Big Bang Terraform Start

Getting Started

Prerequisites

• Linux or MacOS (runs a bash script to return information about Istio's LoadBalancers)
• terraform
• kubectl
• jq
• base64

Instructions

Using a vars file:

# Copy and edit with your values
cp terraform.tfvars.example terraform.tfvars

terraform init
terraform plan
terraform apply

Using environment variables:

# Update with your values
export TF_VAR_registry_credentials='[{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'

#Optional: Reduce flux resource requests for edge/resource constrained environments
export TF_VAR_reduce_flux_resources=true

terraform init
terraform plan
terraform apply

Using inline arguments:

# Update with your values inline
terraform init
terraform plan -var 'registry_credentials=[{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'
terraform apply -var 'registry_credentials=[{regsitry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'

Requirements

Name	Version
terraform	>= 0.13
kubectl	>= 1.7.0

Providers

Name	Version
external	n/a
kubectl	>= 1.7.0
kubernetes	n/a

Inputs

Name	Description	Type	Default	Required
registry_credentials	System-wide registry credentials to be applied so Kubernetes can pull container images. Creds for registry1.dso.mil are required, and you can optionally provide any other creds for other private registries as well	list(object({ registry = string username = string password = string }))	n/a	yes
big_bang_manifest_file	Path to the root k8s yaml manifest. Typically contains a Namespace, GitRepository, and Kustomization. See https://repo1.dso.mil/platform-one/quick-start/big-bang/-/blob/master/bigbang/start.yaml for example	string	"k8s/start.yaml"	no
custom_credentials	Any custom credentials needed for custom BigBang implementation	list(object({ namespace = string name = string username = string password = string }))	[]	no
custom_flux_file	Path to the optional custom flux k8s yaml manifest	string	""	no
kube_conf_file	Path to the KUBECONFIG file to use to connect to the cluster. If the file passed has multiple contexts in it the correct context is expected to already be set in contexts.current-context.	string	"~/.kube/config"	no

Outputs

Name	Description
external_load_balancer	JSON array with information on all LoadBalancer services in the istio-system namespace. Example output: [ { "name": "public-ingressgateway", "ip": "192.0.2.0", "hostname": "null" }, {...} ]