.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
--- | ||
title: "AWS Assumed Roles Repo Deprecated" | ||
excerpt: "We've decided to deprecate our [`aws-assume-role`](https://github.com/cloudposse/aws-assumed-role) repo in favor of using [`aws-vault`](https://github.com/99designs/aws-vault) by 99 Designs." | ||
publishDate: "2018-03-31 19:59:58" | ||
tags: | ||
- "aws-assumed-roles" | ||
- "iam" | ||
- "geodesic" | ||
--- | ||
We've decided to deprecate our [`aws-assume-role`](https://github.com/cloudposse/aws-assumed-role) repo in favor of using [`aws-vault`](https://github.com/99designs/aws-vault) by 99 Designs. This offers an outstanding, ultra-secure experience for working with IAM assumed roles for local development. | ||
|
||
Features: | ||
|
||
* Encrypted vault for IAM credentials (OSX KeyChain or file) | ||
* IAM Metadata server | ||
* MFA Token | ||
* Variable Session TTLs | ||
|
||
This has been incorporated into our latest release of [geodesic](https://docs.cloudposse.com/blog/new-major-release-of-geodesic). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,18 @@ | ||
--- | ||
title: "New Major Release of Geodesic" | ||
excerpt: "This release rips out the complicated dependencies on `Makefiles` that wrapped `helm` and `kops`. " | ||
publishDate: "2018-03-31 19:47:11" | ||
tags: | ||
- geodesic | ||
- goofys | ||
- aws-vault | ||
--- | ||
Geodesic is the fastest way to get up and running with a rock solid, production grade cloud platform leveraging best-of-breed Open Source tools. | ||
|
||
This release rips out the complicated dependencies on `Makefiles` that wrapped `helm` and `kops`. Our new philosophy is to "Keep things simple, stupid" and not try to wrap all commands under one umbrella. | ||
|
||
New with this release: | ||
- `aws-vault` to manage sessions | ||
- `fstab` to mount S3 buckets with `goofys` | ||
- `/localhost` maps to caller's `$HOME` directory | ||
|
59 changes: 59 additions & 0 deletions
59
...nouncements/new-terraform-module-for-kops-to-grant-iam-role-for-external-dns.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
--- | ||
title: "Terraform Module to Manage IAM for Kops External DNS" | ||
excerpt: "Terraform module to provision an IAM role for `external-dns` running in a Kops cluster, and attach an IAM policy to the role with permissions to modify Route53 recordsets." | ||
publishDate: "2018-03-31 19:40:53" | ||
--- | ||
|
||
|
||
## Overview | ||
|
||
This module assumes you are running [external-dns](https://github.com/kubernetes-incubator/external-dns) in a Kops cluster. | ||
|
||
It will provision an IAM role with the required permissions and grant the k8s masters the permission to assume it. | ||
|
||
This is useful to make Kubernetes services discoverable via AWS DNS services. | ||
|
||
The module uses [terraform-aws-kops-metadata](https://github.com/cloudposse/terraform-aws-kops-metadata) to lookup resources within a Kops cluster for easier integration with Terraform. | ||
|
||
|
||
## Usage | ||
|
||
```hcl | ||
module "kops_external_dns" { | ||
source = "git::https://github.com/cloudposse/terraform-aws-kops-external-dns.git?ref=master" | ||
namespace = "cp" | ||
stage = "prod" | ||
name = "domain.com" | ||
masters_name = "masters" | ||
tags = { | ||
Cluster = "k8s.domain.com" | ||
} | ||
} | ||
``` | ||
|
||
|
||
## Variables | ||
|
||
| Name | Default | Description | Required | | ||
|:-------------------|:-------------|:---------------------------------------------------------------------------------|:--------:| | ||
| `namespace` | `` | Namespace (_e.g._ `cp` or `cloudposse`) | Yes | | ||
| `stage` | `` | Stage (_e.g._ `prod`, `dev`, `staging`) | Yes | | ||
| `name` | `` | Name of the Kops DNS zone (e.g. `domain.com`) | Yes | | ||
| `attributes` | `[]` | Additional attributes (_e.g._ `policy` or `role`) | No | | ||
| `tags` | `{}` | Additional tags (_e.g._ `map("Cluster","k8s.domain.com")` | No | | ||
| `delimiter` | `-` | Delimiter to be used between `namespace`, `stage`, `name`, and `attributes` | No | | ||
| `masters_name` | `masters` | k8s masters subdomain name in the Kops DNS zone | No | | ||
|
||
|
||
## Outputs | ||
|
||
| Name | Description | | ||
|:-------------------|:---------------------| | ||
| `role_name` | IAM role name | | ||
| `role_unique_id` | IAM role unique ID | | ||
| `role_arn` | IAM role ARN | | ||
| `policy_name` | IAM policy name | | ||
| `policy_id` | IAM policy ID | | ||
| `policy_arn` | IAM policy ARN | | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters