Adding users and group bulk creation files

kubernetes-ressources/terraform/.gitignore

@@ -1,4 +1,4 @@
 .terraform
 terraform.tfstate
 terraform.tfstate.backup
-ips
+config/*

kubernetes-ressources/terraform/README.md

@@ -18,8 +18,7 @@ To achieve this, we create a terraform workspace per element.
 
 ## Pre-requisites
 
-1. Create the GSuite users on **training.wecontrol.cloud** domain and place them in *k8s-training-niv-1* group and *kube-niv-1* OU. For that, ask an admin on the suite Domain.
-2. Create the target GCP projects. For this, see https://gitlab.com/wescalefr/bootstrap-gcp-kube-training.
+1. Create the target GCP projects. For this, see https://gitlab.com/wescalefr/bootstrap-gcp-kube-training.
 
 ## Get Terraform 
 
@@ -40,6 +39,14 @@ Then:
 bash tf-runner.sh provision
 ```
 
+## (Optional) Create users to allow Web SSH Console
+
+Create the GSuite users on **training.wecontrol.cloud** domain and place them in *k8s-training-niv-1* group and *kube-niv-1* OU. For that, ask an admin on the suite Domain.
+
+Two files are generated by Terraform to allow bulk creation of users and group association:
+- Upload config/users.csv on (User management)[https://admin.google.com/ac/users] of wecontrol.cloud management console.
+- Upload conf/users_group.csv on (k8s-training-niv-1 group)[https://admin.google.com/ac/groups/01rvwp1q0sa51v1/members?hl=fr] management page.
+
 ## At the end of training, clean the GKE clusters
 
 

kubernetes-ressources/terraform/tf-runner.sh

@@ -2,7 +2,7 @@
 
 set -e
 
-NB_PROJECTS=11 # can go to the value defined in https://gitlab.com/wescalefr/bootstrap-gcp-kube-training
+NB_PROJECTS=12 # can go to the value defined in https://gitlab.com/wescalefr/bootstrap-gcp-kube-training
 
 OPT=$1   # option
 
@@ -11,6 +11,9 @@ ROOT_DIR=$(pwd)
 function provision(){
   local project_id=0
   rm -rf "${ROOT_DIR}/config/ips"
+  echo "First Name [Required],Last Name [Required],Email Address [Required],Password [Required],Password Hash Function [UPLOAD ONLY],Org Unit Path [Required]" > "${ROOT_DIR}/config/users.csv"
+  echo "Group Email [Required],Member Email,Member Type,Member Role" > "${ROOT_DIR}/config/users_group.csv"
+
   while [ $project_id -lt $NB_PROJECTS ];do
     echo "Create content for project ${project_id}"
     set +e
@@ -19,8 +22,11 @@ function provision(){
     terraform workspace select "wsc-kubernetes-training-${project_id}"
     terraform apply -auto-approve
 
-    mkdir -p "${ROOT_DIR}/config/${w}"   
     terraform output -json bastion_ip |jq -r . >> "${ROOT_DIR}/config/ips"
+    userid=$(printf "%02d" "$project_id") # 2 digits, e.g. 01 for project 1
+    passwd=$(tr -dc A-Za-z0-9 </dev/urandom | head -c 20) # 20 alpha-numeric chars
+    echo "trainee${userid},trainee${userid},trainee${userid}@training.wecontrol.cloud,${passwd},,/kube-niv1-trainee" >> "${ROOT_DIR}/config/users.csv"
+    echo "[email protected],trainee${userid}@training.wecontrol.cloud,USER,MEMBER" >> "${ROOT_DIR}/config/users_group.csv"
     project_id=$[$project_id+1]
   done
 }