-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
5a5f027
commit 070ce71
Showing
1 changed file
with
59 additions
and
59 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,60 +1,60 @@ | ||
| # # This hcl file is responsible for the configuration deployment that will be used by ArgoCD | ||
|
|
||
| # # ApplicationSet resource for the applications that argoCD will manage | ||
| # data "kubectl_file_documents" "apps" { | ||
| # content = file("../manifests/argocd/apps.yaml") | ||
| # } | ||
|
|
||
| # resource "kubectl_manifest" "apps" { | ||
| # # Needs to depend on argocd deployment, since we'll configure it after deployment finishes | ||
| # depends_on = [kubectl_manifest.argocd] | ||
| # # for_each iterates over each manifest in the namespace file | ||
| # for_each = data.kubectl_file_documents.apps.manifests | ||
| # # Applies the content of each manifest to the Kubernetes cluster | ||
| # yaml_body = each.value | ||
| # # Forces the namespace to be set to argocd, ensuring that all resources are created in the correct namespace | ||
| # override_namespace = "argocd" | ||
| # } | ||
|
|
||
| # # MANAGING SECRETS USING External Secrets | ||
| # # External-Secrets operator for the retrieval of secrets | ||
| # data "kubectl_file_documents" "external-secrets" { | ||
| # content = file("../manifests/argocd/external-secrets.yaml") | ||
| # } | ||
|
|
||
| # resource "kubectl_manifest" "external-secrets" { | ||
| # # It needs to depend on argocd creation, since we'll deploy external-secrets right after argocd gets created | ||
| # depends_on = [ | ||
| # kubectl_manifest.argocd, | ||
| # ] | ||
| # # for_each iterates over each manifest in the namespace file | ||
| # for_each = data.kubectl_file_documents.external-secrets.manifests | ||
| # # Applies the content of each manifest to the Kubernetes cluster | ||
| # yaml_body = each.value | ||
| # # Forces the namespace to be set to argocd, ensuring that all resources are created in the correct namespace | ||
| # override_namespace = "argocd" | ||
| # } | ||
|
|
||
| # # # File that holds the secret resource that have service account credentials | ||
| # data "kubectl_file_documents" "gcpsm-secret" { | ||
| # content = file("../manifests/argocd/gcpsm-secret.yaml") | ||
| # } | ||
|
|
||
| # resource "kubectl_manifest" "gcpsm-secret" { | ||
| # for_each = data.kubectl_file_documents.gcpsm-secret.manifests | ||
| # yaml_body = each.value | ||
| # } | ||
|
|
||
| # # SecretStore resource that uses secret resource to retrieve external secrets | ||
| # data "kubectl_file_documents" "secret-store" { | ||
| # content = file("../manifests/argocd/secret-store.yaml") | ||
| # } | ||
|
|
||
| # resource "kubectl_manifest" "secret-store" { | ||
| # depends_on = [ | ||
| # kubectl_manifest.gcpsm-secret, | ||
| # ] | ||
| # for_each = data.kubectl_file_documents.secret-store.manifests | ||
| # yaml_body = each.value | ||
| # } | ||
| # This hcl file is responsible for the configuration deployment that will be used by ArgoCD | ||
|
|
||
| # ApplicationSet resource for the applications that argoCD will manage | ||
| data "kubectl_file_documents" "apps" { | ||
| content = file("../manifests/argocd/apps.yaml") | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "apps" { | ||
| # Needs to depend on argocd deployment, since we'll configure it after deployment finishes | ||
| depends_on = [kubectl_manifest.argocd] | ||
| # for_each iterates over each manifest in the namespace file | ||
| for_each = data.kubectl_file_documents.apps.manifests | ||
| # Applies the content of each manifest to the Kubernetes cluster | ||
| yaml_body = each.value | ||
| # Forces the namespace to be set to argocd, ensuring that all resources are created in the correct namespace | ||
| override_namespace = "argocd" | ||
| } | ||
|
|
||
| # MANAGING SECRETS USING External Secrets | ||
| # External-Secrets operator for the retrieval of secrets | ||
| data "kubectl_file_documents" "external-secrets" { | ||
| content = file("../manifests/argocd/external-secrets.yaml") | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "external-secrets" { | ||
| # It needs to depend on argocd creation, since we'll deploy external-secrets right after argocd gets created | ||
| depends_on = [ | ||
| kubectl_manifest.argocd, | ||
| ] | ||
| # for_each iterates over each manifest in the namespace file | ||
| for_each = data.kubectl_file_documents.external-secrets.manifests | ||
| # Applies the content of each manifest to the Kubernetes cluster | ||
| yaml_body = each.value | ||
| # Forces the namespace to be set to argocd, ensuring that all resources are created in the correct namespace | ||
| override_namespace = "argocd" | ||
| } | ||
|
|
||
| # # File that holds the secret resource that have service account credentials | ||
| data "kubectl_file_documents" "gcpsm-secret" { | ||
| content = file("../manifests/argocd/gcpsm-secret.yaml") | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "gcpsm-secret" { | ||
| for_each = data.kubectl_file_documents.gcpsm-secret.manifests | ||
| yaml_body = each.value | ||
| } | ||
|
|
||
| # SecretStore resource that uses secret resource to retrieve external secrets | ||
| data "kubectl_file_documents" "secret-store" { | ||
| content = file("../manifests/argocd/secret-store.yaml") | ||
| } | ||
|
|
||
| resource "kubectl_manifest" "secret-store" { | ||
| depends_on = [ | ||
| kubectl_manifest.gcpsm-secret, | ||
| ] | ||
| for_each = data.kubectl_file_documents.secret-store.manifests | ||
| yaml_body = each.value | ||
| } | ||
|
|