EngineerBetter
What is the process for moving to Control Tower?
I am already using concourse up to manage my concourse deployment. What is the process for migrating to control tower? If I just run the control tower binary instead of concourse-up will everything run as expected?
Hi @kurtmc, excellent question!
We've been holding off implementing the migration path until someone asked :)
It's not as simple as deploying 'over the top' with Control Tower, as all the resources that Terraform creates have been renamed - and this causes a lot of them to be recreated.
We've got an export tool waiting in the wings that will do a logical dump of all your teams, pipelines and secrets from CredHub, and can then import those on a new Control Tower instance.
If you could let us know the scale of the deployment you're looking at, and whether a manual export/deploy new/import would work, we can then consider whether to schedule the automated migration work. Everyone's out on billable work with customers at the moment, hence why we're not rushing to do it.
@DanielJonesEB I think my concourse deployment scale is pretty small, just a handful of workers. Since there is no migration tool I am just going to create a new deployment and move all the pipelines across. Thanks for the quick response and clarifying that!
@kurtmc Are you using CredHub? If so, I can look at making sure out export/import tool is documented and works. One of our engineers (@crsimmons) also has a draft blog post on how he migrated ci.engineerbetter.com that is in draft status.
@DanielJonesEB I am making use of CredHub. I did not actually want to use it, I would prefer to use AWS Secrets Manager, so I have my own integration that copies all our secrets from AWS Secrets Manager to CredHub. So I think the migration of secrets will be trivial for our setup.