Big Bang Terraform Start

Prerequisites

• Linux or MacOS (runs a bash script to return information about Istio's LoadBalancers)
• terraform
• kubectl
• jq
• base64

Getting Started

An example of a project that uses this Terraform module can be found here.

Instructions

Using a vars file:

# Copy and edit with your values
cp terraform.tfvars.example terraform.tfvars 

terraform init
terraform plan
terraform apply

Using environment variables:

# Update with your values
export TF_VAR_registry_credentials='[{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'

#Optional: Reduce flux resource requests for edge/resource constrained environments
export TF_VAR_reduce_flux_resources=true

terraform init
terraform plan
terraform apply

Using inline arguments:

# Update with your values inline
terraform init
terraform plan -var 'registry_credentials=[{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'
terraform apply -var 'registry_credentials=[{regsitry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'

Requirements

Name	Version
terraform	>= 0.13
kubectl	>= 1.7.0

Providers

Name	Version
external	n/a
kubectl	>= 1.7.0
kubernetes	n/a

Inputs

Name	Description	Type	Default	Required
registry_credentials	System-wide registry credentials to be applied so Kubernetes can pull container images. Creds for registry1.dso.mil are required, and you can optionally provide any other creds for other private registries as well	list(object({ registry = string username = string password = string }))	n/a	yes
big_bang_manifest_file	Path to the root k8s yaml manifest. Typically contains a Namespace, GitRepository, and Kustomization. See https://repo1.dso.mil/platform-one/quick-start/big-bang/-/blob/master/bigbang/start.yaml for example	string	"k8s/start.yaml"	no
kube_conf_file	Path to the KUBECONFIG file to use to connect to the cluster. If the file passed has multiple contexts in it the correct context is expected to already be set in contexts.current-context.	string	"~/.kube/config"	no
reduce_flux_resources	DEPRECATED - Used to tweak resource settings to fit on a smaller machine, but the new Flux deployment already uses the smaller values. flux.yaml and flux_light.yaml are now identical files.	bool	false	no

Outputs

Name	Description
external_load_balancer	JSON array with information on all LoadBalancer services in the istio-system namespace. Example output: [ { "name": "public-ingressgateway", "ip": "192.0.2.0", "hostname": "null" }, {...} ]