Improved version of CNOE AWS Reference Implementation

[punkwalker]

WIP: Improved version of CNOE AWS Reference Implementation

• New directory structure
• Leverages ArgoCD Application Sets
• Deploy the IDP to a remote EKS cluster from a kind cluster (ie. idpbuilder)

Fixes: #49

[csantanapr]

Runnig the setup here https://github.com/cnoe-punkwalker/reference-implementation-aws/tree/ref-impl-v2/cluster/eksctl#create-crossplane-permissions-boundary-policy

I get the following error in macos

TEMPFILE=$(mktemp)
cat $REPO_ROOT/cluster/iam-policies/crossplane-permissions-boundry.json | envsubst > "$TEMPFILE"

# Create the permissions boundary policy
cat $REPO_ROOT/cluster/iam-policies/crossplane-permissions-boundry.json | envsubst | \                                           
aws iam create-policy \
  --policy-name crossplane-permissions-boundary \
  --policy-document file:///"$TEMPFILE"

# Capture the policy ARN
export CROSSPLANE_BOUNDARY_POLICY_ARN=$(aws iam get-policy \
  --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary \
  --query 'Policy.Arn' --output text)

zsh: no such file or directory: /opt/homebrew/Cellar/gettext/0.22.5/bin/envsubst
zsh: no such file or directory: /opt/homebrew/Cellar/gettext/0.22.5/bin/envsubst
zsh: command not found:

Parameter validation failed:
Invalid length for parameter PolicyDocument, value: 0, valid min length: 1

[punkwalker]

Runnig the setup here https://github.com/cnoe-punkwalker/reference-implementation-aws/tree/ref-impl-v2/cluster/eksctl#create-crossplane-permissions-boundary-policy

I get the following error in macos

TEMPFILE=$(mktemp)
cat $REPO_ROOT/cluster/iam-policies/crossplane-permissions-boundry.json | envsubst > "$TEMPFILE"

# Create the permissions boundary policy
cat $REPO_ROOT/cluster/iam-policies/crossplane-permissions-boundry.json | envsubst | \                                           
aws iam create-policy \
  --policy-name crossplane-permissions-boundary \
  --policy-document file:///"$TEMPFILE"

# Capture the policy ARN
export CROSSPLANE_BOUNDARY_POLICY_ARN=$(aws iam get-policy \
  --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary \
  --query 'Policy.Arn' --output text)

zsh: no such file or directory: /opt/homebrew/Cellar/gettext/0.22.5/bin/envsubst zsh: no such file or directory: /opt/homebrew/Cellar/gettext/0.22.5/bin/envsubst zsh: command not found:

Parameter validation failed: Invalid length for parameter PolicyDocument, value: 0, valid min length: 1

Looks like we have to use different approach than ensubst?

[csantanapr]

Awesome job @punkwalker 🎉

[csantanapr]

Going to merge this mega PR, we can continue to do improvements via normal Issues and PRs