Git Product home page Git Product logo

terraform-google-cloud-deploy's Introduction

Cloud Deploy terraform module

This module is used to create Google Cloud Deploy delivery pipelines, targets and their respective service accounts.

Prerequisites

This example needs below mentioned prerequisites are in place before consuming the example.

Target GKE clusters should be operational

Edit the Organization Policy "iam.disableCrossProjectServiceAccountUsage" to "not enforce" in all the target project in case deployment service accounts are created in different projects.

Cloud deploy manifests file repo should be connected in cloud builds trigger section

VPC and VPN creation (https://cloud.google.com/architecture/accessing-private-gke-clusters-with-cloud-build-private-pools) for private clusters

The service accounts and targets are unique across delivery pipeline.

Sample Usage:

module "cloud_deploy" {
    source = "terraform-google-modules/cloud-deploy/google"

    pipeline_name                = "google-pipeline-same-gke-1"
    location                     = "us-central1"
    project                      = "gdc-clouddeploy-source"
    stage_targets = [{
      target                            = "google-test-1"
      profiles                          = ["test"]
      gke                               = "projects/gdc-clouddeploy-source/locations/us-central1-c/clusters/cluster-1"
      gke_cluster_sa                    = ["[email protected]"]
      artifact_storage                  = null
      require_approval                  = false
      execution_configs_service_account = "deployment-test-1-google"
      worker_pool                       = null
      }, {
      target                            = "google-prod-1"
      profiles                          = ["prod"]
      gke                               = "projects/gdc-clouddeploy-source/locations/us-central1-c/clusters/cluster-1"
      gke_cluster_sa                    = ["[email protected]"]
      artifact_storage                  = null
      require_approval                  = true
      execution_configs_service_account = "deployment-prod-1-google"
      worker_pool                       = null
    }]
    cloud_trigger_sa = "cd-trigger-1"
}

Inputs

Name Description Type Default Required
cloud_trigger_sa Name of the Trigger service account string n/a yes
location Location of the Pipeline string n/a yes
pipeline_name Name of the Delivery Pipeline string n/a yes
project Project Name string n/a yes
stage_targets List of object specifications for Deploy Targets 
list(object({
    target                            = string
    profiles                          = list(string)
    gke                               = string
    gke_internal_ip_only              = bool
    gke_cluster_sa                    = list(string)
    artifact_storage                  = string
    require_approval                  = bool
    execution_configs_service_account = string
    worker_pool                       = string
  }))
 n/a yes

Outputs

Name Description
cloud_trigger_sa List of Cloud Build Trigger Service Account
delivery_pipeline_and_target List of Delivery Pipeline and respective Target
delivery_pipeline_id An identifier for the resource with format projects/{{project}}/locations/{{location}}/deliveryPipelines/{{name}}
deployment_sa List of Deploy target Execution Service Account

Requirements

These sections describe requirements for using this example.

Software

The following dependencies must be available:

  • Terraform ~> v0.13+
  • Terraform Provider for GCP ~> v3.53+
  • Terraform Provider for GCP Beta ~> v3.53+

Service Account:

Add yourself to service account user roles for the created service account.

APIs

Enable below api's

  • "clouddeploy.googleapis.com"
  • "container.googleapis.com".

Contributing

Refer to the contribution guidelines for information on contributing to this module.

Security Disclosures

Please see our security disclosure process.

terraform-google-cloud-deploy's People

Contributors

cloud-foundation-bot avatar gtsorbo avatar jsnortal avatar niranjankl avatar release-please[bot] avatar renovate-bot avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.