o1da / terraform-azure-spacelift-workerpool

Spacelift Worker for Azure

Terraform module for deploying a Spacelift worker pool on Azure using a VMSS.

Usage

NOTE: please make sure you accept the terms for our Azure Marketplace image before trying to use the module.

module "azure-worker" {
  source = "github.com/spacelift-io/terraform-azure-spacelift-workerpool"

  admin_password = "Super Secret Password!"

  configuration = <<-EOT
    export SPACELIFT_TOKEN="${var.worker_pool_config}"
    export SPACELIFT_POOL_PRIVATE_KEY="${var.worker_pool_private_key}"
  EOT

  resource_group = var.resource_group # An azurerm_resource_group object - must have `name` and `location` properties
  subnet_id      = var.subnet_id
  worker_pool_id = var.worker_pool_id
}

Accepting Terms

Before you can use our Marketplace image, you need to accept the terms and conditions for the image for the subscription you want to deploy the image to. You can do this using the following command:

az vm image terms accept \
  --publisher "spaceliftinc1625499025476" \
  --offer "spacelift_worker" \
  --plan "ubuntu_20_04"

More information can be found here.

Examples

The following examples of using the module are available:

• Bastion - creates a worker with a Bastion host for ssh access.
• System-Assigned Identity - creates a worker with a system-assigned identity.
• User-Assigned Identity - creates a worker with a user-assigned identity, and shows how to use that identity to access the worker pool credentials via KeyVault secrets.