WIP: feat(infra): introduce Terranix #145

Draft
rlahfa wants to merge 9 commits from declarative-buckets into main
Owner

TODO:

  • expose s3-admin.dgnum.eu
  • make a mechanism to source the credentials for admin and manage rekeying à la agenix
  • import various secrets manually in the state bucket (e.g. admin token)

Blocker: garage_key_bucket and garage_global_alias cannot be imported via our provider, I need to fix this and maybe also fix automatic refresh.

Signed-off-by: Ryan Lahfa ryan@dgnum.eu

TODO: - [x] expose s3-admin.dgnum.eu - [x] make a mechanism to source the credentials for admin and manage rekeying à la agenix - [x] import various secrets manually in the state bucket (e.g. admin token) Blocker: garage_key_bucket and garage_global_alias cannot be imported via our provider, I need to fix this and maybe also fix automatic refresh. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
rlahfa changed title from feat(infra): introduce Terranix to WIP:ù feat(infra): introduce Terranix 2024-10-10 12:29:44 +02:00
rlahfa changed title from WIP:ù feat(infra): introduce Terranix to WIP: feat(infra): introduce Terranix 2024-10-10 12:29:46 +02:00
default.nix Outdated
@ -67,9 +67,16 @@ let
commitizen.enable = true;
};
};
terranixConfig = import "${sources.terranix}/core" {
Owner

Please add a newline

Please add a newline
rlahfa marked this conversation as resolved
default.nix Outdated
@ -70,3 +76,4 @@
in
{
inherit terranixConfigFile terranixConfig;
Owner

Newline also after the inherit

Newline also after the inherit
rlahfa marked this conversation as resolved
@ -0,0 +4,4 @@
# endpoints.
#
# Note: currently requires the user to provide AWS_ACCESS_KEY_ID as well as
# AWS_SECRET_ACCESS_KEY in their environment variables.
Owner

TODO(one day): Add a .credentials directory, with age encrypted files that can be decrypted when entering the shell

TODO(one day): Add a .credentials directory, with age encrypted files that can be decrypted when entering the shell
Author
Owner

let's do it now

let's do it now
Author
Owner

done!

done!
rlahfa marked this conversation as resolved
@ -0,0 +12,4 @@
bucket = "monorepo-terraform-state";
key = "state";
# It's just a dump Garage server, don't try to be smart.
Owner

dumb*

dumb*
rlahfa marked this conversation as resolved
terranix/s3.nix Outdated
@ -0,0 +20,4 @@
};
};
garage_key = { };
garage_bucket_key = { };
Owner

??

??
Author
Owner

it's just to showcase how to use it

it's just to showcase how to use it
Author
Owner

terraform won't delete things it doesn't know about FYI

terraform won't delete things it doesn't know about FYI
thubrecht marked this conversation as resolved
rlahfa force-pushed declarative-buckets from ed50bab459 to 483bf93d26 2024-10-10 12:41:13 +02:00 Compare
rlahfa force-pushed declarative-buckets from 483bf93d26 to a1ace67cbd 2024-10-10 16:45:32 +02:00 Compare
rlahfa force-pushed declarative-buckets from a1ace67cbd to 0acececb31 2024-10-10 16:47:01 +02:00 Compare
rlahfa force-pushed declarative-buckets from 0acececb31 to d5e7ea14e7 2024-10-10 17:04:34 +02:00 Compare
rlahfa force-pushed declarative-buckets from d5e7ea14e7 to 2a89984ad6 2024-10-10 17:07:17 +02:00 Compare
rlahfa force-pushed declarative-buckets from 2a89984ad6 to a37d83c418 2024-10-10 17:30:58 +02:00 Compare
rlahfa force-pushed declarative-buckets from a37d83c418 to 5a14c63ba5 2024-10-10 17:53:06 +02:00 Compare
rlahfa force-pushed declarative-buckets from 5a14c63ba5 to 2ce8c125d4 2024-10-10 17:59:07 +02:00 Compare
thubrecht force-pushed declarative-buckets from 2ce8c125d4 to 822b4f3b83 2024-10-22 13:32:25 +02:00 Compare
Owner

Ce serait tip top de rajouter un poil de documentation sur comment se servir de terraform

Ce serait tip top de rajouter un poil de documentation sur comment se servir de terraform
lbailly force-pushed declarative-buckets from 822b4f3b83 to 1351f13770 2025-05-18 16:13:22 +02:00 Compare
lbailly force-pushed declarative-buckets from d6fdd44277 to e4981f43d7 2025-05-19 17:25:13 +02:00 Compare
lbailly force-pushed declarative-buckets from 5227a79f45 to 7ed4bcb33b 2025-05-21 15:01:19 +02:00 Compare
lbailly force-pushed declarative-buckets from 7ed4bcb33b to b409886725 2025-05-26 15:12:41 +02:00 Compare
dgnum-chores referenced this pull request from a commit 2025-06-12 15:01:17 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-13 14:57:26 +02:00
lbailly force-pushed declarative-buckets from b409886725 to e25add76eb 2025-06-13 19:10:10 +02:00 Compare
dgnum-chores referenced this pull request from a commit 2025-06-14 14:59:08 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-15 14:59:12 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-16 14:58:59 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-17 14:59:10 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-18 14:58:20 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-19 14:58:07 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-20 15:00:09 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-21 14:58:58 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-22 14:57:31 +02:00
lbailly force-pushed declarative-buckets from 592bebda2f to 1d8916154f 2025-06-23 12:41:04 +02:00 Compare
refactor(state): use nimbolus http backend
All checks were successful
Check meta / check_dns (pull_request) Successful in 18s
Check workflows / check_workflows (pull_request) Successful in 20s
Build all the nodes / Jaccess01 (pull_request) Successful in 23s
Run pre-commit on all files / pre-commit (push) Successful in 26s
Build all the nodes / Jaccess04 (pull_request) Successful in 25s
Run pre-commit on all files / pre-commit (pull_request) Successful in 29s
Build all the nodes / ap01 (pull_request) Successful in 38s
Build all the nodes / geo01 (pull_request) Successful in 49s
Build all the nodes / bridge01 (pull_request) Successful in 52s
Build all the nodes / cof02 (pull_request) Successful in 52s
Build all the nodes / build01 (pull_request) Successful in 57s
Build all the nodes / geo02 (pull_request) Successful in 50s
Build all the nodes / hypervisor01 (pull_request) Successful in 48s
Build all the nodes / hypervisor03 (pull_request) Successful in 51s
Build all the nodes / hypervisor02 (pull_request) Successful in 54s
Build all the nodes / netcore01 (pull_request) Successful in 24s
Build all the nodes / netcore02 (pull_request) Successful in 22s
Build all the nodes / compute01 (pull_request) Successful in 1m21s
Build all the nodes / iso (pull_request) Successful in 1m1s
Build all the nodes / lab-router01 (pull_request) Successful in 49s
Build all the nodes / storage01 (pull_request) Successful in 47s
Build the shell / build-shell (pull_request) Successful in 25s
Build all the nodes / krz01 (pull_request) Successful in 1m33s
Build all the nodes / tower01 (pull_request) Successful in 1m0s
Build all the nodes / vault01 (pull_request) Successful in 1m3s
Build all the nodes / web02 (pull_request) Successful in 58s
Build all the nodes / zulip01 (pull_request) Successful in 55s
Build all the nodes / rescue01 (pull_request) Successful in 1m18s
Build all the nodes / web03 (pull_request) Successful in 59s
Build all the nodes / web01 (pull_request) Successful in 1m8s
751c680362
dgnum-chores referenced this pull request from a commit 2025-06-23 14:58:40 +02:00
lbailly force-pushed declarative-buckets from 15b7d3b188 to 1114e26627 2025-06-23 15:06:41 +02:00 Compare
lbailly force-pushed declarative-buckets from 8496a5725d to 93ec9ecf18 2025-06-23 18:22:03 +02:00 Compare
feat(buckets): hackens-website ingestion
All checks were successful
Check workflows / check_workflows (pull_request) Successful in 17s
Check meta / check_meta (pull_request) Successful in 17s
Build all the nodes / Jaccess04 (pull_request) Successful in 25s
Build all the nodes / Jaccess01 (pull_request) Successful in 26s
Run pre-commit on all files / pre-commit (push) Successful in 29s
Run pre-commit on all files / pre-commit (pull_request) Successful in 33s
Build all the nodes / ap01 (pull_request) Successful in 42s
Build all the nodes / netcore01 (pull_request) Successful in 26s
Build all the nodes / netcore02 (pull_request) Successful in 25s
Build all the nodes / bridge01 (pull_request) Successful in 57s
Build all the nodes / geo01 (pull_request) Successful in 56s
Build all the nodes / hypervisor03 (pull_request) Successful in 1m2s
Build all the nodes / hypervisor02 (pull_request) Successful in 1m2s
Build all the nodes / cof02 (pull_request) Successful in 1m3s
Build all the nodes / geo02 (pull_request) Successful in 1m2s
Build all the nodes / hypervisor01 (pull_request) Successful in 1m5s
Build all the nodes / iso (pull_request) Successful in 1m6s
Build all the nodes / build01 (pull_request) Successful in 1m7s
Build all the nodes / lab-router01 (pull_request) Successful in 1m2s
Build all the nodes / compute01 (pull_request) Successful in 1m22s
Build the shell / build-shell (pull_request) Successful in 27s
Build all the nodes / storage01 (pull_request) Successful in 49s
Build all the nodes / tower01 (pull_request) Successful in 48s
Build all the nodes / rescue01 (pull_request) Successful in 1m11s
Build all the nodes / krz01 (pull_request) Successful in 1m35s
Build all the nodes / zulip01 (pull_request) Successful in 49s
Build all the nodes / web02 (pull_request) Successful in 57s
Build all the nodes / web03 (pull_request) Successful in 59s
Build all the nodes / vault01 (pull_request) Successful in 1m15s
Build all the nodes / web01 (pull_request) Successful in 1m12s
0289a104ae
dgnum-chores referenced this pull request from a commit 2025-06-24 14:58:15 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-25 14:58:10 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-26 14:58:20 +02:00
mdebray referenced this pull request from a commit 2025-06-26 15:13:29 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-27 14:57:55 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-28 14:59:06 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-29 14:59:08 +02:00
dgnum-chores referenced this pull request from a commit 2025-06-30 14:59:20 +02:00
dgnum-chores referenced this pull request from a commit 2025-07-01 14:59:02 +02:00
dgnum-chores referenced this pull request from a commit 2025-07-02 14:58:53 +02:00
dgnum-chores referenced this pull request from a commit 2025-07-03 14:59:04 +02:00
dgnum-chores referenced this pull request from a commit 2025-07-04 14:58:29 +02:00
dgnum-chores referenced this pull request from a commit 2025-07-05 14:58:44 +02:00
thubrecht referenced this pull request from a commit 2025-07-06 11:47:22 +02:00
All checks were successful
Check meta / check_dns (pull_request) Successful in 14s
Required
Details
Check workflows / check_workflows (pull_request) Successful in 17s
Required
Details
Check meta / check_meta (pull_request) Successful in 17s
Required
Details
Build all the nodes / Jaccess04 (pull_request) Successful in 25s
Required
Details
Build all the nodes / Jaccess01 (pull_request) Successful in 26s
Required
Details
Run pre-commit on all files / pre-commit (push) Successful in 29s
Required
Details
Run pre-commit on all files / pre-commit (pull_request) Successful in 33s
Required
Details
Build all the nodes / ap01 (pull_request) Successful in 42s
Required
Details
Build all the nodes / netcore01 (pull_request) Successful in 26s
Required
Details
Build all the nodes / netcore02 (pull_request) Successful in 25s
Required
Details
Build all the nodes / bridge01 (pull_request) Successful in 57s
Required
Details
Build all the nodes / geo01 (pull_request) Successful in 56s
Required
Details
Build all the nodes / hypervisor03 (pull_request) Successful in 1m2s
Required
Details
Build all the nodes / hypervisor02 (pull_request) Successful in 1m2s
Required
Details
Build all the nodes / cof02 (pull_request) Successful in 1m3s
Required
Details
Build all the nodes / geo02 (pull_request) Successful in 1m2s
Required
Details
Build all the nodes / hypervisor01 (pull_request) Successful in 1m5s
Required
Details
Build all the nodes / iso (pull_request) Successful in 1m6s
Required
Details
Build all the nodes / build01 (pull_request) Successful in 1m7s
Required
Details
Build all the nodes / lab-router01 (pull_request) Successful in 1m2s
Required
Details
Build all the nodes / compute01 (pull_request) Successful in 1m22s
Required
Details
Build the shell / build-shell (pull_request) Successful in 27s
Required
Details
Build all the nodes / storage01 (pull_request) Successful in 49s
Required
Details
Build all the nodes / tower01 (pull_request) Successful in 48s
Required
Details
Build all the nodes / rescue01 (pull_request) Successful in 1m11s
Required
Details
Build all the nodes / krz01 (pull_request) Successful in 1m35s
Required
Details
Build all the nodes / zulip01 (pull_request) Successful in 49s
Required
Details
Build all the nodes / web02 (pull_request) Successful in 57s
Required
Details
Build all the nodes / web03 (pull_request) Successful in 59s
Required
Details
Build all the nodes / vault01 (pull_request) Successful in 1m15s
Required
Details
Build all the nodes / web01 (pull_request) Successful in 1m12s
Required
Details
This pull request has changes conflicting with the target branch.
  • REUSE.toml
  • default.nix
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin declarative-buckets:declarative-buckets
git switch declarative-buckets
Sign in to join this conversation.
No description provided.