Terraform: Difference between revisions
Jump to navigation
Jump to search
Line 85: | Line 85: | ||
* '''TL;DR''' <code>terraform.tfvars</code> is what you pass to your stack to make it meaningfully distinct from any other deployment. <code>variables.tf</code> declares the variable names that you need to pass to the stack. | * '''TL;DR''' <code>terraform.tfvars</code> is what you pass to your stack to make it meaningfully distinct from any other deployment. <code>variables.tf</code> declares the variable names that you need to pass to the stack. | ||
==Backend » | ==Backend » HTTP== | ||
<syntaxhighlight lang="terraform"> | <syntaxhighlight lang="terraform"> | ||
terraform { | terraform { | ||
Line 99: | Line 99: | ||
} | } | ||
} | } | ||
</syntaxhighlight> | |||
---- | |||
<syntaxhighlight lang="terraform"> | |||
backend_http_tfstate_repository_unlock = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke/unlock" | |||
backend_http_tfstate_repository_lock = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke/lock" | |||
backend_http_tfstate_repository_base = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke" | |||
backend_http_username = "academia" | |||
backend_http_password = "sadaqah!" | |||
</syntaxhighlight> | |||
---- | |||
<syntaxhighlight lang="terraform"> | |||
backend_http_tfstate_repository_unlock = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke/unlock" | |||
backend_http_tfstate_repository_lock = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke/lock" | |||
backend_http_tfstate_repository_base = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke" | |||
backend_http_username = "[email protected]" | |||
backend_http_password = "sadaqah!" | |||
</syntaxhighlight> | </syntaxhighlight> | ||
Revision as of 10:33, 19 July 2024
curl -fsSL https://apt.releases.hashicorp.com/gpg\
| sudo tee /etc/apt/keyrings/hashicorp.asc >/dev/null
cat << EOF | sudo tee /etc/apt/sources.list.d/hashicorp.list >/dev/null
deb [arch=$(dpkg --print-architecture)\
signed-by=/etc/apt/keyrings/hashicorp.asc]\
https://apt.releases.hashicorp.com $(lsb_release -cs) main
EOF
sudo apt update && sudo apt list --upgradeable
sudo apt upgrade && sudo apt install terraform
terraform version
Structure
sdlc/
├─ main.tf # Main Terraform config file
├─ variables.tf # Variable declarations
├─ terraform.tfvars # Variable assigned
├─ outputs.tf # Output definitions
├─ provider.tf # Provider-specific config
├─ terraform.tfstate # Terraform state file
├─ dev.tf # Dev Env config for development
├─ prod.tf # Prod Env config for production
├─ modules/ # Directory for custom modules
│ ├─ module1/ # Custom module 1
│ │ ├─ main.tf # Module-specific Terraform config
│ │ ├─ variables.tf # Module-specific variables
│ │ └─ outputs.tf # Module-specific outputs
│ └─ module2/ # Custom module 2
│ ├─ main.tf
│ ├─ variables.tf
│ └─ outputs.tf
├─ environments/ # Directory for env
│ ├─ dev/ # Development env
│ │ ├─ main.tf # Env specific Terraform config
│ │ ├─ variables.tf
│ │ └─ outputs.tf
│ └─ prod/ # Production env
│ ├─ main.tf
│ ├─ variables.tf
│ └─ outputs.tf
├─ scripts/ # Scripts or utility for IaC
└── README.md
Summary
Backend » HTTPterraform {
backend "http" {
unlock_address = var.backend_http_tfstate_repository_unlock
lock_address = var.backend_http_tfstate_repository_lock
address = var.backend_http_tfstate_repository_base
username = var.backend_http_username
password = var.backend_http_password
unlock_method = DELETE
lock_method = POST
retry_wait_min = 5
}
}
backend_http_tfstate_repository_unlock = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke/unlock"
backend_http_tfstate_repository_lock = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke/lock"
backend_http_tfstate_repository_base = "https://gitlab.chorke.org/api/v4/projects/123/terraform/state/aws/chorke"
backend_http_username = "academia"
backend_http_password = "sadaqah!"
backend_http_tfstate_repository_unlock = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke/unlock"
backend_http_tfstate_repository_lock = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke/lock"
backend_http_tfstate_repository_base = "https://nexus.chorke.org/repository/terraform/chorke-sdlc/state/aws/chorke"
backend_http_username = "[email protected]"
backend_http_password = "sadaqah!"
Playground
References |