MWGitHub / infrastructure

Setting up and managing infrastructure.

infrastructure

Setting up and managing infrastructure.

Repositories

The main repository now exists on GitLab (https://gitlab.com/mwguy/infrastructure), GitHub will be a mirror.

Installation

Install terraform at https://www.terraform.io/downloads.html and put it into your path.

Install the google cloud sdk at https://cloud.google.com/sdk/.

Install go at https://golang.org/dl/.

git clone [e-mail]:mwguy/infrastructure.git

cd infrastructure

Environment Credentials (optional)

Environment credentials will allow some steps to be skipped such as creating a service account though it is still advisable.

These are the credentials that can be used for ease of use:

• export GOOGLE_APPLICATION_CREDENTIALS="[PATH]" for gcs credentials
• export INFRA_PROJECT="[PROJECT_ID] the project ID to use
• export INFRA_BUCKET=[BUCKET] the name of the bucket
• export TF_VAR_do_token=[DO_TOKEN] the Digital Ocean token

Usage

Backend Creation

The backend is used to store terraform state data.

1. Log into google cloud by executing
   gcloud init
2. Execute the following shell command to set up the storage (this only needs to be run once)
   • if the project has not been created yet run:
     ./scripts/backend-init.sh --help
   • if the project has already been created run:
     ./scripts/backend-init.sh [PROJECT_ID] [UNIQUE_BUCKET_NAME]
3. Install third party plugins with
   ./scripts/install-plugins.sh
4. Now your service account credentials should be output, do not store this in git.
5. Create or use an existing DigitalOcean token
6. cd terraform
7. Initialize the backend with the bucket name
   terraform init -input=true
   1. input the [UNIQUE_BUCKET_NAME]

Network Creation

Reasoning

• The storage and permissions for the backend are provisioned in a separate script so the backend can access it.
• Permissions on the backend service account is limited to operations within the terraform bucket for security purposes.