Merge branch 'develop'

Author: codejsha

.gitignore

@@ -7,6 +7,7 @@
 .terraform/
 .terraform.lock.hcl
 *.tfstate
+*.tfstate.*
 
 ### python
 __pycache__/

cert-manager/all.sh

@@ -9,6 +9,6 @@ kubectl cert-manager inspect secret minio1-cert
 
 ######################################################################
 
-### debuggging
+### debug
 
 kubectl get endpoints -n cert-manager my-cert-manager-webhook

cert-manager/cert-manager-commands.sh

@@ -0,0 +1,31 @@
+provider "kubernetes" {
+  config_path = "~/.kube/config"
+}
+
+provider "helm" {
+  kubernetes {
+    config_path = "~/.kube/config"
+  }
+}
+
+resource "kubernetes_namespace" "cert_manager" {
+  metadata {
+    name = "cert-manager"
+    labels = {
+      "istio-injection" = "enabled"
+    }
+  }
+}
+
+resource "helm_release" "cert_manager" {
+  name       = "cert-manager"
+  repository = "https://charts.jetstack.io"
+  chart      = "cert-manager"
+  version    = "v1.16.1"
+  set {
+    name  = "crds.enabled"
+    value = true
+  }
+  namespace = kubernetes_namespace.cert_manager.metadata.0.name
+  depends_on = [kubernetes_namespace.cert_manager]
+}

cert-manager/cert-manager-namespace.yaml

@@ -0,0 +1,11 @@
+provider "kubernetes" {
+  config_path = "~/.kube/config"
+}
+
+resource "kubernetes_manifest" "selfsigned_cluster_issuer" {
+  manifest = yamldecode(file("${path.module}/selfsigned-cluster-issuer.yaml"))
+}
+
+# resource "kubernetes_manifest" "selfsigned_issuer" {
+#   manifest = yamldecode(file("${path.module}/selfsigned-issuer.yaml"))
+# }

cert-manager/helm/cert-manager.tf

@@ -1,4 +1,3 @@
----
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:

cert-manager/helm/helm-install-cert-manager.sh

@@ -1,7 +1,7 @@
----
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
   name: selfsigned-issuer
+  # namespace: default
 spec:
   selfSigned: {}

cert-manager/issuer/cert-manager-issuer.tf

@@ -0,0 +1,47 @@
+---
+apiVersion: networking.istio.io/v1
+kind: Gateway
+metadata:
+  name: jenkins-gw
+  namespace: jenkins
+spec:
+  selector:
+    istio: ingressgateway
+  servers:
+    - port:
+        number: 80
+        name: http
+        protocol: HTTP
+      hosts:
+        - jenkins.example.com
+---
+apiVersion: networking.istio.io/v1
+kind: VirtualService
+metadata:
+  name: jenkins-vs
+  namespace: jenkins
+spec:
+  hosts:
+    - jenkins.example.com
+  gateways:
+    - jenkins-gw
+  http:
+    - match:
+        - uri:
+            prefix: /
+      route:
+        - destination:
+            host: jenkins.jenkins.svc.cluster.local
+            port:
+              number: 8080
+---
+apiVersion: networking.istio.io/v1
+kind: DestinationRule
+metadata:
+  name: jenkins-dr
+  namespace: jenkins
+spec:
+  host: jenkins.jenkins.svc.cluster.local
+  trafficPolicy:
+    loadBalancer:
+      simple: ROUND_ROBIN

cert-manager/issuer/selfsigned-cluster-issuer.yaml

@@ -1,21 +1,34 @@
+provider "kubernetes" {
+  config_path = "~/.kube/config"
+}
+
 provider "helm" {
   kubernetes {
     config_path = "~/.kube/config"
   }
 }
 
+resource "kubernetes_namespace" "jenkins" {
+  metadata {
+    name = "jenkins"
+    labels = {
+      "istio-injection" = "enabled"
+    }
+  }
+}
+
 resource "helm_release" "jenkins" {
   name       = "jenkins"
-  namespace  = "jenkins"
-  create_namespace = true
   repository = "https://charts.jenkins.io"
   chart      = "jenkins"
   version    = "5.7.12"
   values = [
-    file("values.yaml")
+    file("${path.module}/values.yaml")
   ]
   set {
-    name = "controller.admin.password"
+    name  = "controller.admin.password"
     value = "admin"
   }
+  namespace = kubernetes_namespace.jenkins.metadata.0.name
+  depends_on = [kubernetes_namespace.jenkins]
 }

cert-manager/issuer/selfsigned-issuer.yaml

@@ -0,0 +1,14 @@
+# hostctl
+
+## Install
+
+### Homebrew
+
+```sh
+brew install guumaster/tap/hostctl
+```
+
+## References
+
+- hostctl website: <https://guumaster.github.io/hostctl/>
+- hostctl github: <https://github.com/guumaster/hostctl>

jenkins/helm/jenkins-istio.yaml

@@ -0,0 +1,15 @@
+######################################################################
+
+hostctl list
+### +---------+--------+-----------------+---------------------+
+### | PROFILE | STATUS |       IP        |       DOMAIN        |
+### +---------+--------+-----------------+---------------------+
+### | default | on     | 127.0.0.1       | localhost           |
+### | default | on     | 255.255.255.255 | broadcasthost       |
+### | default | on     | ::1             | localhost           |
+### +---------+--------+-----------------+---------------------+
+
+######################################################################
+
+hostctl add k8s < k8s.hosts
+hostctl replace k8s < k8s.hosts

jenkins/helm/jenkins.tf

@@ -0,0 +1 @@
+127.0.0.1 jenkins.example.com