public

.github/workflows/main.yml

@@ -0,0 +1,55 @@
+name: 'Deployment terraform plan and apply'
+
+on:
+  push:
+    branches:
+      - main
+      - after-hours
+
+permissions:
+  contents: read
+
+jobs:
+  terraform:
+    name: Terraform fmt, init, plan and apply
+    runs-on: ubuntu-latest
+    environment: production
+
+    defaults:
+      run:
+        shell: bash
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Setup Terraform
+      uses: hashicorp/setup-terraform@v2
+      with:
+        cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
+
+    - name: Terraform Format
+      id: fmt
+      run: terraform fmt
+      working-directory: terraform
+      continue-on-error: false
+
+    - name: Terraform Init
+      id: init
+      working-directory: terraform
+      run: terraform init
+
+    - name: Terraform Validate
+      id: validate
+      working-directory: terraform
+      run: terraform validate -no-color
+
+    - name: Terraform Plan
+      id: plan
+      working-directory: terraform
+      run: terraform plan -no-color
+      continue-on-error: false
+
+    - name: Terraform Apply
+      working-directory: terraform
+      run: terraform apply -auto-approve -input=false

.gitignore

@@ -0,0 +1,37 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version 
+# control as they are data points which are potentially sensitive and subject 
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+
+## External DNS configuration
+kubernetes/secrets

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "ansible.python.interpreterPath": "/bin/python"
+}