mirror of
https://github.com/outbackdingo/terraform-render-bootstrap.git
synced 2026-01-27 10:20:45 +00:00
a52f99e8cc
* Add support for using Calico pod networking instead of flannel * Add variable "networking" which may be "calico" or "flannel" * Users MUST move the contents of assets_dir/manifests-networking into the assets_dir/manifests directory before running bootkube start. This is needed because Terraform cannot generate conditional files into a template_dir because other resources write to the same directory and delete. https://github.com/terraform-providers/terraform-provider-template/issues/10
66 lines
2.4 KiB
HCL
66 lines
2.4 KiB
HCL
# Assets generated only when experimental self-hosted etcd is enabled
|
|
|
|
resource "template_dir" "flannel-manifests" {
|
|
count = "${var.networking == "flannel" ? 1 : 0}"
|
|
source_dir = "${path.module}/resources/flannel"
|
|
destination_dir = "${var.asset_dir}/manifests-networking"
|
|
|
|
vars {
|
|
pod_cidr = "${var.pod_cidr}"
|
|
}
|
|
}
|
|
|
|
resource "template_dir" "calico-manifests" {
|
|
count = "${var.networking == "calico" ? 1 : 0}"
|
|
source_dir = "${path.module}/resources/calico"
|
|
destination_dir = "${var.asset_dir}/manifests-networking"
|
|
|
|
vars {
|
|
pod_cidr = "${var.pod_cidr}"
|
|
}
|
|
}
|
|
|
|
# bootstrap-etcd.yaml pod bootstrap-manifest
|
|
resource "template_dir" "experimental-bootstrap-manifests" {
|
|
count = "${var.experimental_self_hosted_etcd ? 1 : 0}"
|
|
source_dir = "${path.module}/resources/experimental/bootstrap-manifests"
|
|
destination_dir = "${var.asset_dir}/experimental/bootstrap-manifests"
|
|
|
|
vars {
|
|
etcd_image = "${var.container_images["etcd"]}"
|
|
bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
|
|
}
|
|
}
|
|
|
|
# etcd subfolder - bootstrap-etcd-service.json and migrate-etcd-cluster.json TPR
|
|
resource "template_dir" "etcd-subfolder" {
|
|
count = "${var.experimental_self_hosted_etcd ? 1 : 0}"
|
|
source_dir = "${path.module}/resources/etcd"
|
|
destination_dir = "${var.asset_dir}/etcd"
|
|
|
|
vars {
|
|
bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
|
|
}
|
|
}
|
|
|
|
# etcd-operator deployment and etcd-service manifests
|
|
# etcd client, server, and peer tls secrets
|
|
resource "template_dir" "experimental-manifests" {
|
|
count = "${var.experimental_self_hosted_etcd ? 1 : 0}"
|
|
source_dir = "${path.module}/resources/experimental/manifests"
|
|
destination_dir = "${var.asset_dir}/experimental/manifests"
|
|
|
|
vars {
|
|
etcd_service_ip = "${cidrhost(var.service_cidr, 15)}"
|
|
|
|
# Self-hosted etcd TLS certs / keys
|
|
etcd_ca_cert = "${base64encode(tls_self_signed_cert.etcd-ca.cert_pem)}"
|
|
etcd_client_cert = "${base64encode(tls_locally_signed_cert.client.cert_pem)}"
|
|
etcd_client_key = "${base64encode(tls_private_key.client.private_key_pem)}"
|
|
etcd_server_cert = "${base64encode(tls_locally_signed_cert.server.cert_pem)}"
|
|
etcd_server_key = "${base64encode(tls_private_key.server.private_key_pem)}"
|
|
etcd_peer_cert = "${base64encode(tls_locally_signed_cert.peer.cert_pem)}"
|
|
etcd_peer_key = "${base64encode(tls_private_key.peer.private_key_pem)}"
|
|
}
|
|
}
|