Skip to content

Create S3 bucket for Rustup build artifacts#428

Merged
jdno merged 4 commits intorust-lang:masterfrom
jdno:rustup-builds
Jul 1, 2024
Merged

Create S3 bucket for Rustup build artifacts#428
jdno merged 4 commits intorust-lang:masterfrom
jdno:rustup-builds

Conversation

@jdno
Copy link
Copy Markdown
Member

@jdno jdno commented Jun 18, 2024

A new S3 bucket is being created as part of the effort to rebuild the Rustup release process. The bucket will store the build artifacts for Rustup, which the GitHub Actions in rust-lang/rustup will produce.

Since the bucket is tied to a GitHub repository, only a single bucket in the production environment is being created.

A new S3 bucket is being created as part of the effort to rebuild the
Rustup release process. The bucket will store the build artifacts for
Rustup, which the GitHub Actions in rust-lang/rustup will produce.

Since the bucket is tied to a GitHub repository, only a single bucket in
the production environment is being created.
@jdno
Copy link
Copy Markdown
Member Author

jdno commented Jun 18, 2024

I've created this as a draft PR, since applying it will overwrite the secrets in rust-lang/rustup.

The current CI uploads Rustup build to the dev-static bucket. To not
break the existing workflow while implementing the new release process,
the current permissions are temporarily granted to the new user for
Rustup's CI. They should be removed once the new release process has
been implemented.
@jdno jdno marked this pull request as ready for review June 20, 2024 08:05
@jdno jdno requested a review from Mark-Simulacrum June 21, 2024 10:38
}

module "aws_iam_user" {
source = "../gha-iam-user"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should really be using OIDC for anything new, not IAM users.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we have a working configuration somewhere that we can either copy or extract into a module?

The new infrastructure for Rustup's build artifacts has been created.
The Terragrunt configuration is not deployed from a locked Git commit,
since only a single environment exists.
@jdno jdno merged commit ae202dc into rust-lang:master Jul 1, 2024
@jdno jdno deleted the rustup-builds branch July 1, 2024 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants