This repository has been copied from azure-concourseci and modified for AWS
This is currently a work in progress and is incomplete, it is not safe for production without considering security, scaling and durability. It is recommended to use this as a starting point for building a Concourse CI system.
-
Knowledge
- Understanding of what Concourse CI is
- Basic understanding of AWS and permissions
-
Software installed on local machine
- Terraform (written against v0.11.13)
- AWS CLI (written against 2.0.60)
If AWS or concourse are new to you, head over to the links provided and read into what this codebase will be doing as the resources provisioned are not all free and concourse is not configured via a user interface.
This codebase will create the infrastructure needed for running Concourse CI and subsequently install and configure the software accordingly.
To provision the infrastructure, terraform is used to create the following resources in AWS:
You will need to ensure that the shell you are working in has permission to provision the above infrastructure in AWS. If you do not have permission to provision the listed infrastructure, see the Owner of your subscription.
cd terraform/
terraform init
terraform apply
See the next section for information on installation and configuration of the components (automatic - no more commands are required)
Once terraform has complete the provisioning of the infrastructure, ansible is used to install and configure the following using cloud-init automatically:
- Postgresql
- Concourse web
- Concourse worker
All of the software will be installed and configured on a single machine however when running at scale it may be worth considering multiple web and worker nodes. More on scaling and performance can be found on the Concourse CI website.
Local Authentication is currently enabled with the username concourse and password concourse.
If you want to use Github OAuth, see the sample key vault client id and secret id terraform declarations in keyvault.tf. Using the azure machine identity, retrieve the secrets and write them into the templated concourse-web service file.
Inspec is used to remotely test whether ansible successfully started concourse and postgres.
To run the inspec tests:
inspec exec inspec -t ssh://concourse-admin@<dns label>.westeurope.cloudapp.azure.com
where the dns label is the value specified by the public_ip_label variable.
- Two jobs, one with a single task and the other with two tasks
- Sample pipelines
- Tests for terraform provisioned infrastructure