locals { annotations = { "vynil.solidite.fr/meta" = var.component "vynil.solidite.fr/name" = var.namespace } annotations_default = { "default.vynil.solidite.fr/sso_vynil" = var.sso_vynil "default.vynil.solidite.fr/domain_name" = var.domain_name "default.vynil.solidite.fr/timezone" = var.timezone "default.vynil.solidite.fr/language" = var.language "default.vynil.solidite.fr/domain" = var.domain "default.vynil.solidite.fr/issuer" = var.issuer "default.vynil.solidite.fr/ingress_class" = var.ingress_class "default.vynil.solidite.fr/app_group" = var.app_group "default.vynil.solidite.fr/backups.enable" = var.backups.enable "default.vynil.solidite.fr/backups.use_barman" = var.backups.use_barman "default.vynil.solidite.fr/backups.endpoint" = var.backups.endpoint "default.vynil.solidite.fr/backups.secret_name" = var.backups.secret_name "default.vynil.solidite.fr/backups.key_id_key" = var.backups.key_id_key "default.vynil.solidite.fr/backups.secret_key" = var.backups.secret_key "default.vynil.solidite.fr/backups.restic_key" = var.backups.restic_key "default.vynil.solidite.fr/storage.volume.accessMode" = var.storage.volume.accessMode "default.vynil.solidite.fr/storage.volume.class" = var.storage.volume.class } global = { "sso_vynil" = var.sso_vynil "domain_name" = var.domain_name "timezone" = var.timezone "language" = var.language "domain" = var.domain "issuer" = var.issuer "ingress_class" = var.ingress_class "app_group" = var.app_group } global-backups = { "enable" = var.backups.enable "use_barman" = var.backups.use_barman "endpoint" = var.backups.endpoint "secret_name" = var.backups.secret_name "key_id_key" = var.backups.key_id_key "secret_key" = var.backups.secret_key "restic_key" = var.backups.restic_key } global-volume = { "accessMode" = var.storage.volume.accessMode "class" = var.storage.volume.class } traefik = merge(local.global,{ for k, v in var.traefik : k => v if !contains(["enable","storage","backups"],k) },{ backups = merge(local.global-backups, lookup(var.traefik, "backups", {})) storage = merge({ for k, v in lookup(var.traefik, "storage", {}) : k => v if !contains(["volume"],k) }, { volume = merge(local.global-volume, lookup(lookup(var.traefik, "storage", {}), "volume", {})) }) }) dns = merge(local.global,{ for k, v in var.dns : k => v if !contains(["enable","storage","backups"],k) },{ backups = merge(local.global-backups, lookup(var.dns, "backups", {})) storage = merge({ for k, v in lookup(var.dns, "storage", {}) : k => v if !contains(["volume"],k) }, { volume = merge(local.global-volume, lookup(lookup(var.dns, "storage", {}), "volume", {})) }) }) api = merge(local.global,{ for k, v in var.api : k => v if !contains(["enable","storage","backups"],k) },{ backups = merge(local.global-backups, lookup(var.api, "backups", {})) storage = merge({ for k, v in lookup(var.api, "storage", {}) : k => v if !contains(["volume"],k) }, { volume = merge(local.global-volume, lookup(lookup(var.api, "storage", {}), "volume", {})) }) }) okd = merge({"cluster-admin" = true}, local.global,{ for k, v in var.okd : k => v if !contains(["enable","storage","backups"],k) },{ backups = merge(local.global-backups, lookup(var.okd, "backups", {})) storage = merge({ for k, v in lookup(var.okd, "storage", {}) : k => v if !contains(["volume"],k) }, { volume = merge(local.global-volume, lookup(lookup(var.okd, "storage", {}), "volume", {})) }) }) gramo = merge({"cluster-admin" = true}, local.global,{ for k, v in var.gramo : k => v if !contains(["enable","storage","backups"],k) },{ backups = merge(local.global-backups, lookup(var.gramo, "backups", {})) storage = merge({ for k, v in lookup(var.gramo, "storage", {}) : k => v if !contains(["volume"],k) }, { volume = merge(local.global-volume, lookup(lookup(var.gramo, "storage", {}), "volume", {})) }) }) } resource "kubernetes_namespace_v1" "infra-ns" { count = ( var.dns.enable || var.okd.enable || var.gramo.enable )? 1 : 0 metadata { annotations = merge(local.annotations, local.annotations_default) labels = merge(local.common-labels, local.annotations) name = "${var.namespace}-infra" } } resource "kubectl_manifest" "dns" { count = var.dns.enable ? 1 : 0 depends_on = [kubernetes_namespace_v1.infra-ns] yaml_body = <<-EOF apiVersion: "vynil.solidite.fr/v1" kind: "Install" metadata: name: "dns" namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}" labels: ${jsonencode(local.common-labels)} spec: distrib: "${var.distributions.domain}" category: "share" component: "dns" options: ${jsonencode(merge(local.global, local.dns))} EOF } resource "kubectl_manifest" "traefik" { count = var.traefik.enable ? 1 : 0 yaml_body = <<-EOF apiVersion: "vynil.solidite.fr/v1" kind: "Install" metadata: name: "${var.namespace}" namespace: "${var.traefik.namespace}" labels: ${jsonencode(local.common-labels)} spec: distrib: "${var.distributions.domain}" category: "apps" component: "traefik-ui" options: ${jsonencode(merge(local.global, local.traefik))} EOF } resource "kubectl_manifest" "k8s_api" { count = var.api.enable ? 1 : 0 yaml_body = <<-EOF apiVersion: "vynil.solidite.fr/v1" kind: "Install" metadata: name: "k8s-api-${var.namespace}" namespace: "default" labels: ${jsonencode(local.common-labels)} spec: distrib: "${var.distributions.domain}" category: "apps" component: "k8s-api" options: ${jsonencode(merge(local.global, local.api))} EOF } resource "kubectl_manifest" "okd" { count = var.okd.enable ? 1 : 0 depends_on = [kubernetes_namespace_v1.infra-ns] yaml_body = <<-EOF apiVersion: "vynil.solidite.fr/v1" kind: "Install" metadata: name: "infra-okd" namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}" labels: ${jsonencode(local.common-labels)} spec: distrib: "${var.distributions.domain}" category: "apps" component: "okd" options: ${jsonencode(merge(local.global, local.okd))} EOF } resource "kubectl_manifest" "gramo" { count = var.gramo.enable ? 1 : 0 depends_on = [kubernetes_namespace_v1.infra-ns] yaml_body = <<-EOF apiVersion: "vynil.solidite.fr/v1" kind: "Install" metadata: name: "infra-gramo" namespace: "${kubernetes_namespace_v1.infra-ns[0].metadata[0].name}" labels: ${jsonencode(local.common-labels)} spec: distrib: "${var.distributions.domain}" category: "apps" component: "gramo" options: ${jsonencode(merge(local.global, local.gramo))} EOF }