https://github.com/datarockets/infrastructure
Infrastructure as Code
https://github.com/datarockets/infrastructure
Last synced: about 1 year ago
JSON representation
Infrastructure as Code
- Host: GitHub
- URL: https://github.com/datarockets/infrastructure
- Owner: datarockets
- Created: 2021-04-25T10:55:47.000Z (about 5 years ago)
- Default Branch: main
- Last Pushed: 2024-11-27T14:21:09.000Z (over 1 year ago)
- Last Synced: 2025-03-25T08:18:35.236Z (over 1 year ago)
- Language: HCL
- Homepage:
- Size: 75.2 KB
- Stars: 2
- Watchers: 16
- Forks: 0
- Open Issues: 18
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# datarockets infrastructure
## Examples
* [AWS EKS kubernetes cluster with deployment and ingress](examples/aws-eks-cluster)
### Digitalocean kubernetes for web services
Create managed kubernetes cluster and managed PostgreSQL database in Digitalocean and deploy simple web app consisting of one or mulple services.
The app will be deployed automatically, TLS certificates will be obtained automatically using Let's Encrypt.
Keep in mind that during the first run you won't have images in the registry yet, so you might put some placeholder images (e.g. `nginx:latest`) in `services` variable in `kubernetes` module.
Create `main.tf` in your repository:
```tf
module "digitalocean" {
source = "git@github.com:datarockets/infrastructure.git//do/k8s?ref=v0.1.0"
project = "sphere"
region = "tor1"
database = {
name = "sphere"
username = "sphere"
}
}
provider "kubernetes" {
host = module.digitalocean.k8s_host
token = module.digitalocean.k8s_token
cluster_ca_certificate = module.digitalocean.k8s_ca_certificate
}
provider "kubernetes-alpha" {
host = module.digitalocean.k8s_host
token = module.digitalocean.k8s_token
cluster_ca_certificate = module.digitalocean.k8s_ca_certificate
}
provider "helm" {
kubernetes {
host = module.digitalocean.k8s_host
token = module.digitalocean.k8s_token
cluster_ca_certificate = module.digitalocean.k8s_ca_certificate
}
}
module "kubernetes" {
source = "git@github.com:datarockets/infrastructure.git//k8s/basic?ref=v0.1.0"
depends_on = [
module.digitalocean
]
app = "sphere"
email = "sphere@datarockets.com"
dcr_credentials = module.digitalocean.dcr_credentials_k8s
services = {
app = {
replicas = 1
image = "${module.digitalocean.dcr_endpoint}/app:latest"
ports = [80]
env_from_secrets = []
}
api = {
replicas = 1
image = "${module.digitalocean.dcr_endpoint}/api:latest"
ports = [3000]
env_from_secrets = ["sphere"]
env = {
DB_POOL_SIZE = 16
}
init_container = {
command = ["bin/rails", "db:migrate"]
env_from_secrets = ["sphere"]
env = {
DB_POOL_SIZE = 1
}
}
}
worker = {
replicas = 1
image = "${module.digitalocean.dcr_endpoint}/worker:latest"
ports = []
env = {
QUEUES = "default:10"
}
}
}
web_services = ["app", "api"]
ingresses = {
"sphere.datarockets.com" = {
annotations = {
}
rules = [
{
host = "sphere.datarockets.com"
paths = [
{
path = "/api"
service = "api"
port = 3000
},
{
path = "/"
service = "app"
port = 80
}
]
}
]
}
}
secrets = {
sphere = {
DB_HOST = module.digitalocean.db_host
DB_PORT = module.digitalocean.db_port
DB_USER = module.digitalocean.db_user
DB_PASSWORD = module.digitalocean.db_password
DB_DATABASE = module.digitalocean.db_database
}
}
}
```
## Caveats
The configuration above will probably fail due to limitations of kubernetes-alpha provider: we try to create an Issuer using kubernetes-alpha and it raises an error because there are no CRD Issuer before we install cert-manager helm chart. Therefore, in order to apply the terraform config above you would need to apply it via multiple steps:
```
terraform apply -target=module.digitalocean
terraform apply -target=module.kubernetes.module.dependencies
terraform apply
```