Last active
March 20, 2023 21:29
-
-
Save TylerWanner/8b38494bea6535fa10936c5a81678c78 to your computer and use it in GitHub Desktop.
Cert-Manager Helm Release in Terraform
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
terraform { | |
backend "local" { | |
path = "../states/cert_manager.tfstate" | |
} | |
} | |
data "terraform_remote_state" "cluster" { | |
backend = "local" | |
config = { | |
path = "../states/cluster.tfstate" | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
resource "kubernetes_namespace" "cm" { | |
metadata { | |
name = "cert-manager" | |
} | |
} | |
resource "helm_release" "cm" { | |
name = "cm" | |
namespace = kubernetes_namespace.cm.metadata[0].name | |
create_namespace = false | |
chart = "cert-manager" | |
repository = "https://charts.jetstack.io" | |
version = "v1.5.3" | |
values = [ | |
file("values.yaml") | |
] | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
provider google {} | |
data "google_client_config" "default" {} | |
provider kubernetes { | |
host = "https://${data.terraform_remote_state.cluster.outputs.cluster_endpoint}" | |
token = data.google_client_config.default.access_token | |
cluster_ca_certificate = base64decode(data.terraform_remote_state.cluster.outputs.cacert) | |
} | |
provider "helm" { | |
kubernetes { | |
host = "https://${data.terraform_remote_state.cluster.outputs.cluster_endpoint}" | |
token = data.google_client_config.default.access_token | |
cluster_ca_certificate = base64decode(data.terraform_remote_state.cluster.outputs.cacert) | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
global: | |
podSecurityPolicy: | |
enabled: true | |
useAppArmor: true | |
prometheus: | |
enabled: false | |
installCRDs: true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
terraform { | |
required_providers { | |
google = { | |
source = "hashicorp/google" | |
version = "3.85.0" | |
} | |
helm = { | |
source = "hashicorp/helm" | |
version = "2.3.0" | |
} | |
kubernetes = { | |
source = "hashicorp/kubernetes" | |
version = "2.5.0" | |
} | |
} | |
required_version = ">= 1" | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment