-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add manifests after install before start (#162)
Signed-off-by: matttrach <matt.trachier@suse.com>
- Loading branch information
Showing
11 changed files
with
310 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,121 @@ | ||
| provider "aws" { | ||
| default_tags { | ||
| tags = { | ||
| Id = local.identifier | ||
| Owner = local.email | ||
| } | ||
| } | ||
| } | ||
|
|
||
| locals { | ||
| identifier = var.identifier # this is a random unique string that can be used to identify resources in the cloud provider | ||
| email = "terraform-ci@suse.com" | ||
| example = "manifest" | ||
| project_name = "tf-${substr(md5(join("-", [local.example, md5(local.identifier)])), 0, 5)}-${local.identifier}" | ||
| username = substr(lower("tf-${local.identifier}"), 0, 32) | ||
| image = "sle-micro-60" | ||
| ip = chomp(data.http.myip.response_body) | ||
| ssh_key = var.key | ||
| rke2_version = "stable" | ||
| local_file_path = "${path.root}/data/${local.identifier}" | ||
| } | ||
|
|
||
| data "http" "myip" { | ||
| url = "https://ipinfo.io/ip" | ||
| retry { | ||
| attempts = 2 | ||
| min_delay_ms = 1000 | ||
| } | ||
| } | ||
|
|
||
| resource "random_pet" "server" { | ||
| keepers = { | ||
| # regenerate the pet name when the identifier changes | ||
| identifier = local.identifier | ||
| } | ||
| length = 1 | ||
| } | ||
|
|
||
| module "access" { | ||
| source = "rancher/access/aws" | ||
| version = "v3.1.5" | ||
| vpc_name = "${local.project_name}-vpc" | ||
| vpc_public = true | ||
| security_group_name = "${local.project_name}-sg" | ||
| security_group_type = "egress" | ||
| load_balancer_use_strategy = "skip" | ||
| } | ||
|
|
||
| module "server" { | ||
| depends_on = [ | ||
| module.access, | ||
| ] | ||
| source = "rancher/server/aws" | ||
| version = "v1.3.1" | ||
| image_type = local.image | ||
| server_name = "${local.project_name}-${random_pet.server.id}" | ||
| server_type = "small" | ||
| subnet_name = keys(module.access.subnets)[0] | ||
| security_group_name = module.access.security_group.tags_all.Name | ||
| direct_access_use_strategy = "ssh" # either the subnet needs to be public or you must add an eip | ||
| cloudinit_use_strategy = "default" # use the default cloudinit config | ||
| server_access_addresses = { # you must include ssh access here to enable setup | ||
| "runner" = { | ||
| port = 22 | ||
| protocol = "tcp" | ||
| cidrs = ["${local.ip}/32"] | ||
| ip_family = "ipv4" | ||
| } | ||
| } | ||
| server_user = { | ||
| user = local.username | ||
| aws_keypair_use_strategy = "skip" # we will use cloud-init to add a keypair directly | ||
| ssh_key_name = "" # not creating or selecting a key, but this field is still required | ||
| public_ssh_key = local.ssh_key # ssh key to add via cloud-init | ||
| user_workfolder = "/home/${local.username}" | ||
| timeout = 5 | ||
| } | ||
| } | ||
|
|
||
| module "download" { | ||
| source = "rancher/rke2-download/github" | ||
| version = "v0.1.1" | ||
| path = local.local_file_path | ||
| } | ||
|
|
||
| module "config" { | ||
| depends_on = [ | ||
| module.access, | ||
| module.server, | ||
| module.download, | ||
| ] | ||
| source = "rancher/rke2-config/local" | ||
| version = "v0.1.4" | ||
| local_file_path = local.local_file_path | ||
| cni = ["none"] # install cilium with helm chart in manifests directory | ||
| } | ||
|
|
||
| # everything before this module is not necessary, you can generate the resources manually or use other methods | ||
| module "this" { | ||
| depends_on = [ | ||
| module.access, | ||
| module.server, | ||
| module.download, | ||
| module.config, | ||
| ] | ||
| source = "../../" # change this to "rancher/rke2-install/null" per https://registry.terraform.io/modules/rancher/rke2-install/null/latest | ||
| # version = "v0.2.7" # when using this example you will need to set the version | ||
| ssh_ip = module.server.server.public_ip | ||
| ssh_user = local.username | ||
| release = local.rke2_version | ||
| local_file_path = local.local_file_path | ||
| local_manifests_path = "${path.root}/manifests" | ||
| retrieve_kubeconfig = true | ||
| remote_workspace = module.server.image.workfolder | ||
| identifier = md5(join("-", [ | ||
| # if any of these things change, redeploy rke2 | ||
| module.server.server.id, | ||
| local.rke2_version, | ||
| module.config.yaml_config, | ||
| ])) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| apiVersion: helm.cattle.io/v1 | ||
| kind: HelmChart | ||
| metadata: | ||
| name: cilium | ||
| namespace: kube-system | ||
| spec: | ||
| bootstrap: true | ||
| chart: https://raw.githubusercontent.com/cilium/charts/master/cilium-1.16.1.tgz |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| output "server" { | ||
| value = module.server.server | ||
| } | ||
| output "image" { | ||
| value = module.server.image | ||
| } | ||
| output "access" { | ||
| value = module.access | ||
| } | ||
| output "kubeconfig" { | ||
| value = module.this.kubeconfig | ||
| description = "Kubernetes config file contents for the cluster." | ||
| sensitive = true | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| variable "identifier" { | ||
| type = string | ||
| } | ||
| variable "key" { | ||
| type = string | ||
| } | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| terraform { | ||
| required_version = ">= 1.5.0, < 1.6" | ||
| required_providers { | ||
| local = { | ||
| source = "hashicorp/local" | ||
| version = ">= 2.4" | ||
| } | ||
| aws = { | ||
| source = "hashicorp/aws" | ||
| version = ">= 5.11" | ||
| } | ||
| random = { | ||
| source = "hashicorp/random" | ||
| version = ">= 3.1" | ||
| } | ||
| http = { | ||
| source = "hashicorp/http" | ||
| version = ">= 3.4" | ||
| } | ||
| acme = { # used in the access module | ||
| source = "vancluever/acme" | ||
| version = ">= 2.0" | ||
| } | ||
| github = { | ||
| source = "integrations/github" | ||
| version = "6.2.1" | ||
| } | ||
| } | ||
| } | ||
| provider "acme" { | ||
| server_url = "https://acme-staging-v02.api.letsencrypt.org/directory" | ||
| } | ||
| provider "github" {} |
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.