geodesic

what

• Add URL ssh://[email protected]/ to git config --global for atlantis

why

• The URL "[email protected]:" is used by git (e.g. git clone)
• The URL "ssh://[email protected]/" is used by Terraform (e.g. terraform init --from-module=...)
• We need both

what

• Update atlantis.sh to run git commands as atlantis user
• Update file permissions for git-credential-github

why

• git config --global credential commands to add credentials store should be run under atlantis user (the same user that executes git clone); the --global flag is not global to the system, but to the user's account
• Make git-credential-github executable

Potentially breaking change

Default settings in Dockerfile have turned out to cause problems with consistency within companies. In this release we removed KUBERNETES_VERSION and KOPS_BASE_IMAGE from the Dockerfile, and now recommend you set them in /conf/kops/kops.envrc

Summary

• Update kops, remove kops and kubernetes version from Dockerfile, add kudo and kexp aliases

PR #478

what

• Force git to use HTTPS instead of SSH for atlantis

why

• Even when [email protected]: protocol is specified for private GitHub repos, git will rewrite the URLs to use HTTPS protocol, for which we can use GITHUB_TOKEN (instead of SSH keys) to authenticate with GitHub when accessing private repos from atlantis

references

• https://ricostacruz.com/til/github-always-ssh
• https://git-scm.com/docs/git-config#Documentation/git-config.txt-urlltbasegtinsteadOf
• https://gist.github.com/Kovrinic/ea5e7123ab5c97d451804ea222ecd78a

what

• Add rootfs/usr/local/bin/git-credential-github
• Update rootfs/etc/init.d/atlantis.sh to use git-credential-github

why

• git-credential-github is useful for adding GitHub credentials to git to allow access to private GitHub repos
• When the atlantis server starts, execute git-credential-github to configure git with atlantis user and GitHub token to allow access to private repos

references

• https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage

• Better feedback when syncing clocks

• Upgrade Teleport to 3.2.4

• Update kops documentation. Supersedes and closes #339
• Update Dockerfile:
  • Upgrade Kubernetes version, AWS instance types:
    • KUBERNETES_VERSION 1.10.11 -> 1.11.9
    • KOPS_BASE_IMAGE kope.io/k8s-1.10-debian-jessie-amd64-hvm-ebs-2018-08-17 -> kope.io/k8s-1.11-debian-stretch-amd64-hvm-ebs-2018-08-17
    • BASTION_MACHINE_TYPE t2.medium -> t3.small
    • MASTER_MACHINE_TYPE t2.medium -> t3.medium
    • NODE_MACHINE_TYPE t2.medium -> t3.medium
  • Remove ENV variables that should not have defaults:
    • KOPS_STATE_STORE
    • KOPS_STATE_STORE_REGION
    • KOPS_FEATURE_FLAGS
    • KOPS_PRIVATE_SUBNETS
    • KOPS_UTILITY_SUBNETS
    • KOPS_AVAILABILITY_ZONES