mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
9667dfff58
* all vars have snail_case * make iam schema consistent * infrastructure schema * terraform: update AWS infrastructure module * fix ci * terraform: update AWS infrastructure module * terraform: update AWS IAM module * terraform: update Azure Infrastructure module inputs Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: update Azure IAM module Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: update GCP infrastructure module Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: update GCP IAM module Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: update OpenStack Infrastructure module Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: update QEMU Infrastructure module Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform-module: fix input name Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: tidy * cli: ignore whitespace in Terraform variable tests * terraform-module: fix AWS output names * terraform-module: fix output references Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: rename `api_server_cert_sans` * Update terraform/infrastructure/aws/modules/public_private_subnet/variables.tf Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> * fix self-managed * terraform: revert AWS modules output file renaming * terraform: remove duplicate varable declaration * terraform: rename Azure location field * ci: adjust output name in self-managed e2e test * e2e: continuously print output in upgrade test * e2e: write to output variables * cli: migrate IAM variable names * cli: make `location` field optional --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
68 lines
2.3 KiB
HCL
68 lines
2.3 KiB
HCL
resource "null_resource" "ensure_yq" {
|
|
provisioner "local-exec" {
|
|
command = <<EOT
|
|
../common/install-yq.sh
|
|
EOT
|
|
}
|
|
triggers = {
|
|
always_run = timestamp()
|
|
}
|
|
}
|
|
|
|
module "fetch_image" {
|
|
source = "../common/fetch-image"
|
|
csp = "azure"
|
|
attestation_variant = "azure-sev-snp"
|
|
image = var.image
|
|
depends_on = [null_resource.ensure_yq]
|
|
}
|
|
|
|
module "azure_iam" {
|
|
source = "../../infrastructure/iam/azure"
|
|
location = var.location
|
|
service_principal_name = var.service_principal_name
|
|
resource_group_name = var.resource_group_name
|
|
}
|
|
|
|
module "azure" {
|
|
source = "../../infrastructure/azure"
|
|
name = var.name
|
|
user_assigned_identity = module.azure_iam.uami_id
|
|
node_groups = var.node_groups
|
|
location = var.location
|
|
image_id = module.fetch_image.image
|
|
debug = var.debug
|
|
resource_group = module.azure_iam.base_resource_group
|
|
create_maa = var.create_maa
|
|
}
|
|
|
|
module "constellation" {
|
|
source = "../constellation-cluster"
|
|
csp = "azure"
|
|
debug = var.debug
|
|
name = var.name
|
|
image = var.image
|
|
microservice_version = var.microservice_version
|
|
kubernetes_version = var.kubernetes_version
|
|
uid = module.azure.uid
|
|
clusterEndpoint = module.azure.out_of_cluster_endpoint
|
|
inClusterEndpoint = module.azure.in_cluster_endpoint
|
|
initSecretHash = module.azure.init_secret
|
|
ipCidrNode = module.azure.ip_cidr_node
|
|
apiServerCertSANs = module.azure.api_server_cert_sans
|
|
node_groups = var.node_groups
|
|
azure_config = {
|
|
subscription = module.azure_iam.subscription_id
|
|
tenant = module.azure_iam.tenant_id
|
|
location = var.location
|
|
resourceGroup = module.azure.resource_group
|
|
userAssignedIdentity = module.azure_iam.uami_id
|
|
deployCSIDriver = var.deploy_csi_driver
|
|
secureBoot = var.secure_boot
|
|
maaURL = module.azure.attestation_url
|
|
networkSecurityGroupName = module.azure.network_security_group_name
|
|
loadBalancerName = module.azure.loadbalancer_name
|
|
}
|
|
depends_on = [null_resource.ensure_yq]
|
|
}
|