-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e32a7cc
commit 3686805
Showing
1 changed file
with
102 additions
and
103 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,103 +1,102 @@ | ||
| # resource "kubernetes_namespace" "namespace_argocd" { | ||
| # metadata { | ||
| # name = "argocd" | ||
| # } | ||
| # | ||
| # depends_on = [ | ||
| # module.aks | ||
| # ] | ||
| # } | ||
| # | ||
| # resource "helm_release" "argocd" { | ||
| # name = "argo" | ||
| # chart = "https://github.com/argoproj/argo-helm/releases/download/argo-cd-6.7.11/argo-cd-6.7.11.tgz" | ||
| # namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
| # wait = false | ||
| # | ||
| # values = [ | ||
| # file("argocd/argocd_helm_setup_values.yaml") | ||
| # ] | ||
| # | ||
| # depends_on = [ | ||
| # module.aks | ||
| # ] | ||
| # } | ||
| # | ||
| # resource "random_password" "argocd_admin_password" { | ||
| # length = 12 | ||
| # special = true | ||
| # override_special = "_%@" | ||
| # | ||
| # depends_on = [helm_release.argocd] | ||
| # } | ||
| # | ||
| # resource "null_resource" "argocd_change_admin_password" { | ||
| # | ||
| # triggers = { | ||
| # helm_revision = helm_release.argocd.metadata[0].revision, | ||
| # argocd_password = random_password.argocd_admin_password.result | ||
| # } | ||
| # | ||
| # provisioner "local-exec" { | ||
| # command = "kubectl -n argocd patch secret argocd-secret -p '{\"stringData\": {\"admin.password\": \"${bcrypt(random_password.argocd_admin_password.result)}\", \"admin.passwordMtime\": \"'$(date +%FT%T%Z)'\"}}'" | ||
| # } | ||
| # } | ||
| # | ||
| # resource "azurerm_key_vault_secret" "argocd_admin_password" { | ||
| # key_vault_id = data.azurerm_key_vault.kv_core_ita.id | ||
| # name = "argocd-admin-password" | ||
| # value = random_password.argocd_admin_password.result | ||
| # } | ||
| # | ||
| # # | ||
| # # tools | ||
| # # | ||
| # | ||
| # module "argocd_pod_identity" { | ||
| # source = "git::https://github.com/pagopa/terraform-azurerm-v3.git//kubernetes_pod_identity?ref=v8.21.0" | ||
| # | ||
| # cluster_name = module.aks.name | ||
| # resource_group_name = azurerm_resource_group.rg_aks.name | ||
| # location = var.location | ||
| # tenant_id = data.azurerm_subscription.current.tenant_id | ||
| # | ||
| # identity_name = "argocd-pod-identity" | ||
| # namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
| # key_vault_id = data.azurerm_key_vault.kv_core_ita.id | ||
| # | ||
| # secret_permissions = ["Get"] | ||
| # certificate_permissions = ["Get"] | ||
| # } | ||
| # | ||
| # resource "helm_release" "reloader_argocd" { | ||
| # name = "reloader" | ||
| # repository = "https://stakater.github.io/stakater-charts" | ||
| # chart = "reloader" | ||
| # version = "v1.0.30" | ||
| # namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
| # | ||
| # set { | ||
| # name = "reloader.watchGlobally" | ||
| # value = "false" | ||
| # } | ||
| # } | ||
| # | ||
| # module "cert_mounter_argocd_internal" { | ||
| # source = "git::https://github.com/pagopa/terraform-azurerm-v3.git//cert_mounter?ref=v8.21.0" | ||
| # namespace = "argocd" | ||
| # certificate_name = replace(local.argocd_internal_url, ".", "-") | ||
| # kv_name = data.azurerm_key_vault.kv_core_ita.name | ||
| # tenant_id = data.azurerm_subscription.current.tenant_id | ||
| # | ||
| # depends_on = [ | ||
| # module.argocd_pod_identity | ||
| # ] | ||
| # } | ||
| # | ||
| # resource "azurerm_private_dns_a_record" "argocd_ingress" { | ||
| # name = local.ingress_hostname_prefix | ||
| # zone_name = data.azurerm_private_dns_zone.internal.name | ||
| # resource_group_name = local.internal_dns_zone_resource_group_name | ||
| # ttl = 3600 | ||
| # records = [var.ingress_load_balancer_ip] | ||
| # } | ||
| resource "kubernetes_namespace" "namespace_argocd" { | ||
| metadata { | ||
| name = "argocd" | ||
| } | ||
|
|
||
| depends_on = [ | ||
| module.aks | ||
| ] | ||
| } | ||
|
|
||
| resource "helm_release" "argocd" { | ||
| name = "argo" | ||
| chart = "https://github.com/argoproj/argo-helm/releases/download/argo-cd-7.1.3/argo-cd-7.1.3.tgz" | ||
| namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
| wait = false | ||
|
|
||
| values = [ | ||
| file("argocd/argocd_helm_setup_values.yaml") | ||
| ] | ||
|
|
||
| depends_on = [ | ||
| module.aks | ||
| ] | ||
| } | ||
|
|
||
| resource "random_password" "argocd_admin_password" { | ||
| length = 12 | ||
| special = true | ||
| override_special = "_%@" | ||
|
|
||
| depends_on = [helm_release.argocd] | ||
| } | ||
|
|
||
| resource "null_resource" "argocd_change_admin_password" { | ||
|
|
||
| triggers = { | ||
| helm_revision = helm_release.argocd.metadata[0].revision, | ||
| argocd_password = random_password.argocd_admin_password.result | ||
| } | ||
|
|
||
| provisioner "local-exec" { | ||
| command = "kubectl -n argocd patch secret argocd-secret -p '{\"stringData\": {\"admin.password\": \"${bcrypt(random_password.argocd_admin_password.result)}\", \"admin.passwordMtime\": \"'$(date +%FT%T%Z)'\"}}'" | ||
| } | ||
| } | ||
|
|
||
| resource "azurerm_key_vault_secret" "argocd_admin_password" { | ||
| key_vault_id = data.azurerm_key_vault.kv_core_ita.id | ||
| name = "argocd-admin-password" | ||
| value = random_password.argocd_admin_password.result | ||
| } | ||
|
|
||
| resource "azurerm_key_vault_secret" "argocd_admin_username" { | ||
| key_vault_id = data.azurerm_key_vault.kv_core_ita.id | ||
| name = "argocd-admin-username" | ||
| value = "admin" | ||
| } | ||
|
|
||
| # | ||
| # tools | ||
| # | ||
|
|
||
| module "argocd_pod_identity" { | ||
| source = "git::https://github.com/pagopa/terraform-azurerm-v3.git//kubernetes_pod_identity?ref=v8.21.0" | ||
|
|
||
| cluster_name = module.aks.name | ||
| resource_group_name = azurerm_resource_group.rg_aks.name | ||
| location = var.location | ||
| tenant_id = data.azurerm_subscription.current.tenant_id | ||
|
|
||
| identity_name = "argocd-pod-identity" | ||
| namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
| key_vault_id = data.azurerm_key_vault.kv_core_ita.id | ||
|
|
||
| secret_permissions = ["Get"] | ||
| certificate_permissions = ["Get"] | ||
| } | ||
|
|
||
| resource "helm_release" "reloader_argocd" { | ||
| name = "reloader" | ||
| repository = "https://stakater.github.io/stakater-charts" | ||
| chart = "reloader" | ||
| version = "v1.0.30" | ||
| namespace = kubernetes_namespace.namespace_argocd.metadata[0].name | ||
|
|
||
| set { | ||
| name = "reloader.watchGlobally" | ||
| value = "false" | ||
| } | ||
| } | ||
|
|
||
| module "cert_mounter_argocd_internal" { | ||
| source = "git::https://github.com/pagopa/terraform-azurerm-v3.git//cert_mounter?ref=v8.21.0" | ||
| namespace = "argocd" | ||
| certificate_name = replace(local.argocd_internal_url, ".", "-") | ||
| kv_name = data.azurerm_key_vault.kv_core_ita.name | ||
| tenant_id = data.azurerm_subscription.current.tenant_id | ||
|
|
||
| depends_on = [ | ||
| module.argocd_pod_identity | ||
| ] | ||
| } | ||
|
|