about summary refs log tree commit diff
path: root/ops/buildkite/README.md
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2022-06-03T23·08+0000
committertazjin <tazjin@tvl.su>2022-06-06T11·05+0000
commitb29b6a092c1c80e91145782923437fbce08b9c9a (patch)
treed795fb55a2e2ecb060f2732e1468e8f7ac1e062f /ops/buildkite/README.md
parentc58cc1e6901f5ed4103654404e3a1ae0902bcc13 (diff)
docs(ops/buildkite): Add documentation about this config r/4213
Change-Id: Ia61b15127c67cdd9dddcab9f3540f1aee949cd6b
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5839
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'ops/buildkite/README.md')
-rw-r--r--ops/buildkite/README.md24
1 files changed, 24 insertions, 0 deletions
diff --git a/ops/buildkite/README.md b/ops/buildkite/README.md
new file mode 100644
index 000000000000..9d31a53fd36a
--- /dev/null
+++ b/ops/buildkite/README.md
@@ -0,0 +1,24 @@
+Buildkite configuration
+=======================
+
+This contains Terraform configuration for setting up our Buildkite
+pipelines.
+
+Each pipeline (such as the one for depot itself, or exported subsets
+of the depot) needs some static configuration stored in Buildkite.
+
+Through `//tools/depot-deps` a `tf-buildkite` binary is made available
+which contains a Terraform binary pre-configured with the correct
+providers. This is automatically on your `$PATH` through `direnv`.
+
+However, secrets still need to be loaded to access the Terraform state
+and speak to the Buildkite API. These are available to certain users
+through `//ops/secrets`.
+
+This can be done with separate direnv configuration, for example:
+
+```
+# //ops/buildkite/.envrc
+source_up
+eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-buildkite.age)
+```