Merge branch 'dev' into feat/deploy
This commit is contained in:
ineszang44
@@ -0,0 +1,63 @@
|
||||
# This file is maintained automatically by "terraform init".
|
||||
# Manual edits may be lost in future updates.
|
||||
|
||||
provider "registry.terraform.io/hashicorp/archive" {
|
||||
version = "2.8.1"
|
||||
constraints = "~> 2.4"
|
||||
hashes = [
|
||||
"h1:eehhIUcuegkswQDKArYBAhVV9wQmRVMhyYGaD7kHIj0=",
|
||||
"zh:03de290604114a89fcd45c2e5bc7787d5a1ebfc5f964fb5989306bea7a4c79ec",
|
||||
"zh:0a7d69dc9fbbc48960bc2f04588c8fb1bd92c78a8f306566b7fb17fc4a4f2058",
|
||||
"zh:4df1f3981379c35f1757da957470f7f7724496b57219da3485177cf1647bdf59",
|
||||
"zh:50f0e72ba53bfe6e11b03b7fc899e1f72536354381d302a743a274ae2a3f45f4",
|
||||
"zh:5c4e15a04c98e2a8cafb1cd9632b48ad318051e8462d105b1153006277985c35",
|
||||
"zh:66069e604bcf5c4af0278e15997d9e6bd755c54fb3801d78885838b889729c5f",
|
||||
"zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",
|
||||
"zh:979765db3f42601870ab377104ba70befb029547b278337ec4ada980e3582de6",
|
||||
"zh:b165254da774f49945a73fbccc3ef1b63d70ea00a98fa9e14716665ba80ecaad",
|
||||
"zh:c0bb2697b525da9fec4511f569ed2bd2b42f25d5c1f9fa00f8f3645b50cfc2e9",
|
||||
"zh:c48f6695d12df0d0fa5231f7c1b8d518a4feae91a733fdd35a5804af3a303831",
|
||||
"zh:d589954c93f075180c9f4e2ce91780d5edcb56dfd0d3cda8ba08e13c10b52249",
|
||||
"zh:f5792ed06da65d0daf7ca3711f5399ff78c7cb4400afe53fbce9a926fbde4477",
|
||||
]
|
||||
}
|
||||
|
||||
provider "registry.terraform.io/hashicorp/null" {
|
||||
version = "3.3.2"
|
||||
hashes = [
|
||||
"h1:7rn0+p+fbrHfJxNVgTnlKp6C3yu0jENMXffz9Xb9XjQ=",
|
||||
"zh:10ec43b8b7b18d5639238c7fb9e111f6a4b038523dd66c7a426bf27b25fa4c08",
|
||||
"zh:60beb9cc2ad5b871c710860cee75b42850cc6acd43db0d77cb5e00fda7288b55",
|
||||
"zh:62538582d0a4a2f10ad8a8d9a6c3cd3f05af6c6d91c6641ffc78d4f0e8e69b27",
|
||||
"zh:64a8f9ce7852d9efc5b464c12306c946366d59f5e2757def97969c9fd64bd1d6",
|
||||
"zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",
|
||||
"zh:92a374fb736a52f465283326d0a5bf4f495132eb99be209dfb4c75ec803fe8db",
|
||||
"zh:98da9c42785d27a50f0604758bcb61a30f6278b9f2acd92bb3b2046e0e71916c",
|
||||
"zh:b0f7896fae554729cdf4a24ac06359a050cff5817e6cd8597cba8a4ae01a7409",
|
||||
"zh:bc8179ee35d67c72fb03012e7023b9f9816f033a7ec4109c001dd6d29752e812",
|
||||
"zh:d23a598f713bfb6098bc003571d7de90b5a33b78f9be240488252fe5f3c2a60d",
|
||||
"zh:d2855b922ea345dbd89ea287e4c6c4757e38bc0aaffeb2b79aa0b8004f9c53ff",
|
||||
"zh:d3a60422bc6a2f9244d076c5222c07060c826ef91bdbaf4634cb752b86057473",
|
||||
"zh:faa01928c25d2a6ecd9c7eb8b88134cb08de55a6b11ca6c703ac0092845344ba",
|
||||
]
|
||||
}
|
||||
|
||||
provider "registry.terraform.io/kreuzwerker/docker" {
|
||||
version = "4.5.0"
|
||||
constraints = "~> 4.5.0"
|
||||
hashes = [
|
||||
"h1:eXPMxNcZjz5gC7Nc1oEPJldpI6B5btbvldjLOgJQNbI=",
|
||||
"zh:0ee4e9121632158a9ae1049bdd53c71fd9e06357de915dd193df2c1c55ae8814",
|
||||
"zh:12c6991012b5a548a406e1960c323484f95a9538c2522af15ec82f47fdb832d1",
|
||||
"zh:19c86ae59ed1e062e8402a49ea842f957fcda2f9689e06ecbd9480cc9bd1e41a",
|
||||
"zh:3ac8bc9805acd20c40c0ed474c9f4605aa73b61cf52809e1131e335fcbfe8e49",
|
||||
"zh:5a0e70d143759712fdda109f024a41d59d4758b5615378aa21ee6b959f65a416",
|
||||
"zh:5d3599285f71cc53c88a5802fa6e2f8ba87b9deea03abe5fe8bb2639e9d95654",
|
||||
"zh:a42f573a2526cddc9b8a93637a2c5478bc6e903ff29556ab8b2f1467681d5bde",
|
||||
"zh:c8de50d902cc8457e565a5d959f1e3e49064d31c2f14f7adf5f3ec632cfe3695",
|
||||
"zh:d40543d51eb4e902125d2c5a8a0f425a60edcec6c1dc07c4a89d92335ec05541",
|
||||
"zh:dd3105018ffddc8114083dcf84798c32fdecca7ef708eceaee49eb4b306fc061",
|
||||
"zh:e51e0199700698b962085683af4551d1f982dce37f3b6950da062c65e0145505",
|
||||
"zh:ffe415d3d3deffffdbd3a7173e3a9f90b74601cb6d8acafec1ab701a5b91dbff",
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
locals {
|
||||
backend_dir = "../../../../apps/backend"
|
||||
backend_image_name = "enervision-back"
|
||||
backend_image_tag = "latest"
|
||||
backend_container_name = "enervision-backend"
|
||||
}
|
||||
|
||||
resource "docker_image" "backend" {
|
||||
name = "${local.backend_image_name}:${local.backend_image_tag}"
|
||||
|
||||
build {
|
||||
context = local.backend_dir
|
||||
dockerfile = "Dockerfile"
|
||||
}
|
||||
|
||||
triggers = {
|
||||
build_hash = sha256(join("", [
|
||||
for file in fileset(local.backend_dir, "**") :
|
||||
filesha256("${local.backend_dir}/${file}")
|
||||
]))
|
||||
}
|
||||
}
|
||||
|
||||
resource "docker_container" "backend" {
|
||||
image = docker_image.backend.image_id
|
||||
name = local.backend_container_name
|
||||
|
||||
ports {
|
||||
internal = 8000
|
||||
external = var.backend_port
|
||||
}
|
||||
|
||||
volumes {
|
||||
host_path = "/var/log/enervision"
|
||||
container_path = "/var/log/enervision"
|
||||
}
|
||||
|
||||
depends_on = [docker_image.backend]
|
||||
}
|
||||
|
||||
resource "null_resource" "deploy_backend_to_server" {
|
||||
depends_on = [docker_image.backend]
|
||||
|
||||
triggers = {
|
||||
image_id = docker_image.backend.image_id
|
||||
}
|
||||
|
||||
connection {
|
||||
type = "ssh"
|
||||
host = var.ssh_host
|
||||
port = var.ssh_port
|
||||
user = var.ssh_user
|
||||
password = var.ssh_password
|
||||
private_key = try(file(pathexpand(var.ssh_private_key_path)), null)
|
||||
timeout = "5m"
|
||||
}
|
||||
|
||||
provisioner "file" {
|
||||
source = "${local.backend_dir}/Dockerfile"
|
||||
destination = "/tmp/Dockerfile"
|
||||
}
|
||||
provisioner "file" {
|
||||
source = "${local.backend_dir}/"
|
||||
destination = "/tmp/backend/"
|
||||
}
|
||||
|
||||
provisioner "remote-exec" {
|
||||
inline = [
|
||||
"cd /tmp/backend",
|
||||
"sudo docker stop ${local.backend_container_name} 2>/dev/null || true",
|
||||
"sudo docker rm ${local.backend_container_name} 2>/dev/null || true",
|
||||
"sudo docker build -t ${local.backend_image_name}:${local.backend_image_tag} .",
|
||||
"sudo docker run -d --name ${local.backend_container_name} -p ${var.backend_port}:8000 --restart always -v /var/log/enervision:/var/log/enervision ${local.backend_image_name}:${local.backend_image_tag}"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@@ -0,0 +1,145 @@
|
||||
locals {
|
||||
frontend_environments = {
|
||||
dev = {
|
||||
source_dir = "${path.root}/../../../../apps/frontend/dist/frontend/browser"
|
||||
domain = "dev.enervision"
|
||||
}
|
||||
}
|
||||
|
||||
frontend_dir = "../../../../apps/frontend"
|
||||
image_name = "enervision-front"
|
||||
image_tag = "latest"
|
||||
container_name = "enervision-frontend"
|
||||
|
||||
selected_frontend = local.frontend_environments[var.deployment_environment]
|
||||
}
|
||||
|
||||
provider "docker" {
|
||||
host = var.docker_host
|
||||
}
|
||||
|
||||
# Build le front
|
||||
resource "null_resource" "build_frontend" {
|
||||
triggers = {
|
||||
frontend_files = sha256(join("", [
|
||||
for file in fileset(local.frontend_dir, "src/**,package.json") :
|
||||
filesha256("${local.frontend_dir}/${file}")
|
||||
]))
|
||||
}
|
||||
|
||||
provisioner "local-exec" {
|
||||
command = "cd ${local.frontend_dir} && npm ci && chmod -R +x node_modules/@angular/cli/bin && chmod -R +x node_modules/.bin && npm exec ng build"
|
||||
}
|
||||
}
|
||||
|
||||
# Build l'image docker du front
|
||||
resource "docker_image" "frontend" {
|
||||
name = "${local.image_name}:${local.image_tag}"
|
||||
|
||||
build {
|
||||
context = local.frontend_dir
|
||||
dockerfile = "Dockerfile"
|
||||
}
|
||||
|
||||
triggers = {
|
||||
build_hash = sha256(join("", [
|
||||
for file in fileset(local.frontend_dir, "**") :
|
||||
filesha256("${local.frontend_dir}/${file}")
|
||||
]))
|
||||
}
|
||||
|
||||
depends_on = [null_resource.build_frontend]
|
||||
}
|
||||
|
||||
# Création du container Docker
|
||||
resource "docker_container" "frontend" {
|
||||
image = docker_image.frontend.image_id
|
||||
name = local.container_name
|
||||
|
||||
ports {
|
||||
internal = 3000
|
||||
external = var.frontend_port
|
||||
}
|
||||
|
||||
# Volume pour les logs
|
||||
volumes {
|
||||
host_path = "/var/log/enervision"
|
||||
container_path = "/var/log/nginx"
|
||||
}
|
||||
|
||||
depends_on = [docker_image.frontend]
|
||||
}
|
||||
|
||||
resource "null_resource" "create_network" {
|
||||
provisioner "remote-exec" {
|
||||
connection {
|
||||
type = "ssh"
|
||||
host = var.ssh_host
|
||||
port = var.ssh_port
|
||||
user = var.ssh_user
|
||||
password = var.ssh_password
|
||||
private_key = try(file(pathexpand(var.ssh_private_key_path)), null)
|
||||
timeout = "5m"
|
||||
}
|
||||
|
||||
inline = [
|
||||
"sudo docker network create enervision_default 2>/dev/null || true"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
# Déploiement du container sur le serveur via SSH
|
||||
resource "null_resource" "deploy_to_server" {
|
||||
depends_on = [docker_image.frontend]
|
||||
|
||||
triggers = {
|
||||
image_id = docker_image.frontend.image_id
|
||||
}
|
||||
|
||||
connection {
|
||||
type = "ssh"
|
||||
host = var.ssh_host
|
||||
port = var.ssh_port
|
||||
user = var.ssh_user
|
||||
password = var.ssh_password
|
||||
private_key = try(file(pathexpand(var.ssh_private_key_path)), null)
|
||||
timeout = "5m"
|
||||
}
|
||||
|
||||
# Copie le Dockerfile et nginx.conf
|
||||
provisioner "file" {
|
||||
source = "${local.frontend_dir}/Dockerfile"
|
||||
destination = "/tmp/Dockerfile"
|
||||
}
|
||||
|
||||
provisioner "file" {
|
||||
source = "${local.frontend_dir}/nginx.conf"
|
||||
destination = "/tmp/nginx.conf"
|
||||
}
|
||||
|
||||
# Copie les sources pour le build
|
||||
provisioner "file" {
|
||||
source = "${local.frontend_dir}/"
|
||||
destination = "/tmp/frontend/"
|
||||
}
|
||||
|
||||
# Build et lance le container sur le serveur
|
||||
provisioner "remote-exec" {
|
||||
inline = [
|
||||
"cd /tmp/frontend",
|
||||
"sudo docker stop ${local.container_name} 2>/dev/null || true",
|
||||
"sudo docker rm ${local.container_name} 2>/dev/null || true",
|
||||
"sudo docker build -t ${local.image_name}:${local.image_tag} .",
|
||||
"sudo docker run -d \\",
|
||||
" --name ${local.container_name} \\",
|
||||
" --network enervision_default \\",
|
||||
" --network-alias frontend \\",
|
||||
" -p ${var.frontend_port}:3000 \\",
|
||||
" --restart always \\",
|
||||
" -v /var/log/enervision:/var/log/nginx \\",
|
||||
" ${local.image_name}:${local.image_tag}"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@@ -0,0 +1,28 @@
|
||||
module "k3s" {
|
||||
source = "../../modules/k3s"
|
||||
|
||||
ssh_host = var.ssh_host
|
||||
ssh_port = var.ssh_port
|
||||
ssh_user = var.ssh_user
|
||||
ssh_private_key_path = var.ssh_private_key_path
|
||||
ssh_password = var.ssh_password
|
||||
k3s_version = var.k3s_version
|
||||
k3s_disable_components = var.k3s_disable_components
|
||||
kubeconfig_output_path = var.kubeconfig_output_path
|
||||
}
|
||||
|
||||
provider "vault" {
|
||||
# Adresse du serveur Vault (dev)
|
||||
address = "https://10.101.200.37:8200"
|
||||
|
||||
# Auth par userpass
|
||||
auth_login {
|
||||
path = "auth/userpass/login/${var.vault_username}"
|
||||
parameters = {
|
||||
login = var.vault_username
|
||||
password = var.vault_password
|
||||
}
|
||||
}
|
||||
# Skip verify pour dev uniquement (pas en prod!)
|
||||
# skip_client_verification = true
|
||||
}
|
||||
@@ -0,0 +1,9 @@
|
||||
output "kubeconfig_path" {
|
||||
description = "Chemin local du kubeconfig recupere apres installation."
|
||||
value = module.k3s.kubeconfig_path
|
||||
}
|
||||
|
||||
output "node_host" {
|
||||
description = "Adresse du serveur sur lequel k3s est installe."
|
||||
value = module.k3s.node_host
|
||||
}
|
||||
@@ -0,0 +1,8 @@
|
||||
ssh_host = "10.0.0.10"
|
||||
ssh_port = 22
|
||||
ssh_user = "root"
|
||||
ssh_private_key_path = "~/.ssh/id_ed25519_enervision"
|
||||
# Epingler une version reelle avant apply : https://github.com/k3s-io/k3s/releases
|
||||
k3s_version = "v1.31.5+k3s1"
|
||||
k3s_disable_components = ["traefik"]
|
||||
kubeconfig_output_path = "./kubeconfig"
|
||||
@@ -0,0 +1,90 @@
|
||||
variable "ssh_host" {
|
||||
type = string
|
||||
description = "Adresse IP ou nom d'hote du serveur on-premise de l'ecole."
|
||||
}
|
||||
|
||||
variable "ssh_port" {
|
||||
type = number
|
||||
description = "Port SSH du serveur."
|
||||
default = 22
|
||||
}
|
||||
|
||||
variable "ssh_user" {
|
||||
type = string
|
||||
description = "Utilisateur SSH utilise pour l'installation."
|
||||
default = "root"
|
||||
}
|
||||
|
||||
variable "ssh_private_key_path" {
|
||||
type = string
|
||||
description = "Chemin local vers la cle privee SSH."
|
||||
sensitive = true
|
||||
}
|
||||
|
||||
variable "ssh_password" {
|
||||
type = string
|
||||
sensitive = true
|
||||
}
|
||||
|
||||
variable "remote_path" {
|
||||
type = string
|
||||
description = "Chemin distant sur le serveur pour le deploiement."
|
||||
default = "/var/www/enervision"
|
||||
}
|
||||
|
||||
variable "docker_host" {
|
||||
type = string
|
||||
default = "npipe:////.//pipe//docker_engine"
|
||||
description = "Host Docker (local ou distant)"
|
||||
}
|
||||
|
||||
variable "frontend_port" {
|
||||
type = number
|
||||
default = 3000
|
||||
description = "Port externe du frontend"
|
||||
}
|
||||
|
||||
variable "backend_port" {
|
||||
type = number
|
||||
default = 8000
|
||||
description = "Port externe du backend"
|
||||
}
|
||||
|
||||
variable "k3s_version" {
|
||||
type = string
|
||||
description = "Version k3s a epingler pour un deploiement reproductible (ex: v1.31.5+k3s1). Voir https://github.com/k3s-io/k3s/releases."
|
||||
}
|
||||
|
||||
variable "k3s_disable_components" {
|
||||
type = list(string)
|
||||
description = "Composants embarques k3s a desactiver."
|
||||
default = ["traefik"]
|
||||
}
|
||||
|
||||
variable "kubeconfig_output_path" {
|
||||
type = string
|
||||
description = "Chemin local ou ecrire le kubeconfig recupere apres installation."
|
||||
default = "./kubeconfig"
|
||||
}
|
||||
|
||||
variable "deployment_environment" {
|
||||
type = string
|
||||
default = "dev"
|
||||
|
||||
validation {
|
||||
condition = contains(["dev", "rec", "prod"], var.deployment_environment)
|
||||
error_message = "L'environnement doit être dev, rec ou prod."
|
||||
}
|
||||
}
|
||||
|
||||
variable "vault_username" {
|
||||
description = "Username Vault"
|
||||
type = string
|
||||
sensitive = false
|
||||
}
|
||||
|
||||
variable "vault_password" {
|
||||
description = "Password Vault"
|
||||
type = string
|
||||
sensitive = true
|
||||
}
|
||||
@@ -0,0 +1,14 @@
|
||||
terraform {
|
||||
required_version = ">= 1.7"
|
||||
|
||||
required_providers {
|
||||
null = {
|
||||
source = "hashicorp/null"
|
||||
version = "~> 3.2"
|
||||
}
|
||||
}
|
||||
|
||||
backend "local" {
|
||||
path = "terraform.tfstate"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user