73 lines
1.5 KiB
YAML
73 lines
1.5 KiB
YAML
---
|
|
kind: pipeline
|
|
type: kubernetes
|
|
name: Terraform root module
|
|
|
|
trigger:
|
|
event:
|
|
- cron
|
|
- push
|
|
branch:
|
|
- main
|
|
|
|
environment:
|
|
TF_IN_AUTOMATION: "1"
|
|
|
|
steps:
|
|
- name: terraform init
|
|
image: hashicorp/terraform:1.1.8
|
|
commands:
|
|
- mkdir -p ~/.ssh
|
|
- chmod 755 ~/.ssh
|
|
- echo "$${CI_SSH_KEY}" | base64 -d > ~/.ssh/id_rsa
|
|
- chmod 600 ~/.ssh/id_rsa
|
|
- terraform init
|
|
environment:
|
|
GIT_SSH_COMMAND: "ssh -o StrictHostKeyChecking=no"
|
|
CI_SSH_KEY:
|
|
from_secret: ci-ssh-key
|
|
AWS_ACCESS_KEY_ID:
|
|
from_secret: terraform-aws-key-id
|
|
AWS_SECRET_ACCESS_KEY:
|
|
from_secret: terraform-aws-secret-access-key
|
|
|
|
- name: terraform plan
|
|
image: hashicorp/terraform:1.1.8
|
|
commands:
|
|
- terraform plan -out .tfplan
|
|
environment:
|
|
AWS_ACCESS_KEY_ID:
|
|
from_secret: terraform-aws-key-id
|
|
AWS_SECRET_ACCESS_KEY:
|
|
from_secret: terraform-aws-secret-access-key
|
|
GITEA_TOKEN:
|
|
from_secret: gitea-token
|
|
KUBE_TOKEN:
|
|
from_secret: lawndale-k8s-ci-token
|
|
|
|
- name: terraform apply
|
|
when:
|
|
when:
|
|
branch:
|
|
- main
|
|
event:
|
|
- push
|
|
image: hashicorp/terraform:1.1.8
|
|
commands:
|
|
- terraform apply -plan .tfplan
|
|
environment:
|
|
AWS_ACCESS_KEY_ID:
|
|
from_secret: terraform-aws-key-id
|
|
AWS_SECRET_ACCESS_KEY:
|
|
from_secret: terraform-aws-secret-access-key
|
|
GITEA_TOKEN:
|
|
from_secret: gitea-token
|
|
KUBE_TOKEN:
|
|
from_secret: lawndale-k8s-ci-token
|
|
|
|
---
|
|
kind: signature
|
|
hmac: 7b8d9484950222bb6fbef283c824a1270d5da4cfeb8b50b1c2eb2ef426b81ae4
|
|
|
|
...
|