adc/terraform

• Overview
  • Using this
  • State management
  • Importing
  • Secrets
    • Add secrets
    • Reference secrets
    • Exceptions (digital ocean spaces access for backend storage):

Overview

The TF module of ADC handles a few things:

• inits machine creation in Bikeshed, my local proxmox cluster
• configures DNS for my projects.

The idea is to keep ansible for configuration and use TF for machine creation / API communication.

Using this

• Install Terraform
• Move into the directory related to what you want to work on
• terraform plan
• terraform apply

State management

Using local tf state is mostly reasonable for a personal project, but I wanted to learn TF for enterprise reasons too, so I'm using Digital Ocean Spaces as an s3 compatible storage system. This is an explicit risk!! Sensitive shit can get written to those locations and leak keys or sensitive data to others.

See the Exceptions area under secrets for mroe info.

Importing

If and when you need to import stuff from outside of Terraform, use terraformer: https://github.com/GoogleCloudPlatform/terraformer

This is how I got everything in here in the first place!

Secrets

secrets are managed via pass, mostly

Add secrets

1. install pass
2. pass init `your gpg id` - make sure you use the right one, jesus FUCK. you want this public key: `98D96C71214AFB7583C03F5EDC798A32AE57BA46`

pass insert <your secret name>

Reference secrets

export TF_VAR_DO_PAT=$(pass <your secret name>)

Exceptions (digital ocean spaces access for backend storage):

1. Install the awscli tool.
2. aws configure --profile digitalocean
3. Fill in the fields with your key id and secret
4. export AWS_PROFILE=digitalocean
5. Boom.