feat: Add base AWS SSM Ops File along with additional properties (con…

…course#259)

Signed-off-by: Kevin Bimonte <[email protected]>

cluster/operations/aws-ssm-instance-profile.yml

@@ -0,0 +1,13 @@
+#
+#  This operations file will use remove the AWS SSM
+#  Access and Secret Access Key to instead use the instance
+#  profile of the web node.
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/access_key
+
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/secret_key

cluster/operations/aws-ssm-manager.yml

@@ -0,0 +1,17 @@
+#
+#  This operations file will add AWS SSM Secrets Manager Support to
+#  the web node
+
+---
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm?
+  value:
+    access_key: ((aws_ssm.access_key))
+    secret_key: ((aws_ssm.secret_key))
+    region: ((aws_ssm.region))
+
+    pipeline_secret_template: ((aws_ssm.pipeline_secret_template))
+    # default value is  /concourse/{{.Team}}/{{.Pipeline}}/{{.Secret}}
+
+    team_secret_template: ((aws_ssm.team_secret_template))
+    # default value is /concourse/{{.Team}}/{{.Secret}}

cluster/operations/aws-ssm-session-token.yml

@@ -0,0 +1,16 @@
+#
+#  This operations file will use a Session Token instead of
+#  a pair of Access and Secret Access Keys
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/access_key
+
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/secret_key
+
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/session_token
+  value: ((aws_ssm_session_token))

cluster/operations/aws-ssm-shared-path.yml

@@ -0,0 +1,10 @@
+#
+#  This operations file will add a shared path route
+#  in order to define secrets accessible by all teams.
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/shared_path?
+  value: ((aws_ssm_shared_path))

cluster/operations/ipv6_networking.yml

@@ -3,6 +3,7 @@
 #  the IPv6 Protocol in addition to existing IPv4
 #
 #  Requires the runtime-containerd.yml ops file
+
 ---
 - type: replace
   path: /instance_groups/name=worker/containerd/ipv6?