{"push_id":818359903,"size":43,"distinct_size":13,"ref":"refs/heads/104107182-cf-metrics","head":"9ba40708c98f2f59813e53f3f7b0f44e653d40f3","before":"e1f7c9355e22460aae627496c6059e906aaf6e63","commits":[{"sha":"80356d2da1efaa93d5b2947ea7e6ef9c16ed226d","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"AWS: pre-create CF blobstore buckets\n\nPre-create CF blobstore buckets with TF, so that we also remove them when doing TF destroy. Otherwise these buckets are created by CF and remain existing forever on environment destroy.","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/80356d2da1efaa93d5b2947ea7e6ef9c16ed226d"},{"sha":"7e7197af085cc56c6e4726e509db3c098c35ad30","author":{"email":"88e4a720afd4e9effa713a3d0b41296f9bee9689@gmail.com","name":"Michal Tekel"},"message":"Makefile: Add pseudo tty to all ssh commands\n\nBoy scout rule: ssh -t forces pseudo tty. This enables for example colored output. Which is nice to have, esp. because the commands we run via ssh provide one (bosh, cf clis etc.).","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/7e7197af085cc56c6e4726e509db3c098c35ad30"},{"sha":"5478195a8d76fabcdd7290cd5e4f6887aba7a58a","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Merge pull request #32 from alphagov/104521232-bucket-cleanup\n\n[#104521232] AWS: remove buckets on destroy","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/5478195a8d76fabcdd7290cd5e4f6887aba7a58a"},{"sha":"bea3993f4141837b23191d8db5f316470988781a","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Expect secrets from `pass` command\n\n* Replaced fixed values in manifests by `(( merge ))`\n* Generate secrets manifest on the fly by calling `pass` via shell process substitution\n* https://github.gds/multicloudpaas/credentials should be configured and available in ~/.paas-pass","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/bea3993f4141837b23191d8db5f316470988781a"},{"sha":"7c7acad7b9c4072c6e280e08e9d08d3efc9e5ea8","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Created terraform variables for RDS secrets","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/7c7acad7b9c4072c6e280e08e9d08d3efc9e5ea8"},{"sha":"947511db5ee4fc9ec825d605763a148b06be28a5","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Call to paas-pass in Makefile for RDS passwords","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/947511db5ee4fc9ec825d605763a148b06be28a5"},{"sha":"617b2a47a12249773e8c20c1185c4172e5df218d","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Extracted secrets from bosh manifests","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/617b2a47a12249773e8c20c1185c4172e5df218d"},{"sha":"a1058530458d3452211cfd4779f3ddbb8da9c5ef","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Refactor with 'secrets' dictionary\n\nWe use the same technique as for terraform outputs. All the secrets are in a dictionary with key 'secrets' than is merged in each manifest. This way we don't need to maintain the same YAML structure in secrets.yml and we avoid repetition.","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/a1058530458d3452211cfd4779f3ddbb8da9c5ef"},{"sha":"9e2d184cdd1bc9a642a4ca6f096e025ea08ece84","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Prefix all BOSH variables with \"bosh_\"\n\nThis avoid potential conflicts with Cloud Foundry variables","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/9e2d184cdd1bc9a642a4ca6f096e025ea08ece84"},{"sha":"fa0a1cd4f28e5c08e95dfaf74dbfa06160b38ef4","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Add bosh-secrets upload to Makefile","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/fa0a1cd4f28e5c08e95dfaf74dbfa06160b38ef4"},{"sha":"1838c0790243f0e860dc9c17b114242f27ce8cf2","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Extract values from yaml files","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/1838c0790243f0e860dc9c17b114242f27ce8cf2"},{"sha":"a944a96b8134a69814e32258c999245700a691f2","author":{"email":"ef3de85a3d97dbcab5d7819afea3ade14024d455@gmail.com","name":"Colin Saliceti"},"message":"Added BOSH admin user\n\nBecause we previously didn't specify any user, BOSH woud look for users in the DB. But since there are none, it would default to hard-coded \"admin/admin\".\n\nInteresting bits:\n* https://github.com/cloudfoundry/bosh/blob/aa2e3a10430ed43e1484c22efff502c845d9a33a/bosh-director/lib/bosh/director/api/user/user_manager_provider.rb#L5\n* https://github.com/cloudfoundry/bosh/blob/0779c48011becc5fecda669ed82cf2c4466e973b/bosh-director/lib/bosh/director/api/user/database_user_manager.rb#L13\n\nHere is an example: https://github.com/cloudfoundry/bosh/blob/aa2e3a10430ed43e1484c22efff502c845d9a33a/bosh-director/spec/assets/test-director-config.yml#L45","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/a944a96b8134a69814e32258c999245700a691f2"},{"sha":"2874a9581c9a4461b5958c961363009588f567b5","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Pass postgresql password to broker deploy script\n\nThe deploy script needs the postgres server admin credentials to configure\nthe postgresql service broker.","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/2874a9581c9a4461b5958c961363009588f567b5"},{"sha":"ca70dabc0a972a8c7d4969701ef5e4e2222aa5b5","author":{"email":"99f87a6916722b2afede8077f5cd676395cda818@equalexperts.com","name":"Martin Jackson"},"message":"Execute script to setup NAT masquerading\n\nExecute script on bastion to setup NAT masquerading","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/ca70dabc0a972a8c7d4969701ef5e4e2222aa5b5"},{"sha":"1ac3b5ce1a6d9473a436ed61f3e4de32fec6351b","author":{"email":"99f87a6916722b2afede8077f5cd676395cda818@equalexperts.com","name":"Martin Jackson"},"message":"Turn off public IP mapping for CF VMs\n\nIn this commit we have done the following:\n\n* Disabled public IP mapping for each Cloud Foundry Virtual Machine\n* Set the default route for all CF VMs to be via bastion instance\n* Create a firewall rule to allow bosh deployed CF vms to route via bastion\n* Changed the tag for CF VMs to be `cf` instead of `bosh` because\n  we use DNAT for the microbosh to allow routing to bastion and this\n  wll not work if the routing rule is applied to bosh","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/1ac3b5ce1a6d9473a436ed61f3e4de32fec6351b"},{"sha":"c8729df828da20968b934c6e993f127d127c8346","author":{"email":"99f87a6916722b2afede8077f5cd676395cda818@equalexperts.com","name":"Martin Jackson"},"message":"Set dea_next MTU property\n\nWe are setting the MTU to be 1460 in the warden containers to match\nthe MTU on the runner VMs.\n\nWe also need to reference a new branch based on the\ncf_jobs_without_static_ips_dependencies_v215 branch that allows us to\nset the dea_next MTU property as a mergeable parameter.\n\nReference:\n\n* https://github.com/alphagov/cf-release/pull/1\n* https://github.com/alphagov/cf-release/tree/cf_jobs_without_static_ips_dependencies_v215_103419194_with_dea_next_mtu","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/c8729df828da20968b934c6e993f127d127c8346"},{"sha":"edd64fdde2ae9307d3920dbd50ecdbe60c4a9416","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Add variable  when running terraform destroy","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/edd64fdde2ae9307d3920dbd50ecdbe60c4a9416"},{"sha":"89b522f89cfc2ed751d34f5afd1c03ebdc6f676a","author":{"email":"54669547a225ff20cba8b75a4adca540eef25858@uncommonsense-uk.com","name":"ActionJack"},"message":"Merge pull request #33 from alphagov/103926774_secrets\n\n[#103926774] Could Foundry secrets","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/89b522f89cfc2ed751d34f5afd1c03ebdc6f676a"},{"sha":"d1909c1f9c172ed3dbc581567c9dd3f98d1be3c8","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Merge pull request #34 from alphagov/103419194/use_nat_to_secure_cf_gce\n\n[#103419194] Use NAT to secure CF installation on GCE","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/d1909c1f9c172ed3dbc581567c9dd3f98d1be3c8"},{"sha":"7fef455bfe7eeb93872495594b788b76e9294e9b","author":{"email":"cfdafbac99d2e35c247a9a77807e3052ab164d38@gmail.com","name":"Hector Rivas Gandara"},"message":"Enable BOSH shared compile package cache on AWS\n\nAdding the options described in [the director spec](https://github.com/cloudfoundry/bosh/blob/master/release/jobs/director/spec#L239).\n\nThis enables shared caching for compiled packages. The cache is indexed\nby the stemcell name+version and the package name+version. Bosh will\ncheck the cache before recompile any package.\n\nThis configuration will save a lot of time, as it avoids building all\nthe CF packages every time.","distinct":false,"url":"https://api.github.com/repos/alphagov/cf-terraform/commits/7fef455bfe7eeb93872495594b788b76e9294e9b"}]}