Inicio Explorar Axuda
Rexistro Iniciar sesión
AFS
/
xdr-terraform-modules
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: df47ad828b
Ramas Etiquetas
xdr-terraform-m...
/
base
/
codebuild_ecr_base
Jeremy Cooper [AFS MBP] 67c98b7677 Updates IMDS & ECR encryption syntax | tfsec/chekov ignores | %!s(int64=3) %!d(string=hai) anos
..
README.md b0033b86e4 MSOCI-2063 codebuild for RPM building container images %!s(int64=3) %!d(string=hai) anos
accounts.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
constants.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
globals.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
iam.tf baa1f43824 Applied `terraform fmt` to all modules %!s(int64=3) %!d(string=hai) anos
kms.tf baa1f43824 Applied `terraform fmt` to all modules %!s(int64=3) %!d(string=hai) anos
outputs.tf baa1f43824 Applied `terraform fmt` to all modules %!s(int64=3) %!d(string=hai) anos
repos.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
s3.tf 67c98b7677 Updates IMDS & ECR encryption syntax | tfsec/chekov ignores | %!s(int64=3) %!d(string=hai) anos
vars.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos

README.md

CodeBuild ECR Base

This module is the building blocks for the AWS CodeBuild projects. It has the foundational pieces for using codebuild to build Linux software / RPMs. You may need to compile an RPM for a specific release of an OS, and CodeBuild by default only has Docker images for Amazon Linux 2 and Ubuntu. So part of this builds RHEL Docker images so that you can compile software in a RHEL userspace.

It builds these resources:

  • IAM role for Codebuild jobs to run and be launched by Eventbridge (codebuild-role)
  • S3 bucket for holding Codebuild artifacts (xdr-codebuild-artifacts)
  • ECR Repos for OS-specific containers
  • Codebuild jobs to docker build containers for the OS-specific containers
    • RHEL 7
    • RHEL 8
    • RHEL 9 beta (not working right now)

The ECR repo and related codebuild jobs use a submodule. The OS-specific containers are rebuilt daily to keep them up to date with the latest RHEL patches.