DGNum/infrastructure
12
6
Fork 3
Code Issues 16 Pull requests 11 Projects 1 Releases Packages Wiki Activity Actions

WIP: feat(infra): introduce Terranix #145

Draft
rlahfa wants to merge 3 commits from declarative-buckets into main
pull from: declarative-buckets
merge into: DGNum:main
Conversation 1 Commits 3 Files changed 10 +190
rlahfa commented 2024-10-10 12:29:00 +02:00
Owner
Copy link

TODO:

  • expose s3-admin.dgnum.eu
  • make a mechanism to source the credentials for admin and manage rekeying à la agenix
  • import various secrets manually in the state bucket (e.g. admin token)

Blocker: garage_key_bucket and garage_global_alias cannot be imported via our provider, I need to fix this and maybe also fix automatic refresh.

Signed-off-by: Ryan Lahfa ryan@dgnum.eu

TODO: - [x] expose s3-admin.dgnum.eu - [x] make a mechanism to source the credentials for admin and manage rekeying à la agenix - [x] import various secrets manually in the state bucket (e.g. admin token) Blocker: garage_key_bucket and garage_global_alias cannot be imported via our provider, I need to fix this and maybe also fix automatic refresh. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
rlahfa changed title from feat(infra): introduce Terranix to WIP:ù feat(infra): introduce Terranix 2024-10-10 12:29:44 +02:00
rlahfa changed title from WIP:ù feat(infra): introduce Terranix to WIP: feat(infra): introduce Terranix 2024-10-10 12:29:46 +02:00
thubrecht requested changes 2024-10-10 12:32:48 +02:00
default.nix Outdated
@ -67,9 +67,16 @@ let
commitizen.enable = true;
};
};
terranixConfig = import "${sources.terranix}/core" {
thubrecht commented 2024-10-10 12:30:22 +02:00
Owner
Copy link

Please add a newline

Please add a newline
rlahfa marked this conversation as resolved
default.nix Outdated
@ -70,3 +76,4 @@
in
{
inherit terranixConfigFile terranixConfig;
thubrecht commented 2024-10-10 12:30:51 +02:00
Owner
Copy link

Newline also after the inherit

Newline also after the inherit
rlahfa marked this conversation as resolved
terranix/state.nix Outdated
@ -0,0 +4,4 @@
# endpoints.
#
# Note: currently requires the user to provide AWS_ACCESS_KEY_ID as well as
# AWS_SECRET_ACCESS_KEY in their environment variables.
thubrecht commented 2024-10-10 12:32:41 +02:00
Owner
Copy link

TODO(one day): Add a .credentials directory, with age encrypted files that can be decrypted when entering the shell

TODO(one day): Add a .credentials directory, with age encrypted files that can be decrypted when entering the shell
rlahfa commented 2024-10-10 12:43:10 +02:00
Author
Owner
Copy link

let's do it now

let's do it now
rlahfa commented 2024-10-10 17:07:16 +02:00
Author
Owner
Copy link

done!

done!
rlahfa marked this conversation as resolved
terranix/state.nix Outdated
@ -0,0 +12,4 @@
bucket = "monorepo-terraform-state";
key = "state";
# It's just a dump Garage server, don't try to be smart.
thubrecht commented 2024-10-10 12:31:43 +02:00
Owner
Copy link

dumb*

dumb*
rlahfa marked this conversation as resolved
thubrecht reviewed 2024-10-10 12:34:09 +02:00
terranix/s3.nix Outdated
@ -0,0 +20,4 @@
};
};
garage_key = { };
garage_bucket_key = { };
thubrecht commented 2024-10-10 12:34:09 +02:00
Owner
Copy link

??

??
rlahfa commented 2024-10-10 12:42:52 +02:00
Author
Owner
Copy link

it's just to showcase how to use it

it's just to showcase how to use it
rlahfa commented 2024-10-10 12:43:02 +02:00
Author
Owner
Copy link

terraform won't delete things it doesn't know about FYI

terraform won't delete things it doesn't know about FYI
👍 1
thubrecht marked this conversation as resolved
rlahfa force-pushed declarative-buckets from ed50bab459 to 483bf93d26 2024-10-10 12:41:13 +02:00 Compare
rlahfa force-pushed declarative-buckets from 483bf93d26 to a1ace67cbd 2024-10-10 16:45:32 +02:00 Compare
rlahfa force-pushed declarative-buckets from a1ace67cbd to 0acececb31 2024-10-10 16:47:01 +02:00 Compare
rlahfa force-pushed declarative-buckets from 0acececb31 to d5e7ea14e7 2024-10-10 17:04:34 +02:00 Compare
rlahfa force-pushed declarative-buckets from d5e7ea14e7 to 2a89984ad6 2024-10-10 17:07:17 +02:00 Compare
rlahfa force-pushed declarative-buckets from 2a89984ad6 to a37d83c418 2024-10-10 17:30:58 +02:00 Compare
rlahfa force-pushed declarative-buckets from a37d83c418 to 5a14c63ba5 2024-10-10 17:53:06 +02:00 Compare
rlahfa force-pushed declarative-buckets from 5a14c63ba5 to 2ce8c125d4 2024-10-10 17:59:07 +02:00 Compare
thubrecht force-pushed declarative-buckets from 2ce8c125d4 to 822b4f3b83 2024-10-22 13:32:25 +02:00 Compare
thubrecht commented 2024-10-22 13:36:33 +02:00
Owner
Copy link

Ce serait tip top de rajouter un poil de documentation sur comment se servir de terraform

Ce serait tip top de rajouter un poil de documentation sur comment se servir de terraform
rlahfa added the
awaiting
awaiting-author
 label 2024-12-15 20:24:07 +01:00
Some checks are pending
Check meta / check_meta (push) Successful in 15s
Required
Details
Check meta / check_dns (push) Successful in 16s
Required
Details
lint / check (push) Successful in 26s
Details
Check meta / check_meta (pull_request) Successful in 16s
Required
Details
Check meta / check_dns (pull_request) Successful in 16s
Required
Details
build configuration / build_and_cache_storage01 (pull_request) Successful in 1m17s
Details
build configuration / build_and_cache_compute01 (pull_request) Successful in 1m35s
Details
build configuration / build_and_cache_rescue01 (pull_request) Successful in 1m11s
Details
build configuration / build_and_cache_geo01 (pull_request) Successful in 1m7s
Details
build configuration / build_and_cache_geo02 (pull_request) Successful in 1m6s
Details
build configuration / build_and_cache_vault01 (pull_request) Successful in 1m27s
Details
build configuration / build_and_cache_web02 (pull_request) Successful in 1m4s
Details
build configuration / build_and_cache_web01 (pull_request) Successful in 1m50s
Details
build configuration / build_and_cache_web03 (pull_request) Successful in 1m12s
Details
build configuration / build_and_cache_bridge01 (pull_request) Successful in 1m2s
Details
lint / check (pull_request) Successful in 23s
Details
Build all the nodes / *
Required
Run pre-commit on all files / *
Required
Check workflows / *
Required
This pull request has changes conflicting with the target branch.
  • default.nix
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin declarative-buckets:declarative-buckets
git checkout declarative-buckets
Sign in to join this conversation.
Reviewers
No reviewers
thubrecht
Labels
Clear labels   
awaiting
awaiting-author
Awaiting for the author interaction (e.g. QA/confirmation/final merge)

  
awaiting
awaiting-reviewer
Awaiting for a privileged reviewer to approve this PR

  
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
wontfix

This won't be fixed

No labels
awaiting
awaiting-author
awaiting
awaiting-reviewer
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: DGNum/infrastructure#145
No description provided.
Delete branch "declarative-buckets"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?