generated from ModusCreateOrg/template
-
Notifications
You must be signed in to change notification settings - Fork 6
91 lines (70 loc) · 3.09 KB
/
azure_terraform.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
name: Azure Terraform
on:
[push, pull_request, workflow_dispatch]
jobs:
terraform:
name: Azure Terraform
runs-on: ubuntu-latest
defaults:
run:
working-directory: azure_poc_01/terraform/deployments/demo
env:
ARM_CLIENT_ID: ${{ secrets.AZURE_AD_CLIENT_ID }}
ARM_CLIENT_SECRET: ${{ secrets.AZURE_AD_CLIENT_SECRET }}
ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
ARM_TENANT_ID: ${{ secrets.AZURE_AD_TENANT_ID }}
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Setup Terraform
uses: hashicorp/setup-terraform@v1
with:
terraform_version: 1.1.4
- name: Show Terraform version
id: version
run: terraform --version
- name: Terraform Format
id: format
run: terraform fmt -check
- name: Terraform init
id: init
run: terraform init -input=false
- name: Terraform validation
id: validation
run: terraform validate
- name: Terraform plan
id: plan
run: terraform plan
continue-on-error: true
- name: Terraform plan status
if: steps.plan.outcome == 'failure'
run: exit 1
- name: Run Checkov
id: checkov
uses: bridgecrewio/checkov-action@master
with:
directory: azure_poc_01/
- name: Terraform apply
# if: github.ref == 'refs/heads/main' && github.event_name == 'push'
run: terraform apply -auto-approve
# - name: Install AZ client
# run: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
- name: Login at Azure and get credentials to access the AKS
run: |
az login --service-principal --username ${{ secrets.AZURE_AD_CLIENT_ID }} --password ${{ secrets.AZURE_AD_CLIENT_SECRET }} --tenant ${{ secrets.AZURE_AD_TENANT_ID }}
az aks get-credentials --resource-group poc-rg-us-dev --name poc-aks-01-us-dev --overwrite-existing
- name: Create namespace called infrastructure (does not return error if it already exists)
run: kubectl create namespace infrastructure --dry-run=client -o yaml | kubectl apply -f -
- name: Use HELM to install NGINX Ingress controller
run: |
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm upgrade --install nginx-ingress ingress-nginx/ingress-nginx --namespace infrastructure -f ../../../aks_manifests/httpd-port-80/internal-ingress.yml --set controller.replicaCount=2
- name: Wait until NGINX is not ready
run: kubectl wait --namespace infrastructure --for=condition=ready pod --selector=app.kubernetes.io/component=controller --timeout=600s
- name: Create namespace called app01 (does not return error if it already exists)
run: kubectl create namespace app01 --dry-run=client -o yaml | kubectl apply -f -
- name: Deploy httpd image at AKS
run: |
kubectl apply -f ../../../aks_manifests/httpd-port-80/deployment.yml --wait=true
kubectl apply -f ../../../aks_manifests/httpd-port-80/service.yml --wait=true
kubectl apply -f ../../../aks_manifests/httpd-port-80/ingress.yml --wait=true