23 lines
719 B
Markdown
23 lines
719 B
Markdown
# terraform-binarylane
|
|
|
|
Terraform/Terragrunt for BinaryLane cloud infrastructure.
|
|
|
|
## Layout
|
|
|
|
```
|
|
environments/root.hcl # consul state backend
|
|
environments/global/terragrunt.hcl
|
|
modules/binarylane/
|
|
```
|
|
|
|
`make plan` / `make apply` reconcile every unit. `make pre-commit` runs the
|
|
hooks. State lives in Consul under `infra/terraform/binarylane/<unit>/state`.
|
|
|
|
## Auth
|
|
|
|
The BinaryLane API token is read from `kv/service/terraform/binarylane` (field
|
|
`token`) and passed in as `TF_VAR_binarylane_token`; Consul state creds come
|
|
from `consul_root/au/syd1/creds/terraform-binarylane`. Both are granted to the
|
|
`terraform_binarylane` AppRole and the `woodpecker_terraform_binarylane` k8s
|
|
role in terraform-vault.
|