Run teleport-aws-quickstart as a part of CI/CD hook

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.

https://goteleport.com

GNU Affero General Public License v3.0

16.98k stars 1.71k forks source link

Run teleport-aws-quickstart as a part of CI/CD hook #1894

Closed klizhentas closed 6 years ago

klizhentas commented 6 years ago

Description

Every time a PR is issued to teleport-aws-quickstart, Jenkins job should build packer image, create a stack, delete a stack.

Logs should be shipped to our stackdriver instance the way robotest ships them for further inspection.

klizhentas commented 6 years ago

https://github.com/gravitational/teleport-quickstart-aws

klizhentas commented 6 years ago

btw, we no longer need this to be a separate repo, can you move this repo to assets/marketplace instead

webvictim commented 6 years ago

Repo has been moved under assets/marketplace in the main telegram repo. @klizhentas would you like me to commit a README saying that it's moved, or should we just delete the repo?

klizhentas commented 6 years ago

yeah, let's add a README note

webvictim commented 6 years ago

The PR is for basic functionality that will build Packer AMIs and a Cloudformation stack any time a PR is raised against teleport.

Still to do:

Isolate builds so they only run when things under assets/marketplace are changed?
Make sure we're building the latest git commits into Packer AMIs rather than specific alpha binaries from S3 storage?
Work out an improved heathcheck mechanism if necessary
Ship logs to Stackdriver for archiving and inspection
Integrate Jenkins with Github PRs so it gives the thumbs up/down on the relevant PRs

webvictim commented 6 years ago

PR is merged.

After a bit of research, I'm following some instructions (https://stackoverflow.com/questions/36850485/how-to-trigger-a-jenkins-2-0-pipeline-job-from-a-github-pull-request) and changing Jenkins to use a standard pipeline job rather than a multibranch pipeline job - this should mean that it's able to track PRs and start builds for them.

klizhentas commented 6 years ago

@webvictim can we close this issue?

webvictim commented 6 years ago

@klizhentas Yeah, I think so. We're still not shipping the logs to Stackdriver but I'll open another issue for that.