1 Commits

Author SHA1 Message Date
unkinben 8b39ee38bf feat: initial setup
Build / build (pull_request) Failing after 0s
- manage nomad jobs
- create makefile
- create gitignore
- manage terragrunt environments
- add build jobs
2024-12-28 16:23:13 +11:00
4 changed files with 10 additions and 61 deletions
+6 -12
View File
@@ -7,20 +7,14 @@ jobs:
build: build:
runs-on: almalinux-8 runs-on: almalinux-8
container: container:
image: git.query.consul/unkin/almalinux8-runnerdnd:latest image: git.query.consul/unkin/almalinux9-buildrunner:latest
options: --privileged options: --privileged
steps: steps:
- name: Checkout code - name: Checkout code
uses: actions/checkout@v3 uses: actions/checkout@v3
- name: Install Packages
run: |
dnf install terraform terragrunt vault jq -y
- name: Run Terraform Plan - name: Run Terraform Plan
env:
VAULT_ROLEID: ${{ secrets.TERRAFORM_NOMAD_VAULT_ROLEID }}
run: | run: |
make plan make plan
@@ -28,9 +22,9 @@ jobs:
run: | run: |
find /workspace -type f -name "*.plan" find /workspace -type f -name "*.plan"
- name: Upload Artifacts #- name: Upload Artifacts
uses: actions/upload-artifact@v3 # uses: actions/upload-artifact@v3
with: # with:
name: plans # name: plans
path: /workspace/unkin/terraform-nomad/plans/*.plan # path: /workspace/unkin/rpmbuilder/dist/*/*.rpm
-36
View File
@@ -1,36 +0,0 @@
name: Deploy
on:
workflow_run:
workflows:
- Build
types:
- completed
jobs:
deploy:
if: ${{ github.event.workflow_run.conclusion == 'success' }}
runs-on: almalinux-8
container:
image: git.query.consul/unkin/almalinux8-runnerdnd:latest
options: --privileged
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: Download Build Artifacts
uses: actions/download-artifact@v3
with:
name: plans
path: /workspace/unkin/terraform-nomad/plans
- name: Install Packages
run: |
dnf install terraform terragrunt vault jq -y
- name: Run Terraform Apply
env:
VAULT_ROLEID: ${{ secrets.TERRAFORM_NOMAD_VAULT_ROLEID }}
run: |
make apply
-2
View File
@@ -2,5 +2,3 @@
.terraform.lock.hcl .terraform.lock.hcl
environments/*/*.tf environments/*/*.tf
plans plans
.venv
env
+4 -11
View File
@@ -4,14 +4,7 @@ ENV_DIR = environments/$(ENVIRONMENT)
PLAN_DIR = plans PLAN_DIR = plans
PLAN_FILE = ../../$(PLAN_DIR)/$(ENVIRONMENT).plan PLAN_FILE = ../../$(PLAN_DIR)/$(ENVIRONMENT).plan
.PHONY: clean init plan apply .PHONY: clean
define vault_env
@export VAULT_ADDR="https://vault.service.consul:8200" && \
export VAULT_TOKEN=$$(vault write -field=token auth/approle/login role_id=$$VAULT_ROLEID) && \
export $$(vault read -format=json kv/data/service/terraform/nomad | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
endef
clean: clean:
@echo "Cleaning Terraform files..." @echo "Cleaning Terraform files..."
find environments -type f -name '*.tf' -exec rm -f "{}" \; && \ find environments -type f -name '*.tf' -exec rm -f "{}" \; && \
@@ -19,15 +12,15 @@ clean:
find environments -type d -name '.terraform' -exec rm -rf "{}" \; && \ find environments -type d -name '.terraform' -exec rm -rf "{}" \; && \
rm -rf plans rm -rf plans
.PHONY: init
init: init:
$(call vault_env) && \
terragrunt --terragrunt-working-dir $(ENV_DIR) init terragrunt --terragrunt-working-dir $(ENV_DIR) init
.PHONY: plan
plan: init plan: init
@mkdir -p $(PLAN_DIR) @mkdir -p $(PLAN_DIR)
$(call vault_env) && \
terragrunt --terragrunt-working-dir $(ENV_DIR) plan -out=$(PLAN_FILE) terragrunt --terragrunt-working-dir $(ENV_DIR) plan -out=$(PLAN_FILE)
.PHONY: apply
apply: apply:
$(call vault_env) && \
terragrunt --terragrunt-working-dir $(ENV_DIR) apply $(PLAN_FILE) terragrunt --terragrunt-working-dir $(ENV_DIR) apply $(PLAN_FILE)