Addresses #540 - Project link
Adds Terraform scripts and Helm charts to run them. Resource states migrated from Terraform Cloud to a Google Cloud Storage bucket.
Changes 🚧
Added Terraform module, imported from cas-shelf
Added Helm templates to handle:
Terraform module loading to configMaps
OpenShift service account for use by Terraform
Terraform apply job
To test 🔬
The Helm charts are built into the automation around deploys via ShipIt. Once a deploy has been run, you can check the job Terraform-apply in OpenShift to see if the run was successful.
Notes📝
🔒 Terraform Cloud state has been locked to enable migration of state to state buckets
A script has been run and resources have been transitioned from Terraform Cloud to GCP buckets holding state for each namespace (ggircs-dev, ggircs-test, ggircs-prod).
Resources have been migrated rather than recreated, only the state "owning" the resource changes.
The resources kubernetes_secret.secret_sa have had Terraform changes, but only the addition of a default value (consistent with our use of them) due to a new provider version.
Unlike other project's migrations, the one set of buckets created based on 'apps' are different between dev and test + prod, due to name length limits. This app is eccc-swrs-import in dev and swrs-import in test+prod.
Addresses #540 - Project link Adds Terraform scripts and Helm charts to run them. Resource states migrated from Terraform Cloud to a Google Cloud Storage bucket.
Changes 🚧
To test 🔬
Terraform-apply
in OpenShift to see if the run was successful.Notes📝
kubernetes_secret.secret_sa
have had Terraform changes, but only the addition of a default value (consistent with our use of them) due to a new provider version.dev
andtest
+prod
, due to name length limits. This app iseccc-swrs-import
in dev andswrs-import
in test+prod.