-
Notifications
You must be signed in to change notification settings - Fork 77
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create S3 bucket for Rustup build artifacts #428
Conversation
A new S3 bucket is being created as part of the effort to rebuild the Rustup release process. The bucket will store the build artifacts for Rustup, which the GitHub Actions in rust-lang/rustup will produce. Since the bucket is tied to a GitHub repository, only a single bucket in the production environment is being created.
I've created this as a draft PR, since applying it will overwrite the secrets in |
The current CI uploads Rustup build to the dev-static bucket. To not break the existing workflow while implementing the new release process, the current permissions are temporarily granted to the new user for Rustup's CI. They should be removed once the new release process has been implemented.
terragrunt/modules/rustup/s3.tf
Outdated
} | ||
|
||
module "aws_iam_user" { | ||
source = "../gha-iam-user" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should really be using OIDC for anything new, not IAM users.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we have a working configuration somewhere that we can either copy or extract into a module?
The new infrastructure for Rustup's build artifacts has been created. The Terragrunt configuration is not deployed from a locked Git commit, since only a single environment exists.
A new S3 bucket is being created as part of the effort to rebuild the Rustup release process. The bucket will store the build artifacts for Rustup, which the GitHub Actions in rust-lang/rustup will produce.
Since the bucket is tied to a GitHub repository, only a single bucket in the production environment is being created.