Files
2024-05-29 17:41:55 +02:00

176 lines
6.9 KiB
HCL

locals {
annotations = {
"vynil.solidite.fr/meta" = var.component
"vynil.solidite.fr/name" = var.namespace
}
annotations_default = {
"default.vynil.solidite.fr/sso_vynil" = var.sso_vynil
"default.vynil.solidite.fr/domain_name" = var.domain_name
"default.vynil.solidite.fr/timezone" = var.timezone
"default.vynil.solidite.fr/language" = var.language
"default.vynil.solidite.fr/domain" = var.domain
"default.vynil.solidite.fr/issuer" = var.issuer
"default.vynil.solidite.fr/ingress_class" = var.ingress_class
"default.vynil.solidite.fr/app_group" = var.app_group
"default.vynil.solidite.fr/backups.enable" = var.backups.enable
"default.vynil.solidite.fr/backups.use_barman" = var.backups.use_barman
"default.vynil.solidite.fr/backups.endpoint" = var.backups.endpoint
"default.vynil.solidite.fr/backups.secret_name" = var.backups.secret_name
"default.vynil.solidite.fr/backups.key_id_key" = var.backups.key_id_key
"default.vynil.solidite.fr/backups.secret_key" = var.backups.secret_key
"default.vynil.solidite.fr/backups.restic_key" = var.backups.restic_key
"default.vynil.solidite.fr/storage.volume.accessMode" = var.storage.volume.accessMode
"default.vynil.solidite.fr/storage.volume.class" = var.storage.volume.class
}
global = {
"sso_vynil" = var.sso_vynil
"domain_name" = var.domain_name
"timezone" = var.timezone
"language" = var.language
"domain" = var.domain
"issuer" = var.issuer
"ingress_class" = var.ingress_class
"app_group" = var.app_group
}
global-backups = {
"enable" = var.backups.enable
"use_barman" = var.backups.use_barman
"endpoint" = var.backups.endpoint
"secret_name" = var.backups.secret_name
"key_id_key" = var.backups.key_id_key
"secret_key" = var.backups.secret_key
"restic_key" = var.backups.restic_key
}
global-volume = {
"accessMode" = var.storage.volume.accessMode
"class" = var.storage.volume.class
}
traefik = merge(local.global,{ for k, v in var.traefik : k => v if !contains(["enable","storage","backups"],k) },{
backups = merge(local.global-backups, lookup(var.traefik, "backups", {}))
storage = merge({ for k, v in lookup(var.traefik, "storage", {}) : k => v if !contains(["volume"],k) }, {
volume = merge(local.global-volume, lookup(lookup(var.traefik, "storage", {}), "volume", {}))
})
})
dns = merge(local.global,{ for k, v in var.dns : k => v if !contains(["enable","storage","backups"],k) },{
backups = merge(local.global-backups, lookup(var.dns, "backups", {}))
storage = merge({ for k, v in lookup(var.dns, "storage", {}) : k => v if !contains(["volume"],k) }, {
volume = merge(local.global-volume, lookup(lookup(var.dns, "storage", {}), "volume", {}))
})
})
api = merge(local.global,{ for k, v in var.api : k => v if !contains(["enable","storage","backups"],k) },{
backups = merge(local.global-backups, lookup(var.api, "backups", {}))
storage = merge({ for k, v in lookup(var.api, "storage", {}) : k => v if !contains(["volume"],k) }, {
volume = merge(local.global-volume, lookup(lookup(var.api, "storage", {}), "volume", {}))
})
})
okd = merge(local.global,{ for k, v in var.okd : k => v if !contains(["enable","storage","backups"],k) },{
backups = merge(local.global-backups, lookup(var.okd, "backups", {}))
storage = merge({ for k, v in lookup(var.okd, "storage", {}) : k => v if !contains(["volume"],k) }, {
volume = merge(local.global-volume, lookup(lookup(var.okd, "storage", {}), "volume", {}))
})
})
gramo = merge(local.global,{ for k, v in var.gramo : k => v if !contains(["enable","storage","backups"],k) },{
backups = merge(local.global-backups, lookup(var.gramo, "backups", {}))
storage = merge({ for k, v in lookup(var.gramo, "storage", {}) : k => v if !contains(["volume"],k) }, {
volume = merge(local.global-volume, lookup(lookup(var.gramo, "storage", {}), "volume", {}))
})
})
}
resource "kubernetes_namespace_v1" "infra-ns" {
count = ( var.dns.enable || var.okd.enable || var.gramo.enable )? 1 : 0
metadata {
annotations = merge(local.annotations, local.annotations_default)
labels = merge(local.common_labels, local.annotations)
name = "${var.namespace}-infra"
}
}
resource "kubectl_manifest" "dns" {
count = var.dns.enable ? 1 : 0
depends_on = [kubernetes_namespace_v1.infra-ns]
yaml_body = <<-EOF
apiVersion: "vynil.solidite.fr/v1"
kind: "Install"
metadata:
name: "dns"
namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}"
labels: ${jsonencode(local.common_labels)}
spec:
distrib: "${var.distributions.domain}"
category: "share"
component: "dns"
options: ${jsonencode(merge(local.global, local.dns))}
EOF
}
resource "kubectl_manifest" "traefik" {
count = var.traefik.enable ? 1 : 0
yaml_body = <<-EOF
apiVersion: "vynil.solidite.fr/v1"
kind: "Install"
metadata:
name: "${var.namespace}"
namespace: "${var.traefik.namespace}"
labels: ${jsonencode(local.common_labels)}
spec:
distrib: "${var.distributions.domain}"
category: "apps"
component: "traefik-ui"
options: ${jsonencode(merge(local.global, local.traefik))}
EOF
}
resource "kubectl_manifest" "k8s_api" {
count = var.api.enable ? 1 : 0
yaml_body = <<-EOF
apiVersion: "vynil.solidite.fr/v1"
kind: "Install"
metadata:
name: "k8s-api-${var.namespace}"
namespace: "default"
labels: ${jsonencode(local.common_labels)}
spec:
distrib: "${var.distributions.domain}"
category: "apps"
component: "k8s-api"
options: ${jsonencode(merge(local.global, local.api))}
EOF
}
resource "kubectl_manifest" "okd" {
count = var.okd.enable ? 1 : 0
depends_on = [kubernetes_namespace_v1.infra-ns]
yaml_body = <<-EOF
apiVersion: "vynil.solidite.fr/v1"
kind: "Install"
metadata:
name: "infra-okd"
namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}"
labels: ${jsonencode(local.common_labels)}
spec:
distrib: "${var.distributions.domain}"
category: "apps"
component: "okd"
options: ${jsonencode(merge(local.global, local.okd))}
EOF
}
resource "kubectl_manifest" "gramo" {
count = var.gramo.enable ? 1 : 0
depends_on = [kubernetes_namespace_v1.infra-ns]
yaml_body = <<-EOF
apiVersion: "vynil.solidite.fr/v1"
kind: "Install"
metadata:
name: "infra-gramo"
namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}"
labels: ${jsonencode(local.common_labels)}
spec:
distrib: "${var.distributions.domain}"
category: "apps"
component: "gramo"
options: ${jsonencode(merge(local.global, local.gramo))}
EOF
}