Implement Terraform Runner about tf-controller HOT 6 CLOSED

I'll get the first version of POC out. We can then discuss and move it forward.

from tf-controller.

@chanwit Looks alright to me.

from tf-controller.

Couple of additional thoughts on this:

• Will we aim to support persistence for the Terraform Runner Pod? This would be required for caching providers etc... Introduces a little complexity as may require a TerraformStatefulRunner in addition to an (ephemeral/one-shot) TerraformRunner.
• Is it our intention to handle TLS generation/rotation within the controller code a la Gatekeeper or can we offload this to cert-manager? It may reduce the initial effort if cert-manager can handle it.
• How is reconcile state distributed between controller & runner, i.e. what does .status.conditions look like for the runner? This has knock on implications for how we handle communication and trigger the reconcile loop in tf-controller. I think communicating via status conditions should be the preferred route but it might also be possible to do something similar to flux/notification controller using a gRPC call.

from tf-controller.

Will we aim to support persistence for the Terraform Runner Pod? This would be required for caching providers etc... Introduces a little complexity as may require a TerraformStatefulRunner in addition to an (ephemeral/one-shot) TerraformRunner.

This is a good question. I'm thinking of it as a stateless system. Runner Pod is a gRPC server which allows to crash.

Is it our intention to handle TLS generation/rotation

We'll do our own TLS generation, yes. A goal is to make the controller self-contained

How is reconcile state distributed between controller & runner

Reconciliation process happens only inside the controller using the current set of logics.
Runner Pod will be issued a command, and send output back to the Controller, via gRPC, just like we run that command locally.

from tf-controller.

@phoban01 would you like to further split this epic into other issues?

from tf-controller.

Work done enough to close this issue. We'll fix other related issues along the way.

from tf-controller.