jondavidjohn / tfe-terraform

my-tfe

Clone this repo to your local machine.

Setup Vars

cp terraform.tfvars.example default.tfvars

You may want to customize the fields to your liking, e.g.: pointing to your repo, working directory, etc.

It might also behoove you to edit main.tf as well, e.g.: change around the different resources you need or expect.

Oauth Token

Go to github and create a personal access token with the repo and admin:repo_hook scopes. Use this generated value for your oauth_token value in terraform.tfvars.

Hostname

rake tfe:local:info

Use the hostname portion (removing the https:// etc..) of the url returned in the above command as your hostname value in terraform.tfvars.

TFC API Token

In the TFC UI go to your User Settings -> Tokens and create a new API token.

(The user this token belongs to should correspond with the specified user email in your tfvars file.)

This will go into your ~/.terraformrc file:

# tfe:local
credentials "tfe-zone-***.ngrok.io" {
  token = "<TFC-ADMIN-TOKEN>"
}

This is used by the terraform provider to authenticate, and all resources will be created by this user.

Helper scripts

Because these configurations use for_each, we need to target a few of these collections with our first apply. To make this less painless, I've included a helper script for apply.

bin/apply

and a companion script for destroy that helps when managing multiple environments

bin/destroy

Using it in other environments

If you want to use the configuration you have created in other environments, you should use terraform workspaces.

The simple way to get started with this is to create a new workspace

terraform workspace new oasis

Copy your existing tfvars file and update the hostname and organization_name (this organization must already be created). In my case, I called the new one oasis.tfvars.

Your new workspace provides a way to maintain state for a new environment separate from your existing usage against tfe:local.

Then you can target the workspace you've created with:

bin/apply oasis
bin/destroy oasis

These scripts always switch you back to the default workspace and select the default workspace if none is provided