domain/meta/domain-ci/apps.tf

locals {
    annotations = {
      "vynil.solidite.fr/meta"   = var.component
      "vynil.solidite.fr/name"   = var.namespace
    }
    annotations_default = {
      "default.vynil.solidite.fr/sso_vynil" = var.sso_vynil
      "default.vynil.solidite.fr/domain_name" = var.domain_name
      "default.vynil.solidite.fr/timezone" = var.timezone
      "default.vynil.solidite.fr/language" = var.language
      "default.vynil.solidite.fr/domain" = var.domain
      "default.vynil.solidite.fr/issuer" = var.issuer
      "default.vynil.solidite.fr/ingress_class" = var.ingress_class
      "default.vynil.solidite.fr/app_group" = var.app_group
      "default.vynil.solidite.fr/backups.enable" = var.backups.enable
      "default.vynil.solidite.fr/backups.use_barman" = var.backups.use_barman
      "default.vynil.solidite.fr/backups.endpoint" = var.backups.endpoint
      "default.vynil.solidite.fr/backups.secret_name" = var.backups.secret_name
      "default.vynil.solidite.fr/backups.key_id_key" = var.backups.key_id_key
      "default.vynil.solidite.fr/backups.secret_key" = var.backups.secret_key
      "default.vynil.solidite.fr/backups.restic_key" = var.backups.restic_key
      "default.vynil.solidite.fr/storage.volume.accessMode" = var.storage.volume.accessMode
      "default.vynil.solidite.fr/storage.volume.class" = var.storage.volume.class
    }
    global = {
      "sso_vynil"     = var.sso_vynil
      "domain_name"   = var.domain_name
      "timezone"      = var.timezone
      "language"      = var.language
      "domain"        = var.domain
      "issuer"        = var.issuer
      "ingress_class" = var.ingress_class
      "app_group"     = var.app_group
    }
    global-backups = {
      "enable"      = var.backups.enable
      "use_barman"  = var.backups.use_barman
      "endpoint"    = var.backups.endpoint
      "secret_name" = var.backups.secret_name
      "key_id_key"  = var.backups.key_id_key
      "secret_key"  = var.backups.secret_key
      "restic_key"  = var.backups.restic_key
    }
    global-volume = {
      "accessMode" = var.storage.volume.accessMode
      "class"      = var.storage.volume.class
    }
    gitea = merge(local.global,{ for k, v in var.gitea : k => v if !contains(["enable","storage","backups"],k) },{
      backups = merge(local.global-backups, lookup(var.gitea, "backups", {}))
      storage = merge({ for k, v in lookup(var.gitea, "storage", {}) : k => v if !contains(["volume"],k) }, {
        volume = merge(local.global-volume, lookup(lookup(var.gitea, "storage", {}), "volume", {}))
      })
    })
    woodpecker = merge(local.global,{ for k, v in var.woodpecker : k => v if !contains(["enable","storage","backups"],k) },{
      backups = merge(local.global-backups, lookup(var.woodpecker, "backups", {}))
      storage = merge({ for k, v in lookup(var.woodpecker, "storage", {}) : k => v if !contains(["volume"],k) }, {
        volume = merge(local.global-volume, lookup(lookup(var.woodpecker, "storage", {}), "volume", {}))
      })
    })
    sonar = merge(local.global,{ for k, v in var.sonar : k => v if !contains(["enable","storage","backups"],k) },{
      backups = merge(local.global-backups, lookup(var.sonar, "backups", {}))
      storage = merge({ for k, v in lookup(var.sonar, "storage", {}) : k => v if !contains(["volume"],k) }, {
        volume = merge(local.global-volume, lookup(lookup(var.sonar, "storage", {}), "volume", {}))
      })
    })
    taiga = merge(local.global,{ for k, v in var.taiga : k => v if !contains(["enable","storage","backups"],k) },{
      backups = merge(local.global-backups, lookup(var.taiga, "backups", {}))
      storage = merge({ for k, v in lookup(var.taiga, "storage", {}) : k => v if !contains(["volume"],k) }, {
        volume = merge(local.global-volume, lookup(lookup(var.taiga, "storage", {}), "volume", {}))
      })
    })
}

resource "kubernetes_namespace_v1" "ci-ns" {
  count = ( var.gitea.enable || var.sonar.enable || var.taiga.enable || var.woodpecker.enable )? 1 : 0
  metadata {
    annotations = merge(local.annotations, local.annotations_default)
    labels = merge(local.common_labels, local.annotations)
    name = "${var.namespace}-ci"
  }
}

resource "kubectl_manifest" "gitea" {
  count = var.gitea.enable ? 1 : 0
  depends_on = [kubernetes_namespace_v1.ci-ns]
  yaml_body  = <<-EOF
    apiVersion: "vynil.solidite.fr/v1"
    kind: "Install"
    metadata:
      name: "gitea"
      namespace: "${var.namespace}-ci"
      labels: ${jsonencode(local.common_labels)}
    spec:
      distrib: "${var.distributions.domain}"
      category: "apps"
      component: "gitea"
      options: ${jsonencode(local.gitea)}
  EOF
}

resource "kubectl_manifest" "sonar" {
  count = var.sonar.enable ? 1 : 0
  depends_on = [kubernetes_namespace_v1.ci-ns]
  yaml_body  = <<-EOF
    apiVersion: "vynil.solidite.fr/v1"
    kind: "Install"
    metadata:
      name: "sonar"
      namespace: "${var.namespace}-ci"
      labels: ${jsonencode(local.common_labels)}
    spec:
      distrib: "${var.distributions.domain}"
      category: "apps"
      component: "sonar"
      options: ${jsonencode(local.sonar)}
  EOF
}

resource "kubectl_manifest" "taiga" {
  count = var.taiga.enable ? 1 : 0
  depends_on = [kubernetes_namespace_v1.ci-ns]
  yaml_body  = <<-EOF
    apiVersion: "vynil.solidite.fr/v1"
    kind: "Install"
    metadata:
      name: "taiga"
      namespace: "${var.namespace}-ci"
      labels: ${jsonencode(local.common_labels)}
    spec:
      distrib: "${var.distributions.domain}"
      category: "apps"
      component: "taiga"
      options: ${jsonencode(local.taiga)}
  EOF
}

resource "kubectl_manifest" "woodpecker" {
  count = var.woodpecker.enable ? 1 : 0
  depends_on = [kubernetes_namespace_v1.ci-ns]
  yaml_body  = <<-EOF
    apiVersion: "vynil.solidite.fr/v1"
    kind: "Install"
    metadata:
      name: "woodpecker"
      namespace: "${var.namespace}-ci"
      labels: ${jsonencode(local.common_labels)}
    spec:
      distrib: "${var.distributions.domain}"
      category: "apps"
      component: "woodpecker"
      options: ${jsonencode(local.woodpecker)}
  EOF
}