geodesic

what

• Update "latest" tag upon release
• Multiple updates, including updating cloudposse/packages from 0.90.0 to 0.116.0

why

• Ensure "latest" tag tracks latest release
• Bring in current tools
• closes #496
• closes #502
• closes #504
• closes #506
• closes #507
• closes #509 Security issue

Revert git to v2.20.1 and other tweaks.
See #508 for details.

what

• Use an empty cache folder to initialize module

why

• Terraform 0.12 no longer allows initialization of folders with even dot files =(
• Example of how to use direnv with terraform 0.12

usage

export TF_MODULE_CACHE=.module
mkdir -p ${TF_MODULE_CACHE}

1. [aliases] Do not overwrite existing commands with our default aliases and functions
2. [codefresh] Add some helper functions to be used with Codefresh CI/CD pipeline
3. [tfenv] Set a default TFENV_BLACKLIST if the variable is not already one set
4. [docker] Tag docker images with short commit tags as well as long ones

For more, see PR #499

what

• Add URL ssh://[email protected]/ to git config --global for atlantis

why

• The URL "[email protected]:" is used by git (e.g. git clone)
• The URL "ssh://[email protected]/" is used by Terraform (e.g. terraform init --from-module=...)
• We need both

what

• Update atlantis.sh to run git commands as atlantis user
• Update file permissions for git-credential-github

why

• git config --global credential commands to add credentials store should be run under atlantis user (the same user that executes git clone); the --global flag is not global to the system, but to the user's account
• Make git-credential-github executable

Potentially breaking change

Default settings in Dockerfile have turned out to cause problems with consistency within companies. In this release we removed KUBERNETES_VERSION and KOPS_BASE_IMAGE from the Dockerfile, and now recommend you set them in /conf/kops/kops.envrc

Summary

• Update kops, remove kops and kubernetes version from Dockerfile, add kudo and kexp aliases

PR #478

what

• Force git to use HTTPS instead of SSH for atlantis

why

• Even when [email protected]: protocol is specified for private GitHub repos, git will rewrite the URLs to use HTTPS protocol, for which we can use GITHUB_TOKEN (instead of SSH keys) to authenticate with GitHub when accessing private repos from atlantis

references

• https://ricostacruz.com/til/github-always-ssh
• https://git-scm.com/docs/git-config#Documentation/git-config.txt-urlltbasegtinsteadOf
• https://gist.github.com/Kovrinic/ea5e7123ab5c97d451804ea222ecd78a

what

• Add rootfs/usr/local/bin/git-credential-github
• Update rootfs/etc/init.d/atlantis.sh to use git-credential-github

why

• git-credential-github is useful for adding GitHub credentials to git to allow access to private GitHub repos
• When the atlantis server starts, execute git-credential-github to configure git with atlantis user and GitHub token to allow access to private repos

references

• https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage