feat: Add Various Ops Files referenced in v7.12.0 Release (#259)

.gitignore

@@ -2,3 +2,4 @@
 *state.json
 deploy-*.sh
 .DS_Store
+/.idea/

cluster/operations/aws-ssm-instance-profile.yml

@@ -0,0 +1,13 @@
+#
+#  This operations file will use remove the AWS SSM
+#  Access and Secret Access Key to instead use the instance
+#  profile of the web node.
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/access_key
+
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/secret_key

cluster/operations/aws-ssm-manager.yml

@@ -0,0 +1,17 @@
+#
+#  This operations file will add AWS SSM Secrets Manager Support to
+#  the web node
+
+---
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm?
+  value:
+    access_key: ((aws_ssm.access_key))
+    secret_key: ((aws_ssm.secret_key))
+    region: ((aws_ssm.region))
+
+    pipeline_secret_template: ((aws_ssm.pipeline_secret_template))
+    # default value is  /concourse/{{.Team}}/{{.Pipeline}}/{{.Secret}}
+
+    team_secret_template: ((aws_ssm.team_secret_template))
+    # default value is /concourse/{{.Team}}/{{.Secret}}

cluster/operations/aws-ssm-session-token.yml

@@ -0,0 +1,16 @@
+#
+#  This operations file will use a Session Token instead of
+#  a pair of Access and Secret Access Keys
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/access_key
+
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/secret_key
+
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/session_token
+  value: ((aws_ssm_session_token))

cluster/operations/aws-ssm-shared-path.yml

@@ -0,0 +1,10 @@
+#
+#  This operations file will add a shared path route
+#  in order to define secrets accessible by all teams.
+#
+#  Requires the aws-ssm-manager.yml ops file
+
+---
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/aws_ssm/shared_path?
+  value: ((aws_ssm_shared_path))

cluster/operations/ipv6_networking.yml

@@ -0,0 +1,13 @@
+#
+#  This operations file will configure workers to communicate over
+#  the IPv6 Protocol in addition to existing IPv4
+#
+#  Requires the runtime-containerd.yml ops file
+
+---
+- type: replace
+  path: /instance_groups/name=worker/containerd/ipv6?
+  value:
+    enabled: ((ipv6.enabled))
+    pool: ((ipv6.pool))
+    disable_masquerade: ((ipv6.disable_masquerade))

cluster/operations/postgres-binary-parameters.yml

@@ -0,0 +1,8 @@
+#
+#  This operations file will allow the option for the
+#  PostgreSQL Driver to use Binary Parameters for Prepared Statements.
+
+---
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/postgresql?/binary_parameters?
+  value: ((postgres_binary))

cluster/operations/resource-type-checking-interval.yml

@@ -0,0 +1,9 @@
+#
+#  This operations file will override the default Resource Type
+#  Check Interval on the web node
+#
+
+---
+- type: replace
+  path: /instance_groups/name=web/default_resource_type_check_interval
+  value: ((resource_check_interval))

cluster/operations/vault-client-token-path.yml

@@ -0,0 +1,15 @@
+#
+#  This operations file will configure web to accept the Vault Client
+#  Token from a file
+#
+#  Requires the vault.yml ops file
+#
+
+---
+- type: remove
+  path: /instance_groups/name=web/jobs/name=web/properties/vault/auth/client_token
+
+- type: replace
+  path: /instance_groups/name=web/jobs/name=web/properties/vault/auth?
+  value:
+    client_token_path: ((vault.client_token_path))