Repository: govuk-infrastructure

The infrastructure as code for GOV.UK (paired with https://github.com/alphagov/govuk-aws)

• GitHub: govuk-infrastructure
• Ownership: #govuk-replatforming
• Hosting: N/A
• Category: Utilities
• Links:
  • Sentry (error tracking)
  • Deployment dashboard

Imported documents

• Create a new environment
• Kubernetes external secrets
• Prerequisite Secrets
• Signon secrets
• Start here
• Upgrading the cluster
• /architecture/decisions
• 1. Record architecture decisions
• 10. Use Dex IdP for user web auth
• 2. Use aws-eks terraform module
• 3. Split terraform state into separate AWS cluster and Kubernetes resource phases
• 4. Use AWS Load Balancer Controller for edge traffic services
• 5. Use EKS managed node groups
• 6. Use Helm for application package management
• 7. Use fluentbit, elasticsearch and kibana for application logs
• 8. Use external-secrets for secrets storage
• 9. Use external-dns for DNS record management

README

This is a work in progress. This code does not represent production infrastructure yet. For the canonical source of GOV.UK’s infrastructure, see alphagov/govuk-aws and alphagov/govuk-puppet repos.

What’s in this repo

The govuk-infrastructure repo contains Terraform modules for turning up an EKS cluster for GOV.UK.

Helm charts have moved to alphagov/govuk-helm-charts.

Usage

To install the currently used version of Terraform:

brew install tfenv
cd terraform/
tfenv install

Working on this repo

We have some recommended pre-commit scripts. If you’re making changes to this repo, it’s worth setting up the pre-commit hooks on your machine:

https://pre-commit.com/#install

See alphagov/gds-pre-commit for more recommendations on using pre-commit.

Documentation

Further documentation about how to perform various tasks can be found here

There are also docs in the terraform/docs and directories.

Who we are

We’re the GOV.UK Replatforming team, discovering the future of GOV.UK’s infrastructure, one line of code at a time. You can find us in #govuk-replatforming on the GDS Slack, and our (internal) Trello board exists.