mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-15 10:54:29 -05:00
60fc73e0e7
* terraform: move module to legacy-directory * constellation-lib: refactor service account marshalling * terraform-provider: normalize Azure image URIs * constellation-lib: refactor Kubeconfig endpoint rewriting * terraform-provider: add conversion functions for AWS and GCP * terraform-provider: implement `constellation_cluster` resource * terraform-provider: refactor conversion * terraform-provider: implement image and k8s upgrades * terraform-provider: fix linter checks * terraform-provider: refactor to bundle init & upgrade method * constellation-lib: rewrite Kubeconfig endpoint in init * terraform-provider: bind logger and dialer constructors to struct * terraform-provider: move applier to function pointer * terraform-provider: gcp conversion fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform-provider: fix Azure UAMI input * terraform-provider: rename Kubeconfig variable * terraform-provider: tidy * terraform-provider: regenerate docs * constellation-lib: provide Kubeconfig in testing initserver --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
39 lines
1.2 KiB
HCL
39 lines
1.2 KiB
HCL
locals {
|
|
image_ref = startswith(var.image, "v") ? "ref/-/stream/stable/${var.image}" : var.image
|
|
region_filter = var.region != "" ? " and .region == \"${var.region}\"" : "" # apply region filter only if region field exists for the CSP
|
|
|
|
fetch_image_command = <<EOT
|
|
curl -s https://cdn.confidential.cloud/constellation/v2/${local.image_ref}/image/info.json | \
|
|
./yq eval '.list[] | select(.csp == "${var.csp}" and .attestationVariant == "${var.attestation_variant}"${local.region_filter}) | .reference' - | tr -d '\n' > "image.txt"
|
|
|
|
if [ '${var.csp}' = 'azure' ]; then
|
|
sed -i 's/CommunityGalleries/communityGalleries/g' image.txt
|
|
sed -i 's/Images/images/g' image.txt
|
|
sed -i 's/Versions/versions/g' image.txt
|
|
fi
|
|
EOT
|
|
}
|
|
|
|
|
|
resource "null_resource" "fetch_image" {
|
|
provisioner "local-exec" {
|
|
command = local.fetch_image_command
|
|
|
|
environment = {
|
|
attestation_variant = var.attestation_variant
|
|
}
|
|
}
|
|
provisioner "local-exec" {
|
|
when = destroy
|
|
command = "rm image.txt"
|
|
}
|
|
triggers = {
|
|
always_run = "${timestamp()}"
|
|
}
|
|
}
|
|
|
|
data "local_file" "image" {
|
|
filename = "image.txt"
|
|
depends_on = [null_resource.fetch_image]
|
|
}
|