ITQ/yandexcloud-k3s
1
0
Fork 0
mirror of https://github.com/devitq/yandexcloud-k3s.git synced 2026-09-20 19:20:38 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore(terraform): refactored configuration

Browse Source
This commit is contained in:
ITQ
2025-10-31 15:12:35 +03:00
parent 8351a2c667
commit 804444ab74
18 changed files with 143 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files
main/.env.template
+2 -1
View File
@@ -9,7 +9,8 @@ YC_FOLDER_ID=
TF_VAR_cloud_id= TF_VAR_cloud_id=
TF_VAR_folder_id= TF_VAR_folder_id=
TF_VAR_domain= TF_VAR_domain=
TF_VAR_ssh_public_key_path= TF_VAR_frontend_domain=
TF_VAR_frontend_develop_domain=
AWS_BUCKET= AWS_BUCKET=
AWS_BUCKET_KEY= AWS_BUCKET_KEY=
main/api_gateway.tf
+3 -3
View File
@@ -8,14 +8,14 @@ resource "yandex_api_gateway" "frontend" {
} }
custom_domains { custom_domains {
fqdn = var.domain fqdn = local.final_frontend_domain
certificate_id = yandex_cm_certificate.default.id certificate_id = yandex_cm_certificate.default.id
} }
log_options { log_options {
log_group_id = yandex_logging_group.default.id log_group_id = yandex_logging_group.api_gateway.id
min_level = "INFO" min_level = "INFO"
} }
spec = data.template_file.api_gateway_spec.rendered spec = data.template_file.frontend_api_gateway_spec.rendered
} }
main/certificate.tf
+1 -1
View File
@@ -1,5 +1,5 @@
resource "yandex_cm_certificate" "default" { resource "yandex_cm_certificate" "default" {
name = "default" name = replace(lower(var.domain), ".", "-")
description = "Default certificate for all resources" description = "Default certificate for all resources"
deletion_protection = true deletion_protection = true
main/configs/api_gateway/spec.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ paths:
http_headers: http_headers:
"Content-Type": "application/json" "Content-Type": "application/json"
content: content:
"*": '{"backend_url": "https://backend.interview.yandex.itqdev.xyz"}' "*": '{"backend_url": "https://some.backend.example.com"}'
responses: responses:
"200": "200":
description: Config returned. description: Config returned.
main/configs/cloud_init/main_master.yaml
+2
View File
@@ -41,10 +41,12 @@ runcmd:
fi fi
echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab
mount -a mount -a
resize2fs $DISK
- | - |
curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="server \ curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="server \
--cluster-init \ --cluster-init \
--token=${k3s_token} \ --token=${k3s_token} \
--node-name=`hostname -f` \
--node-taint CriticalAddonsOnly=true:NoExecute \ --node-taint CriticalAddonsOnly=true:NoExecute \
--write-kubeconfig ${k3s_dir}/kubeconfig/config \ --write-kubeconfig ${k3s_dir}/kubeconfig/config \
--image-credential-provider-bin-dir /var/lib/rancher/credentialprovider/bin \ --image-credential-provider-bin-dir /var/lib/rancher/credentialprovider/bin \
main/configs/cloud_init/master.yaml
+1
View File
@@ -41,6 +41,7 @@ runcmd:
fi fi
echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab
mount -a mount -a
resize2fs $DISK
- | - |
curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="server \ curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="server \
--server=https://${k3s_master_ip}:6443 \ --server=https://${k3s_master_ip}:6443 \
main/configs/cloud_init/worker.yaml
+1
View File
@@ -41,6 +41,7 @@ runcmd:
fi fi
echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab echo "$DISK $K3S_DIR ext4 defaults 0 0" >> /etc/fstab
mount -a mount -a
resize2fs $DISK
- | - |
curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="agent \ curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="agent \
--server=https://${k3s_master_ip}:6443 \ --server=https://${k3s_master_ip}:6443 \
main/disk.tf
+3 -15
View File
@@ -1,6 +1,6 @@
resource "yandex_compute_disk" "master_disk" { resource "yandex_compute_disk" "k8s_main_master_disk" {
name = "master_disk" name = "k8s_main_master_disk"
description = "Disk for master persistent storage" description = "Disk for K8S main master persistent storage"
zone = "ru-central1-d" zone = "ru-central1-d"
size = 10 size = 10
@@ -9,15 +9,3 @@ resource "yandex_compute_disk" "master_disk" {
allow_recreate = false allow_recreate = false
} }
resource "yandex_compute_disk" "worker_minecraft_disk" {
name = "worker_minecraft_disk"
description = "Disk for worker persistent storage"
zone = "ru-central1-d"
size = 20
type = "network-ssd"
block_size = 4096
allow_recreate = false
}
main/iam.tf
+9 -9
View File
@@ -29,29 +29,29 @@ resource "yandex_iam_service_account_iam_binding" "instance_group_vm_sa_admin" {
] ]
} }
resource "yandex_iam_service_account" "master_vm_sa" { resource "yandex_iam_service_account" "k8s_main_master_vm_sa" {
name = "master-vm-sa" name = "k8s-master-vm-sa"
description = "Service account for master vm" description = "Service account for master vm"
} }
resource "yandex_compute_instance_iam_binding" "master_vm_sa_editor" { resource "yandex_compute_instance_iam_binding" "k8s_main_master_vm_sa_editor" {
instance_id = yandex_compute_instance.master.id instance_id = yandex_compute_instance.k8s_main_master.id
role = "editor" role = "editor"
members = [ members = [
"serviceAccount:${yandex_iam_service_account.master_vm_sa.id}" "serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
] ]
} }
resource "yandex_resourcemanager_folder_iam_member" "master_vm_sa_viewer" { resource "yandex_resourcemanager_folder_iam_member" "k8s_main_master_vm_sa_viewer" {
folder_id = var.folder_id folder_id = var.folder_id
role = "compute.viewer" role = "compute.viewer"
member = "serviceAccount:${yandex_iam_service_account.master_vm_sa.id}" member = "serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
} }
resource "yandex_resourcemanager_folder_iam_member" "master_vm_sa_oslogin" { resource "yandex_resourcemanager_folder_iam_member" "k8s_main_master_vm_sa_oslogin" {
folder_id = var.folder_id folder_id = var.folder_id
role = "compute.osAdminLogin" role = "compute.osAdminLogin"
member = "serviceAccount:${yandex_iam_service_account.master_vm_sa.id}" member = "serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
} }
resource "yandex_iam_service_account" "registry_push_sa" { resource "yandex_iam_service_account" "registry_push_sa" {
main/instance.tf
+9 -79
View File
@@ -1,10 +1,10 @@
resource "yandex_compute_instance" "master" { resource "yandex_compute_instance" "k8s_main_master" {
name = "master" name = "k8s-master"
hostname = "master" hostname = local.k8s_main_master_fqdn
description = "Salt, ansible and kubernetes master, provisions other nodes" description = "Salt, ansible and kubernetes master, provisions other nodes"
platform_id = "standard-v3" platform_id = "standard-v3"
zone = "ru-central1-d" zone = "ru-central1-d"
service_account_id = yandex_iam_service_account.master_vm_sa.id service_account_id = yandex_iam_service_account.k8s_main_master_vm_sa.id
allow_recreate = true allow_recreate = true
allow_stopping_for_update = true allow_stopping_for_update = true
@@ -24,7 +24,7 @@ resource "yandex_compute_instance" "master" {
boot_disk { boot_disk {
initialize_params { initialize_params {
image_id = data.yandex_compute_image.ubuntu_2404.id image_id = data.yandex_compute_image.ubuntu_2404.id
description = "Boot disk for master" description = "Boot disk for K8S main master"
block_size = 4096 block_size = 4096
size = 10 size = 10
type = "network-hdd" type = "network-hdd"
@@ -34,7 +34,7 @@ resource "yandex_compute_instance" "master" {
} }
secondary_disk { secondary_disk {
disk_id = yandex_compute_disk.master_disk.id disk_id = yandex_compute_disk.k8s_main_master_disk.id
device_name = "data" device_name = "data"
mode = "READ_WRITE" mode = "READ_WRITE"
auto_delete = false auto_delete = false
@@ -42,11 +42,11 @@ resource "yandex_compute_instance" "master" {
network_interface { network_interface {
subnet_id = yandex_vpc_subnet.default_ru_central1_d.id subnet_id = yandex_vpc_subnet.default_ru_central1_d.id
ip_address = local.master_ip ip_address = local.k8s_main_master_ip
ipv4 = true ipv4 = true
nat = true nat = true
dns_record { dns_record {
fqdn = local.master_fqdn fqdn = "${local.k8s_main_master_fqdn}."
ptr = true ptr = true
ttl = 10 ttl = 10
} }
@@ -57,7 +57,7 @@ resource "yandex_compute_instance" "master" {
enable-oslogin = true enable-oslogin = true
serial-port-enable = 1 serial-port-enable = 1
install-unified-agent = 0 install-unified-agent = 0
user-data = data.template_file.main_master_cloud_init.rendered user-data = data.template_file.k8s_main_master_cloud_init.rendered
} }
metadata_options { metadata_options {
@@ -71,73 +71,3 @@ resource "yandex_compute_instance" "master" {
placement_group_partition = 0 placement_group_partition = 0
} }
} }
resource "yandex_compute_instance" "worker-minecraft" {
name = "worker-minecraft"
hostname = "worker-minecraft.internal"
description = "Worker node for Kubernetes cluster"
labels = {
"kubernetes" = "worker"
"role" = "worker"
"salt" = "minion"
}
service_account_id = yandex_iam_service_account.instance_group_vm_sa.id
platform_id = "standard-v3"
zone = "ru-central1-d"
resources {
core_fraction = 100
cores = 2
gpus = 0
memory = 8
}
boot_disk {
initialize_params {
image_id = data.yandex_compute_image.ubuntu_2404.id
description = "Boot disk"
size = 10
type = "network-hdd"
}
mode = "READ_WRITE"
}
secondary_disk {
disk_id = yandex_compute_disk.worker_minecraft_disk.id
device_name = "data"
mode = "READ_WRITE"
auto_delete = false
}
network_interface {
subnet_id = yandex_vpc_subnet.default_ru_central1_d.id
ipv4 = true
nat = false
}
network_acceleration_type = "standard"
metadata = {
enable-oslogin = true
serial-port-enable = 1
install-unified-agent = 0
user-data = data.template_file.worker_cloud_init.rendered
}
metadata_options {
aws_v1_http_endpoint = 1
aws_v1_http_token = 2
gce_http_endpoint = 1
gce_http_token = 1
}
placement_policy {
host_affinity_rules = []
placement_group_partition = 0
}
depends_on = [
yandex_compute_instance.master,
yandex_iam_service_account.instance_group_vm_sa
]
}
main/instance_group.tf
+17 -16
View File
@@ -1,5 +1,5 @@
resource "yandex_compute_instance_group" "master" { resource "yandex_compute_instance_group" "k8s_master" {
name = "master" name = "k8s-master"
description = "Masters instance group for Kubernetes cluster" description = "Masters instance group for Kubernetes cluster"
service_account_id = yandex_iam_service_account.instance_group_sa.id service_account_id = yandex_iam_service_account.instance_group_sa.id
deletion_protection = true deletion_protection = true
@@ -9,8 +9,8 @@ resource "yandex_compute_instance_group" "master" {
} }
instance_template { instance_template {
name = "master-{instance.index_in_zone}-{instance.zone_id}" name = "k8s-master-{instance.index_in_zone}-{instance.zone_id}"
hostname = "master-{instance.index_in_zone}.{instance.zone_id}" hostname = "master-{instance.index_in_zone}.{instance.zone_id}.k8s.internal"
labels = { labels = {
"instance-group" = "master" "instance-group" = "master"
"kubernetes" = "control-plane" "kubernetes" = "control-plane"
@@ -28,7 +28,8 @@ resource "yandex_compute_instance_group" "master" {
boot_disk { boot_disk {
initialize_params { initialize_params {
image_id = data.yandex_compute_image.ubuntu_2404.id # image_id = data.yandex_compute_image.ubuntu_2404.id
image_id = "f2enm07snmcg7jhhcgst"
description = "Boot disk" description = "Boot disk"
size = 10 size = 10
type = "network-hdd" type = "network-hdd"
@@ -68,7 +69,7 @@ resource "yandex_compute_instance_group" "master" {
enable-oslogin = true enable-oslogin = true
serial-port-enable = 1 serial-port-enable = 1
install-unified-agent = 0 install-unified-agent = 0
user-data = data.template_file.master_cloud_init.rendered user-data = data.template_file.k8s_master_cloud_init.rendered
} }
} }
@@ -90,7 +91,7 @@ resource "yandex_compute_instance_group" "master" {
} }
load_balancer { load_balancer {
target_group_name = "master-instance-group" target_group_name = "k8s-master-instance-group"
target_group_description = "Load balancer target group for k8s masters" target_group_description = "Load balancer target group for k8s masters"
max_opening_traffic_duration = 600 max_opening_traffic_duration = 600
ignore_health_checks = true ignore_health_checks = true
@@ -108,15 +109,15 @@ resource "yandex_compute_instance_group" "master" {
max_checking_health_duration = 600 max_checking_health_duration = 600
depends_on = [ depends_on = [
yandex_compute_instance.master, yandex_compute_instance.k8s_main_master,
yandex_iam_service_account.instance_group_sa, yandex_iam_service_account.instance_group_sa,
yandex_resourcemanager_folder_iam_member.instance_group_sa_compute_editor, yandex_resourcemanager_folder_iam_member.instance_group_sa_compute_editor,
yandex_resourcemanager_folder_iam_member.instance_group_sa_lb_editor yandex_resourcemanager_folder_iam_member.instance_group_sa_lb_editor
] ]
} }
resource "yandex_compute_instance_group" "worker" { resource "yandex_compute_instance_group" "k8s_worker" {
name = "worker" name = "k8s-worker"
description = "Workers instance group for Kubernetes cluster" description = "Workers instance group for Kubernetes cluster"
service_account_id = yandex_iam_service_account.instance_group_sa.id service_account_id = yandex_iam_service_account.instance_group_sa.id
deletion_protection = true deletion_protection = true
@@ -126,8 +127,8 @@ resource "yandex_compute_instance_group" "worker" {
} }
instance_template { instance_template {
name = "worker-{instance.index_in_zone}-{instance.zone_id}" name = "k8s-worker-{instance.index_in_zone}-{instance.zone_id}"
hostname = "worker-{instance.index_in_zone}.{instance.zone_id}.internal" hostname = "worker-{instance.index_in_zone}.{instance.zone_id}.k8s.internal"
labels = { labels = {
"instance-group" = "worker" "instance-group" = "worker"
"kubernetes" = "worker" "kubernetes" = "worker"
@@ -185,13 +186,13 @@ resource "yandex_compute_instance_group" "worker" {
enable-oslogin = true enable-oslogin = true
serial-port-enable = 1 serial-port-enable = 1
install-unified-agent = 0 install-unified-agent = 0
user-data = data.template_file.worker_cloud_init.rendered user-data = data.template_file.k8s_worker_cloud_init.rendered
} }
} }
scale_policy { scale_policy {
fixed_scale { fixed_scale {
size = 0 size = 1
} }
} }
allocation_policy { allocation_policy {
@@ -207,7 +208,7 @@ resource "yandex_compute_instance_group" "worker" {
} }
load_balancer { load_balancer {
target_group_name = "worker-instance-group" target_group_name = "k8s-worker-instance-group"
target_group_description = "Load balancer target group for k8s workers" target_group_description = "Load balancer target group for k8s workers"
max_opening_traffic_duration = 600 max_opening_traffic_duration = 600
ignore_health_checks = true ignore_health_checks = true
@@ -225,7 +226,7 @@ resource "yandex_compute_instance_group" "worker" {
max_checking_health_duration = 600 max_checking_health_duration = 600
depends_on = [ depends_on = [
yandex_compute_instance.master, yandex_compute_instance.k8s_main_master,
yandex_iam_service_account.instance_group_sa, yandex_iam_service_account.instance_group_sa,
yandex_resourcemanager_folder_iam_member.instance_group_sa_compute_editor, yandex_resourcemanager_folder_iam_member.instance_group_sa_compute_editor,
yandex_resourcemanager_folder_iam_member.instance_group_sa_lb_editor yandex_resourcemanager_folder_iam_member.instance_group_sa_lb_editor
main/loadbalancer.tf
+62 -26
View File
@@ -1,36 +1,72 @@
# resource "yandex_lb_network_load_balancer" "instance_group_lb" { resource "yandex_lb_network_load_balancer" "k8s_lb" {
# name = "instance-group-lb" name = "k8s-lb"
# allow_zonal_shift = true allow_zonal_shift = true
# deletion_protection = true deletion_protection = true
# listener { listener {
# name = "test" name = "kubeapi"
# port = 8080 port = 6443
# external_address_spec { external_address_spec {
# # address = yandex_vpc_address.default.external_ipv4_address[0].address address = yandex_vpc_address.nlb.external_ipv4_address[0].address
# ip_version = "ipv4" ip_version = "ipv4"
# } }
# } }
# attached_target_group { attached_target_group {
# target_group_id = yandex_compute_instance_group.default.load_balancer[0].target_group_id target_group_id = yandex_lb_target_group.k8s_main_master.id
# healthcheck { // Verifies that Traefik daeomnset has started on node
# name = "http" healthcheck {
# http_options { name = "main-master-traefik"
# port = 8080 healthy_threshold = 2
# path = "/ping" unhealthy_threshold = 2
# } interval = 5
# } timeout = 4
# } tcp_options {
# } port = 80
}
}
}
resource "yandex_lb_target_group" "main_master" { attached_target_group {
name = "main-master" target_group_id = yandex_compute_instance_group.k8s_master.load_balancer[0].target_group_id
// Verifies that Traefik daeomnset has started on node
healthcheck {
name = "master-instance-group-traefik"
healthy_threshold = 2
unhealthy_threshold = 2
interval = 5
timeout = 4
tcp_options {
port = 80
}
}
}
attached_target_group {
target_group_id = yandex_compute_instance_group.k8s_worker.load_balancer[0].target_group_id
// Verifies that Traefik daeomnset has started on node
healthcheck {
name = "worker-instance-group-traefik"
healthy_threshold = 2
unhealthy_threshold = 2
interval = 5
timeout = 4
tcp_options {
port = 80
}
}
}
}
resource "yandex_lb_target_group" "k8s_main_master" {
name = "k8s-main-master"
region_id = "ru-central1" region_id = "ru-central1"
target { target {
subnet_id = yandex_vpc_subnet.default_ru_central1_d.id subnet_id = yandex_vpc_subnet.default_ru_central1_d.id
address = yandex_compute_instance.master.network_interface.0.ip_address address = yandex_compute_instance.k8s_main_master.network_interface.0.ip_address
} }
} }
main/locals.tf
+5 -2
View File
@@ -1,7 +1,10 @@
locals { locals {
master_ip = "10.4.0.3" k8s_main_master_ip = "10.4.0.3"
master_fqdn = "master." k8s_main_master_fqdn = "master.k8s.internal"
k3s_data_dir = "/mnt/k3s" k3s_data_dir = "/mnt/k3s"
k3s_channel = "stable" k3s_channel = "stable"
final_frontend_domain = var.frontend_domain != null ? var.frontend_domain : var.domain
final_frontend_develop_domain = var.frontend_develop_domain != null ? var.frontend_develop_domain : "dev.${var.domain}"
} }
main/logging.tf
+2 -2
View File
@@ -1,5 +1,5 @@
resource "yandex_logging_group" "default" { resource "yandex_logging_group" "api_gateway" {
name = "default" name = "api-gateway"
retention_period = "336h0m0s" retention_period = "336h0m0s"
} }
main/object_storage.tf
+2 -2
View File
@@ -1,5 +1,5 @@
resource "yandex_storage_bucket" "frontend" { resource "yandex_storage_bucket" "frontend" {
bucket = var.domain bucket = local.final_frontend_domain
default_storage_class = "STANDARD" default_storage_class = "STANDARD"
force_destroy = false force_destroy = false
max_size = 104857600 max_size = 104857600
@@ -12,7 +12,7 @@ resource "yandex_storage_bucket" "frontend" {
} }
resource "yandex_storage_bucket" "frontend_develop" { resource "yandex_storage_bucket" "frontend_develop" {
bucket = "dev.${var.domain}" bucket = local.final_frontend_develop_domain
default_storage_class = "STANDARD" default_storage_class = "STANDARD"
force_destroy = false force_destroy = false
max_size = 104857600 max_size = 104857600
main/outputs.tf
+1 -1
View File
@@ -4,7 +4,7 @@ output "registry_data" {
} }
} }
output "api_gateway_data" { output "frontend_api_gateway_data" {
value = { value = {
domain = yandex_api_gateway.frontend.domain domain = yandex_api_gateway.frontend.domain
} }
main/templates.tf
+13 -6
View File
@@ -1,4 +1,4 @@
data "template_file" "main_master_cloud_init" { data "template_file" "k8s_main_master_cloud_init" {
template = file("${path.module}/configs/cloud_init/main_master.yaml") template = file("${path.module}/configs/cloud_init/main_master.yaml")
vars = { vars = {
k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml")) k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml"))
@@ -9,33 +9,40 @@ data "template_file" "main_master_cloud_init" {
} }
} }
data "template_file" "master_cloud_init" { data "template_file" "k8s_master_cloud_init" {
template = file("${path.module}/configs/cloud_init/master.yaml") template = file("${path.module}/configs/cloud_init/master.yaml")
vars = { vars = {
k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml")) k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml"))
k3s_credential_provider = base64encode(file("${path.module}/configs/k3s/yc-credential-provider")) k3s_credential_provider = base64encode(file("${path.module}/configs/k3s/yc-credential-provider"))
k3s_dir = local.k3s_data_dir k3s_dir = local.k3s_data_dir
k3s_token = random_password.k3s_token.result k3s_token = random_password.k3s_token.result
k3s_master_ip = local.master_ip k3s_master_ip = local.k8s_main_master_fqdn
yc_cloud_id = var.cloud_id yc_cloud_id = var.cloud_id
} }
} }
data "template_file" "worker_cloud_init" { data "template_file" "k8s_worker_cloud_init" {
template = file("${path.module}/configs/cloud_init/worker.yaml") template = file("${path.module}/configs/cloud_init/worker.yaml")
vars = { vars = {
k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml")) k3s_credential_provider_config = base64encode(file("${path.module}/configs/k3s/credentialprovider.yaml"))
k3s_credential_provider = base64encode(file("${path.module}/configs/k3s/yc-credential-provider")) k3s_credential_provider = base64encode(file("${path.module}/configs/k3s/yc-credential-provider"))
k3s_dir = local.k3s_data_dir k3s_dir = local.k3s_data_dir
k3s_token = random_password.k3s_token.result k3s_token = random_password.k3s_token.result
k3s_master_ip = local.master_ip k3s_master_ip = local.k8s_main_master_fqdn
yc_cloud_id = var.cloud_id yc_cloud_id = var.cloud_id
} }
} }
data "template_file" "api_gateway_spec" { data "template_file" "frontend_api_gateway_spec" {
template = file("${path.module}/configs/api_gateway/spec.yaml") template = file("${path.module}/configs/api_gateway/spec.yaml")
vars = { vars = {
bucket_name = yandex_storage_bucket.frontend.bucket bucket_name = yandex_storage_bucket.frontend.bucket
} }
} }
data "template_file" "frontend_develop_api_gateway_spec" {
template = file("${path.module}/configs/api_gateway/spec.yaml")
vars = {
bucket_name = yandex_storage_bucket.frontend_develop.bucket
}
}
main/variables.tf
+9 -7
View File
@@ -2,17 +2,19 @@ variable "folder_id" {}
variable "cloud_id" {} variable "cloud_id" {}
variable "resources_prefix" {
type = string
default = ""
}
variable "domain" { variable "domain" {
description = "Domain to issue TLS certificates for with Let's Encrypt" description = "Domain to issue TLS certificates for with Let's Encrypt"
type = string type = string
} }
variable "ssh_public_key_path" { variable "frontend_domain" {
description = "This public key will be placed on all nodes" description = "Domain to serve frontend from (must equal domain or *.domain), default: domain"
type = string type = string
default = null
}
variable "frontend_develop_domain" {
description = "Domain to serve develop version of frontend from (must equal domain or *.domain), default: dev.domain"
type = string
default = null
} }