Infrastructure Management for taskcluster

To run this do:

• . <(pass terraform/secrets.sh)
• Set AWS environment variables
• Use terraform validate|plan|apply

Any secrets added should be documented as variables in secrets.tf and added to the terraform/secrets.sh script in password-store.

Kubernetes is managed with kops.

Locked State

If the state becomes locked because a process fails:

• Open the Azure portal
• Navigate to the tcterraformstate account
• Navigate to the tfstate container
• Find the blob in the "Leased" state
• Click the "..." menu and select "Break Lease".

Deploying a new version of a static service

In static-services.tf each service has both a image_tag and image_hash field that can be updated to deploy a new version of the service. The image_hash is the sha256 Digest of an image. Once you update this field and terraform apply, the ec2 instance will be replaced by a new one (this does involve downtime!) and the eip will be hooked into the new instance.