├── .github ├── PULL_REQUEST_TEMPLATE.md ├── dependabot.yml └── workflows │ ├── check_gpg_keys.yml │ └── test_on_pr.yml ├── .gitignore ├── .gitmodules ├── .gpg-id ├── .rubocop.yml ├── .ruby-version ├── .secrets.baseline ├── Gemfile ├── Gemfile.lock ├── LICENSE ├── Makefile ├── README.md ├── aws-nuke ├── ci.yaml ├── dev.yaml ├── prod.yaml └── staging.yaml ├── bin └── .gitkeep ├── concourse ├── .gitignore ├── .rspec ├── pipelines │ ├── concourse-lite-self-terminate.yml │ ├── create-bosh-concourse.yml │ └── destroy-bosh-concourse.yml ├── resources │ ├── concourse-secrets-keep.yml │ └── finalize.yml ├── scripts │ ├── bosh-tunnel.sh │ ├── check_public_key_vars_test.go │ ├── concourse-lite-self-terminate.sh │ ├── deploy-pipeline.sh │ ├── environment.sh │ ├── extract_terraform_state_to_yaml.rb │ ├── extract_terraform_state_to_yaml_test.go │ ├── extract_tf_vars_from_terraform_state.rb │ ├── extract_tf_vars_from_terraform_state_test.go │ ├── extract_tf_vars_from_yaml.rb │ ├── file_to_yaml.sh │ ├── file_to_yaml_test.go │ ├── fly_sync_and_login.sh │ ├── generate-public-key-vars.rb │ ├── get_static_cidrs.rb │ ├── pipelines.sh │ ├── scripts_suite_test.go │ ├── self-update-pipeline.sh │ ├── ssh.sh │ ├── val_from_yaml.rb │ ├── val_from_yaml_test.go │ └── wait_for_secrets.sh ├── spec │ ├── image_resource_spec.rb │ ├── pipeline_validation_spec.rb │ ├── spec_helper.rb │ └── vars_files_spec.rb ├── tasks │ ├── delete-ssh-keys.yml │ └── render-bosh-manifest.yml └── vars-files │ ├── gpg-keys-empty.yml │ └── gpg-keys.yml ├── doc └── bosh_failover.md ├── go.mod ├── go.sum ├── manifests ├── bosh-manifest │ ├── .gitignore │ ├── .rspec │ ├── operations.d │ │ ├── 010-dns-UPSTREAM.yml │ │ ├── 010-ntp-UPSTREAM.yml │ │ ├── 020-cpi-UPSTREAM.yml │ │ ├── 021-iam-instance-profile.yml │ │ ├── 022-security-groups.yml │ │ ├── 023-cpi-uses-gp3-disks.yml │ │ ├── 030-external-ip-not-recommended-UPSTREAM.yml │ │ ├── 030-increase-disk.yml │ │ ├── 030-set-bosh-cert-san.yml │ │ ├── 030-set-stemcell.yml │ │ ├── 030-update-instance-type.yml │ │ ├── 031-blobstore.yml │ │ ├── 031-set-mbus-cert-san.yml │ │ ├── 031-set-vcap-password.yml │ │ ├── 040-cloud-provider.yml │ │ ├── 100-add-db-admin.yml │ │ ├── 101-director-enable-bosh-dns.yml │ │ ├── 102-director-set-trusted-certs.yml │ │ ├── 109-director-misc-properties.yml │ │ ├── 120-cpi.yml │ │ ├── 140-nats.yml │ │ ├── 200-uaa-UPSTREAM.yml │ │ ├── 201-uaa.yml │ │ ├── 209-uaa-remove-unused-users-and-clients.yml │ │ ├── 300-credhub-UPSTREAM.yml │ │ ├── 301-credhub.yml │ │ ├── 400-audit.yml │ │ ├── 500-external-db-UPSTREAM.yml │ │ ├── 600-exporters.yml │ │ └── 900-set-tags.yml │ ├── operations │ │ └── scale-down-dev.yml │ ├── scripts │ │ ├── cleanup-bosh-vars-store.rb │ │ ├── generate-bosh-secrets.rb │ │ ├── generate-manifest.sh │ │ ├── generate-uaa-users-ops-file.rb │ │ └── generate-unix-users-ops-file.rb │ ├── spec │ │ ├── generate_uaa_users_ops_file_spec.rb │ │ ├── generate_unix_users_ops_file_spec.rb │ │ ├── manifest_validation_spec.rb │ │ ├── properties_spec.rb │ │ ├── rds_validation_spec.rb │ │ ├── release_versions_spec.rb │ │ ├── secret_generation_spec.rb │ │ ├── spec_helper.rb │ │ ├── support │ │ │ └── manifest_helpers.rb │ │ └── variables_spec.rb │ └── variables.yml ├── cloud-config │ └── paas-bootstrap-cloud-config.yml ├── concourse-manifest │ ├── .gitignore │ ├── .rspec │ ├── concourse-base.yml │ ├── github_auth │ │ ├── config.yml │ │ └── dev_ci_additional_users.yml │ ├── operations.d │ │ ├── 010-x-frame-options.yml │ │ └── 400-audit.yml │ ├── scripts │ │ └── generate-manifest.sh │ └── spec │ │ ├── manifest_generation_spec.rb │ │ ├── manifest_validation_spec.rb │ │ ├── spec_helper.rb │ │ └── support │ │ └── manifest_helpers.rb ├── cpi-config │ └── cpi-config.yml ├── runtime-config │ ├── .gitignore │ ├── .rspec │ ├── runtime-config-base.yml │ ├── scripts │ │ ├── generate-runtime-config.sh │ │ └── generate-unix-users-ops-file.rb │ └── spec │ │ ├── addons_spec.rb │ │ ├── generate_unix_users_ops_file_spec.rb │ │ ├── releases_spec.rb │ │ ├── runtime_config_validation_spec.rb │ │ ├── spec_helper.rb │ │ └── support │ │ └── runtime_config_helpers.rb └── shared │ ├── .gitignore │ ├── .rspec │ ├── lib │ └── secret_generator.rb │ ├── scripts │ ├── check-certificates.rb │ └── drop-vars-store-secrets-for-rotation.rb │ └── spec │ ├── cross-manifest │ └── versions_spec.rb │ ├── fixtures │ ├── bosh-terraform-outputs.yml │ ├── concourse-terraform-outputs.yml │ ├── sample_key │ ├── sample_key.pub │ └── vpc-terraform-outputs.yml │ ├── scripts │ └── drop_vars_store_secrets_for_rotation_spec.rb │ ├── secret_generator_spec.rb │ ├── spec_helper.rb │ └── support │ └── fixture_helpers.rb ├── requirements.txt ├── scripts ├── bosh ├── bosh-cli.sh ├── check_gpg_keys.sh ├── lint_terraform.sh ├── rds-cert-check.sh ├── ssh_bosh.sh ├── teardown-aws │ ├── ec2.sh │ ├── iam.sh │ ├── logging-and-sanitisation.sh │ ├── rds.sh │ ├── route53.sh │ ├── s3.sh │ └── vpc.sh └── upload-secrets │ ├── manage-github-secrets.sh │ ├── upload-cyber-secrets.sh │ ├── upload-cyber-tfvars.sh │ ├── upload-google-oauth-secrets.sh │ └── upload-paas-trusted-people.sh ├── terraform ├── .terraform.lock.hcl ├── bosh │ ├── acm.tf │ ├── blobstore.tf │ ├── bosh_dns.tf │ ├── bosh_eip.tf │ ├── canary_dns.tf │ ├── cloudwatch_logs.tf │ ├── globals.tf │ ├── id_rsa.pub │ ├── lb.tf │ ├── outputs.tf │ ├── providers.tf │ ├── rds.tf │ ├── security_groups.tf │ ├── ssh-key-pairs.tf │ ├── variables.tf │ ├── version_constraint.tf │ └── versions.tf ├── bucket │ ├── globals.tf │ ├── outputs.tf │ ├── providers.tf │ ├── tf-state-bucket.tf │ ├── version_constraint.tf │ └── versions.tf ├── ci.tfvars ├── concourse │ ├── acm.tf │ ├── codecommit.tf │ ├── elastic_ip.tf │ ├── elb.tf │ ├── git_ssh_key_id │ ├── globals.tf │ ├── outputs.tf │ ├── providers.tf │ ├── rds.tf │ ├── security_group.tf │ ├── variables.tf │ ├── version_constraint.tf │ └── versions.tf ├── cyber │ ├── cloudwatch_logs.tf │ ├── globals.tf │ ├── providers.tf │ ├── variables.tf │ ├── version_constraint.tf │ └── versions.tf ├── dev.tfvars ├── eu-west-1.tfvars ├── eu-west-2.tfvars ├── globals.tf ├── prod.tfvars ├── providers.tf ├── staging.tfvars ├── update-terraform-providers.sh ├── version_constraint.tf ├── versions.tf └── vpc │ ├── endpoints.tf │ ├── flow-log.tf │ ├── globals.tf │ ├── outputs.tf │ ├── providers.tf │ ├── security-group.tf │ ├── subnet.tf │ ├── version_constraint.tf │ ├── versions.tf │ └── vpc.tf ├── vagrant ├── Vagrantfile ├── deploy.sh ├── destroy.sh ├── docker-compose.yml ├── environment.sh ├── local-ssh.sh ├── post-deploy.d │ └── 00-run-docker.sh └── spec │ ├── docker_compose_spec.rb │ └── spec_helper.rb └── yamllint.yml /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/workflows/check_gpg_keys.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.github/workflows/check_gpg_keys.yml -------------------------------------------------------------------------------- /.github/workflows/test_on_pr.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.github/workflows/test_on_pr.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.gitmodules -------------------------------------------------------------------------------- /.gpg-id: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.gpg-id -------------------------------------------------------------------------------- /.rubocop.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.rubocop.yml -------------------------------------------------------------------------------- /.ruby-version: -------------------------------------------------------------------------------- 1 | 3.1.0 2 | -------------------------------------------------------------------------------- /.secrets.baseline: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/.secrets.baseline -------------------------------------------------------------------------------- /Gemfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/Gemfile -------------------------------------------------------------------------------- /Gemfile.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/Gemfile.lock -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/README.md -------------------------------------------------------------------------------- /aws-nuke/ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/aws-nuke/ci.yaml -------------------------------------------------------------------------------- /aws-nuke/dev.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/aws-nuke/dev.yaml -------------------------------------------------------------------------------- /aws-nuke/prod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/aws-nuke/prod.yaml -------------------------------------------------------------------------------- /aws-nuke/staging.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/aws-nuke/staging.yaml -------------------------------------------------------------------------------- /bin/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /concourse/.gitignore: -------------------------------------------------------------------------------- 1 | spec/examples.txt 2 | -------------------------------------------------------------------------------- /concourse/.rspec: -------------------------------------------------------------------------------- 1 | --color 2 | --require spec_helper 3 | -------------------------------------------------------------------------------- /concourse/pipelines/concourse-lite-self-terminate.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/pipelines/concourse-lite-self-terminate.yml -------------------------------------------------------------------------------- /concourse/pipelines/create-bosh-concourse.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/pipelines/create-bosh-concourse.yml -------------------------------------------------------------------------------- /concourse/pipelines/destroy-bosh-concourse.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/pipelines/destroy-bosh-concourse.yml -------------------------------------------------------------------------------- /concourse/resources/concourse-secrets-keep.yml: -------------------------------------------------------------------------------- 1 | --- 2 | keep: 3 | -------------------------------------------------------------------------------- /concourse/resources/finalize.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/resources/finalize.yml -------------------------------------------------------------------------------- /concourse/scripts/bosh-tunnel.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/bosh-tunnel.sh -------------------------------------------------------------------------------- /concourse/scripts/check_public_key_vars_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/check_public_key_vars_test.go -------------------------------------------------------------------------------- /concourse/scripts/concourse-lite-self-terminate.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/concourse-lite-self-terminate.sh -------------------------------------------------------------------------------- /concourse/scripts/deploy-pipeline.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/deploy-pipeline.sh -------------------------------------------------------------------------------- /concourse/scripts/environment.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/environment.sh -------------------------------------------------------------------------------- /concourse/scripts/extract_terraform_state_to_yaml.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/extract_terraform_state_to_yaml.rb -------------------------------------------------------------------------------- /concourse/scripts/extract_terraform_state_to_yaml_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/extract_terraform_state_to_yaml_test.go -------------------------------------------------------------------------------- /concourse/scripts/extract_tf_vars_from_terraform_state.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/extract_tf_vars_from_terraform_state.rb -------------------------------------------------------------------------------- /concourse/scripts/extract_tf_vars_from_terraform_state_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/extract_tf_vars_from_terraform_state_test.go -------------------------------------------------------------------------------- /concourse/scripts/extract_tf_vars_from_yaml.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/extract_tf_vars_from_yaml.rb -------------------------------------------------------------------------------- /concourse/scripts/file_to_yaml.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/file_to_yaml.sh -------------------------------------------------------------------------------- /concourse/scripts/file_to_yaml_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/file_to_yaml_test.go -------------------------------------------------------------------------------- /concourse/scripts/fly_sync_and_login.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/fly_sync_and_login.sh -------------------------------------------------------------------------------- /concourse/scripts/generate-public-key-vars.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/generate-public-key-vars.rb -------------------------------------------------------------------------------- /concourse/scripts/get_static_cidrs.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/get_static_cidrs.rb -------------------------------------------------------------------------------- /concourse/scripts/pipelines.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/pipelines.sh -------------------------------------------------------------------------------- /concourse/scripts/scripts_suite_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/scripts_suite_test.go -------------------------------------------------------------------------------- /concourse/scripts/self-update-pipeline.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/self-update-pipeline.sh -------------------------------------------------------------------------------- /concourse/scripts/ssh.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/ssh.sh -------------------------------------------------------------------------------- /concourse/scripts/val_from_yaml.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/val_from_yaml.rb -------------------------------------------------------------------------------- /concourse/scripts/val_from_yaml_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/val_from_yaml_test.go -------------------------------------------------------------------------------- /concourse/scripts/wait_for_secrets.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/scripts/wait_for_secrets.sh -------------------------------------------------------------------------------- /concourse/spec/image_resource_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/spec/image_resource_spec.rb -------------------------------------------------------------------------------- /concourse/spec/pipeline_validation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/spec/pipeline_validation_spec.rb -------------------------------------------------------------------------------- /concourse/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/spec/spec_helper.rb -------------------------------------------------------------------------------- /concourse/spec/vars_files_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/spec/vars_files_spec.rb -------------------------------------------------------------------------------- /concourse/tasks/delete-ssh-keys.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/tasks/delete-ssh-keys.yml -------------------------------------------------------------------------------- /concourse/tasks/render-bosh-manifest.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/tasks/render-bosh-manifest.yml -------------------------------------------------------------------------------- /concourse/vars-files/gpg-keys-empty.yml: -------------------------------------------------------------------------------- 1 | --- 2 | gpg_public_keys: [] 3 | -------------------------------------------------------------------------------- /concourse/vars-files/gpg-keys.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/concourse/vars-files/gpg-keys.yml -------------------------------------------------------------------------------- /doc/bosh_failover.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/doc/bosh_failover.md -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/go.sum -------------------------------------------------------------------------------- /manifests/bosh-manifest/.gitignore: -------------------------------------------------------------------------------- 1 | spec/examples.txt 2 | -------------------------------------------------------------------------------- /manifests/bosh-manifest/.rspec: -------------------------------------------------------------------------------- 1 | --color 2 | --require spec_helper 3 | -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/010-dns-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/misc/dns.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/010-ntp-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/misc/ntp.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/020-cpi-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/aws/cpi.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/021-iam-instance-profile.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/021-iam-instance-profile.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/022-security-groups.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/022-security-groups.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/023-cpi-uses-gp3-disks.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/023-cpi-uses-gp3-disks.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/030-external-ip-not-recommended-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/external-ip-not-recommended.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/030-increase-disk.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/030-increase-disk.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/030-set-bosh-cert-san.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/030-set-bosh-cert-san.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/030-set-stemcell.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/030-set-stemcell.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/030-update-instance-type.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/030-update-instance-type.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/031-blobstore.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/031-blobstore.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/031-set-mbus-cert-san.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/031-set-mbus-cert-san.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/031-set-vcap-password.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/031-set-vcap-password.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/040-cloud-provider.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/040-cloud-provider.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/100-add-db-admin.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/100-add-db-admin.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/101-director-enable-bosh-dns.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/101-director-enable-bosh-dns.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/102-director-set-trusted-certs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/102-director-set-trusted-certs.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/109-director-misc-properties.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/109-director-misc-properties.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/120-cpi.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/120-cpi.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/140-nats.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/140-nats.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/200-uaa-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/uaa.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/201-uaa.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/201-uaa.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/209-uaa-remove-unused-users-and-clients.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/209-uaa-remove-unused-users-and-clients.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/300-credhub-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/credhub.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/301-credhub.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/301-credhub.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/400-audit.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/400-audit.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/500-external-db-UPSTREAM.yml: -------------------------------------------------------------------------------- 1 | ../upstream/misc/external-db.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/600-exporters.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/600-exporters.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations.d/900-set-tags.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations.d/900-set-tags.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/operations/scale-down-dev.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/operations/scale-down-dev.yml -------------------------------------------------------------------------------- /manifests/bosh-manifest/scripts/cleanup-bosh-vars-store.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/scripts/cleanup-bosh-vars-store.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/scripts/generate-bosh-secrets.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/scripts/generate-bosh-secrets.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/scripts/generate-manifest.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/scripts/generate-manifest.sh -------------------------------------------------------------------------------- /manifests/bosh-manifest/scripts/generate-uaa-users-ops-file.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/scripts/generate-uaa-users-ops-file.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/scripts/generate-unix-users-ops-file.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/scripts/generate-unix-users-ops-file.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/generate_uaa_users_ops_file_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/generate_uaa_users_ops_file_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/generate_unix_users_ops_file_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/generate_unix_users_ops_file_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/manifest_validation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/manifest_validation_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/properties_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/properties_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/rds_validation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/rds_validation_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/release_versions_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/release_versions_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/secret_generation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/secret_generation_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/spec_helper.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/support/manifest_helpers.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/support/manifest_helpers.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/spec/variables_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/spec/variables_spec.rb -------------------------------------------------------------------------------- /manifests/bosh-manifest/variables.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/bosh-manifest/variables.yml -------------------------------------------------------------------------------- /manifests/cloud-config/paas-bootstrap-cloud-config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/cloud-config/paas-bootstrap-cloud-config.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/.gitignore: -------------------------------------------------------------------------------- 1 | spec/examples.txt 2 | -------------------------------------------------------------------------------- /manifests/concourse-manifest/.rspec: -------------------------------------------------------------------------------- 1 | --color 2 | --require spec_helper 3 | -------------------------------------------------------------------------------- /manifests/concourse-manifest/concourse-base.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/concourse-base.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/github_auth/config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/github_auth/config.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/github_auth/dev_ci_additional_users.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/github_auth/dev_ci_additional_users.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/operations.d/010-x-frame-options.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/operations.d/010-x-frame-options.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/operations.d/400-audit.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/operations.d/400-audit.yml -------------------------------------------------------------------------------- /manifests/concourse-manifest/scripts/generate-manifest.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/scripts/generate-manifest.sh -------------------------------------------------------------------------------- /manifests/concourse-manifest/spec/manifest_generation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/spec/manifest_generation_spec.rb -------------------------------------------------------------------------------- /manifests/concourse-manifest/spec/manifest_validation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/spec/manifest_validation_spec.rb -------------------------------------------------------------------------------- /manifests/concourse-manifest/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/spec/spec_helper.rb -------------------------------------------------------------------------------- /manifests/concourse-manifest/spec/support/manifest_helpers.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/concourse-manifest/spec/support/manifest_helpers.rb -------------------------------------------------------------------------------- /manifests/cpi-config/cpi-config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/cpi-config/cpi-config.yml -------------------------------------------------------------------------------- /manifests/runtime-config/.gitignore: -------------------------------------------------------------------------------- 1 | spec/examples.txt 2 | -------------------------------------------------------------------------------- /manifests/runtime-config/.rspec: -------------------------------------------------------------------------------- 1 | --color 2 | --require spec_helper 3 | -------------------------------------------------------------------------------- /manifests/runtime-config/runtime-config-base.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/runtime-config-base.yml -------------------------------------------------------------------------------- /manifests/runtime-config/scripts/generate-runtime-config.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/scripts/generate-runtime-config.sh -------------------------------------------------------------------------------- /manifests/runtime-config/scripts/generate-unix-users-ops-file.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/scripts/generate-unix-users-ops-file.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/addons_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/addons_spec.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/generate_unix_users_ops_file_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/generate_unix_users_ops_file_spec.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/releases_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/releases_spec.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/runtime_config_validation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/runtime_config_validation_spec.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/spec_helper.rb -------------------------------------------------------------------------------- /manifests/runtime-config/spec/support/runtime_config_helpers.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/runtime-config/spec/support/runtime_config_helpers.rb -------------------------------------------------------------------------------- /manifests/shared/.gitignore: -------------------------------------------------------------------------------- 1 | 2 | spec/examples.txt 3 | -------------------------------------------------------------------------------- /manifests/shared/.rspec: -------------------------------------------------------------------------------- 1 | --color 2 | --require spec_helper 3 | -------------------------------------------------------------------------------- /manifests/shared/lib/secret_generator.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/lib/secret_generator.rb -------------------------------------------------------------------------------- /manifests/shared/scripts/check-certificates.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/scripts/check-certificates.rb -------------------------------------------------------------------------------- /manifests/shared/scripts/drop-vars-store-secrets-for-rotation.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/scripts/drop-vars-store-secrets-for-rotation.rb -------------------------------------------------------------------------------- /manifests/shared/spec/cross-manifest/versions_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/cross-manifest/versions_spec.rb -------------------------------------------------------------------------------- /manifests/shared/spec/fixtures/bosh-terraform-outputs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/fixtures/bosh-terraform-outputs.yml -------------------------------------------------------------------------------- /manifests/shared/spec/fixtures/concourse-terraform-outputs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/fixtures/concourse-terraform-outputs.yml -------------------------------------------------------------------------------- /manifests/shared/spec/fixtures/sample_key: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/fixtures/sample_key -------------------------------------------------------------------------------- /manifests/shared/spec/fixtures/sample_key.pub: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/fixtures/sample_key.pub -------------------------------------------------------------------------------- /manifests/shared/spec/fixtures/vpc-terraform-outputs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/fixtures/vpc-terraform-outputs.yml -------------------------------------------------------------------------------- /manifests/shared/spec/scripts/drop_vars_store_secrets_for_rotation_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/scripts/drop_vars_store_secrets_for_rotation_spec.rb -------------------------------------------------------------------------------- /manifests/shared/spec/secret_generator_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/secret_generator_spec.rb -------------------------------------------------------------------------------- /manifests/shared/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/spec_helper.rb -------------------------------------------------------------------------------- /manifests/shared/spec/support/fixture_helpers.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/manifests/shared/spec/support/fixture_helpers.rb -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | awscli>=1.10.38 2 | yamllint>=1.0.0 3 | -------------------------------------------------------------------------------- /scripts/bosh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/bosh -------------------------------------------------------------------------------- /scripts/bosh-cli.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/bosh-cli.sh -------------------------------------------------------------------------------- /scripts/check_gpg_keys.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/check_gpg_keys.sh -------------------------------------------------------------------------------- /scripts/lint_terraform.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/lint_terraform.sh -------------------------------------------------------------------------------- /scripts/rds-cert-check.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/rds-cert-check.sh -------------------------------------------------------------------------------- /scripts/ssh_bosh.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/ssh_bosh.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/ec2.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/ec2.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/iam.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/iam.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/logging-and-sanitisation.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/logging-and-sanitisation.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/rds.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/rds.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/route53.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/route53.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/s3.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/s3.sh -------------------------------------------------------------------------------- /scripts/teardown-aws/vpc.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/teardown-aws/vpc.sh -------------------------------------------------------------------------------- /scripts/upload-secrets/manage-github-secrets.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/upload-secrets/manage-github-secrets.sh -------------------------------------------------------------------------------- /scripts/upload-secrets/upload-cyber-secrets.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/upload-secrets/upload-cyber-secrets.sh -------------------------------------------------------------------------------- /scripts/upload-secrets/upload-cyber-tfvars.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/upload-secrets/upload-cyber-tfvars.sh -------------------------------------------------------------------------------- /scripts/upload-secrets/upload-google-oauth-secrets.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/upload-secrets/upload-google-oauth-secrets.sh -------------------------------------------------------------------------------- /scripts/upload-secrets/upload-paas-trusted-people.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/scripts/upload-secrets/upload-paas-trusted-people.sh -------------------------------------------------------------------------------- /terraform/.terraform.lock.hcl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/.terraform.lock.hcl -------------------------------------------------------------------------------- /terraform/bosh/acm.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/acm.tf -------------------------------------------------------------------------------- /terraform/bosh/blobstore.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/blobstore.tf -------------------------------------------------------------------------------- /terraform/bosh/bosh_dns.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/bosh_dns.tf -------------------------------------------------------------------------------- /terraform/bosh/bosh_eip.tf: -------------------------------------------------------------------------------- 1 | resource "aws_eip" "bosh" { 2 | vpc = true 3 | } 4 | 5 | -------------------------------------------------------------------------------- /terraform/bosh/canary_dns.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/canary_dns.tf -------------------------------------------------------------------------------- /terraform/bosh/cloudwatch_logs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/cloudwatch_logs.tf -------------------------------------------------------------------------------- /terraform/bosh/globals.tf: -------------------------------------------------------------------------------- 1 | ../globals.tf -------------------------------------------------------------------------------- /terraform/bosh/id_rsa.pub: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /terraform/bosh/lb.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/lb.tf -------------------------------------------------------------------------------- /terraform/bosh/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/outputs.tf -------------------------------------------------------------------------------- /terraform/bosh/providers.tf: -------------------------------------------------------------------------------- 1 | ../providers.tf -------------------------------------------------------------------------------- /terraform/bosh/rds.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/rds.tf -------------------------------------------------------------------------------- /terraform/bosh/security_groups.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/security_groups.tf -------------------------------------------------------------------------------- /terraform/bosh/ssh-key-pairs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/ssh-key-pairs.tf -------------------------------------------------------------------------------- /terraform/bosh/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bosh/variables.tf -------------------------------------------------------------------------------- /terraform/bosh/version_constraint.tf: -------------------------------------------------------------------------------- 1 | ../version_constraint.tf -------------------------------------------------------------------------------- /terraform/bosh/versions.tf: -------------------------------------------------------------------------------- 1 | ../versions.tf -------------------------------------------------------------------------------- /terraform/bucket/globals.tf: -------------------------------------------------------------------------------- 1 | ../globals.tf -------------------------------------------------------------------------------- /terraform/bucket/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bucket/outputs.tf -------------------------------------------------------------------------------- /terraform/bucket/providers.tf: -------------------------------------------------------------------------------- 1 | ../providers.tf -------------------------------------------------------------------------------- /terraform/bucket/tf-state-bucket.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/bucket/tf-state-bucket.tf -------------------------------------------------------------------------------- /terraform/bucket/version_constraint.tf: -------------------------------------------------------------------------------- 1 | ../version_constraint.tf -------------------------------------------------------------------------------- /terraform/bucket/versions.tf: -------------------------------------------------------------------------------- 1 | ../versions.tf -------------------------------------------------------------------------------- /terraform/ci.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/ci.tfvars -------------------------------------------------------------------------------- /terraform/concourse/acm.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/acm.tf -------------------------------------------------------------------------------- /terraform/concourse/codecommit.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/codecommit.tf -------------------------------------------------------------------------------- /terraform/concourse/elastic_ip.tf: -------------------------------------------------------------------------------- 1 | resource "aws_eip" "concourse" { 2 | vpc = true 3 | } 4 | 5 | -------------------------------------------------------------------------------- /terraform/concourse/elb.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/elb.tf -------------------------------------------------------------------------------- /terraform/concourse/git_ssh_key_id: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/git_ssh_key_id -------------------------------------------------------------------------------- /terraform/concourse/globals.tf: -------------------------------------------------------------------------------- 1 | ../globals.tf -------------------------------------------------------------------------------- /terraform/concourse/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/outputs.tf -------------------------------------------------------------------------------- /terraform/concourse/providers.tf: -------------------------------------------------------------------------------- 1 | ../providers.tf -------------------------------------------------------------------------------- /terraform/concourse/rds.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/rds.tf -------------------------------------------------------------------------------- /terraform/concourse/security_group.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/security_group.tf -------------------------------------------------------------------------------- /terraform/concourse/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/concourse/variables.tf -------------------------------------------------------------------------------- /terraform/concourse/version_constraint.tf: -------------------------------------------------------------------------------- 1 | ../version_constraint.tf -------------------------------------------------------------------------------- /terraform/concourse/versions.tf: -------------------------------------------------------------------------------- 1 | ../versions.tf -------------------------------------------------------------------------------- /terraform/cyber/cloudwatch_logs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/cyber/cloudwatch_logs.tf -------------------------------------------------------------------------------- /terraform/cyber/globals.tf: -------------------------------------------------------------------------------- 1 | ../globals.tf -------------------------------------------------------------------------------- /terraform/cyber/providers.tf: -------------------------------------------------------------------------------- 1 | ../providers.tf -------------------------------------------------------------------------------- /terraform/cyber/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/cyber/variables.tf -------------------------------------------------------------------------------- /terraform/cyber/version_constraint.tf: -------------------------------------------------------------------------------- 1 | ../version_constraint.tf -------------------------------------------------------------------------------- /terraform/cyber/versions.tf: -------------------------------------------------------------------------------- 1 | ../versions.tf -------------------------------------------------------------------------------- /terraform/dev.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/dev.tfvars -------------------------------------------------------------------------------- /terraform/eu-west-1.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/eu-west-1.tfvars -------------------------------------------------------------------------------- /terraform/eu-west-2.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/eu-west-2.tfvars -------------------------------------------------------------------------------- /terraform/globals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/globals.tf -------------------------------------------------------------------------------- /terraform/prod.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/prod.tfvars -------------------------------------------------------------------------------- /terraform/providers.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/providers.tf -------------------------------------------------------------------------------- /terraform/staging.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/staging.tfvars -------------------------------------------------------------------------------- /terraform/update-terraform-providers.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/update-terraform-providers.sh -------------------------------------------------------------------------------- /terraform/version_constraint.tf: -------------------------------------------------------------------------------- 1 | 2 | terraform { 3 | required_version = ">= 1.3.3" 4 | } 5 | -------------------------------------------------------------------------------- /terraform/versions.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/versions.tf -------------------------------------------------------------------------------- /terraform/vpc/endpoints.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/endpoints.tf -------------------------------------------------------------------------------- /terraform/vpc/flow-log.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/flow-log.tf -------------------------------------------------------------------------------- /terraform/vpc/globals.tf: -------------------------------------------------------------------------------- 1 | ../globals.tf -------------------------------------------------------------------------------- /terraform/vpc/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/outputs.tf -------------------------------------------------------------------------------- /terraform/vpc/providers.tf: -------------------------------------------------------------------------------- 1 | ../providers.tf -------------------------------------------------------------------------------- /terraform/vpc/security-group.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/security-group.tf -------------------------------------------------------------------------------- /terraform/vpc/subnet.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/subnet.tf -------------------------------------------------------------------------------- /terraform/vpc/version_constraint.tf: -------------------------------------------------------------------------------- 1 | ../version_constraint.tf -------------------------------------------------------------------------------- /terraform/vpc/versions.tf: -------------------------------------------------------------------------------- 1 | ../versions.tf -------------------------------------------------------------------------------- /terraform/vpc/vpc.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/terraform/vpc/vpc.tf -------------------------------------------------------------------------------- /vagrant/Vagrantfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/Vagrantfile -------------------------------------------------------------------------------- /vagrant/deploy.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/deploy.sh -------------------------------------------------------------------------------- /vagrant/destroy.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/destroy.sh -------------------------------------------------------------------------------- /vagrant/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/docker-compose.yml -------------------------------------------------------------------------------- /vagrant/environment.sh: -------------------------------------------------------------------------------- 1 | ../concourse/scripts/environment.sh -------------------------------------------------------------------------------- /vagrant/local-ssh.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/local-ssh.sh -------------------------------------------------------------------------------- /vagrant/post-deploy.d/00-run-docker.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/post-deploy.d/00-run-docker.sh -------------------------------------------------------------------------------- /vagrant/spec/docker_compose_spec.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/spec/docker_compose_spec.rb -------------------------------------------------------------------------------- /vagrant/spec/spec_helper.rb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/govuk-paas/paas-bootstrap/HEAD/vagrant/spec/spec_helper.rb -------------------------------------------------------------------------------- /yamllint.yml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | rules: 4 | key-duplicates: {} 5 | --------------------------------------------------------------------------------