Linux or MacOS (runs a bash script to return information about Istio's LoadBalancers)
terraform
kubectl
jq
base64
An example of a project that uses this Terraform module can be found here .
# Copy and edit with your values
cp terraform.tfvars.example terraform.tfvars
terraform init
terraform plan
terraform apply
Using environment variables:
# Update with your values
export TF_VAR_registry_credentials=' [{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'
# Optional: Reduce flux resource requests for edge/resource constrained environments
export TF_VAR_reduce_flux_resources=true
terraform init
terraform plan
terraform apply
# Update with your values inline
terraform init
terraform plan -var ' registry_credentials=[{registry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'
terraform apply -var ' registry_credentials=[{regsitry="registry1.dso.mil",username="REPLACE_ME",password="REPLACE_ME"}]'
Name
Description
Type
Default
Required
registry_credentials
System-wide registry credentials to be applied so Kubernetes can pull container images. Creds for registry1.dso.mil are required, and you can optionally provide any other creds for other private registries as well
list(object({ registry = string username = string password = string }))
n/a
yes
big_bang_manifest_file
Path to the root k8s yaml manifest. Typically contains a Namespace, GitRepository, and Kustomization. See https://repo1.dso.mil/platform-one/quick-start/big-bang/-/blob/master/bigbang/start.yaml for example
string
"k8s/start.yaml"
no
custom_credentials
Any custom credentials needed for custom BigBang implementation
list(object({ namespace = string name = string username = string password = string }))
[]
no
custom_flux_file
Path to the optional custom flux k8s yaml manifest
string
""
no
kube_conf_file
Path to the KUBECONFIG file to use to connect to the cluster. If the file passed has multiple contexts in it the correct context is expected to already be set in contexts.current-context
.
string
"~/.kube/config"
no
Name
Description
external_load_balancer
JSON array with information on all LoadBalancer services in the istio-system namespace. Example output:[ { "name": "public-ingressgateway", "ip": "192.0.2.0", "hostname": "null" }, {...} ]