govau/torque repository overview

⁠Torque

Torque will rotate ci user passwords in UAA, and writes them to environment variables in circleci projects.

⁠Example of what it does

Given this config.yaml:

cfs:
  - uaa_href: uaa.mycloudfoundry.com
    suffix: STAGING
orgs:
  - name: test-org
    spaces:
      - name: test-space
        repos:
          - govau/myrepo1
          - govau/myrepo2

1. The app ensures these repos are being built in circleci.

2. The app changes the password for the user in CloudFoundry UAA called ci-test-org-test-space.

3. The app ensures the following environment variable is set in circleci for each repo:

• CF_PASSWORD_STAGING=the-current-password

⁠Future plans

1. The app ensures there is a user in CloudFoundry UAA called ci-test-org-test-space with the SpaceDeveloper role on test-space in cf instances.

2. The app ensures the following environment variables are set in circleci for each repo:

• CF_API_STAGING=https://api.system.b.cld.gov.au⁠
• CF_ORG=test-org
• CF_SPACE=test-space
• CF_USERNAME=ci-test-org-test-space

1. The app waits until there are no builds in progress before rotating the password.

⁠Configuration

⁠Create UAA Client

uaac client add torque \
  --name torque \
  --secret "${CLIENT_SECRET}" \
  --authorized_grant_types client_credentials,refresh_token \
  --authorities uaa.admin