Access to the EKS cluster is limited by those who have rights to access the IAM AWS account. At the moment of writing only Eric and Alberto have access to it from SRE team. If you need to access the cluster contact Kang or Andrew. In the future we will have a process for getting this kind of access, the progress is tracked here
Secrets are stored in iam-private, a private repo using git-crypt
Private repo with git-crypt guide
Infrastructure repo iam-infra
SSO Dashboard repo sso-dashboard
DinoPark is composed by several microservices, these are the most important:
- dino-park-fence Main microservice
- dino-park-search Search functionality
- dino-park-tree Draws the org chart
- dino-park-fossil Manages pictures
- dino-park-lookout Updates profiles
- dino-park-whoami Identity verification
All the SSL certificates used by applications in the cluster are issued by Let's Encrypt on request by cert-manager.
AWS account mozilla-iam 320464205386