first commit

.gitignore

@@ -0,0 +1,34 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version 
+# control as they are data points which are potentially sensitive and subject 
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc

.terraform.lock.hcl

@@ -0,0 +1,45 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "5.7.0"
+  constraints = "~> 5.7.0"
+  hashes = [
+    "h1:SReCEKB29vK0duwz7Pk2bSCa2M2BqvtlFwS9Bqs3ADw=",
+    "zh:03240d7fc041d5331db7fd5f2ca4fe031321d07d2a6ca27085c5020dae13f211",
+    "zh:0b5252b14c354636fe0348823195dd901b457de1a033015f4a7d11cfe998c766",
+    "zh:2bfb62325b0487be8d1850a964f09cca0d45148faec577459c2a24334ec9977b",
+    "zh:2f9e317ffc57d2b5117cfe8dc266f88aa139b760bc93d8adeed7ad533a78b5a3",
+    "zh:36512725c9d7c559927b98fead04be58494a3a997e5270b905a75a468e307427",
+    "zh:5483e696d3ea764f746d3fe439f7dcc49001c3c774122d7baa51ce01011f0075",
+    "zh:5967635cc14f969ea26622863a2e3f9d6a7ddd3e7d35a29a7275c5e10579ac8c",
+    "zh:7e63c94a64af5b7aeb36ea6e3719962f65a7c28074532c02549a67212d410bb8",
+    "zh:8a7d5f33b11a3f5c7281413b431fa85de149ed8493ec1eea73d50d2d80a475e6",
+    "zh:8e2ed2d986aaf590975a79a2f6b5e60e0dc7d804ab01a8c03ab181e41cfe9b0f",
+    "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
+    "zh:9c7b8ca1b17489f16a6d0f1fc2aa9c130978ea74c9c861d8435410567a0a888f",
+    "zh:a54385896a70524063f0c5420be26ff6f88909bd8e6902dd3e922577b21fd546",
+    "zh:aecd3a8fb70b938b58d93459bfb311540fd6aaf981924bf34abd48f953b4be0d",
+    "zh:f3de076fa3402768d27af0187c6a677777b47691d1f0f84c9b259ff66e65953e",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/helm" {
+  version     = "2.11.0"
+  constraints = "2.11.0"
+  hashes = [
+    "h1:l+2Ni3UyoFRxyvxRblPQQYck1/iFmZKFy/UcI3ZRtjg=",
+    "zh:013857c88f3e19a4b162344e21dc51891c4ac8b600da8391f7fb2b6d234961e1",
+    "zh:044fffa233a93cdcf8384afbe9e1ab6c9d0b5b176cbae56ff465eb9611302975",
+    "zh:208b7cdd4fa3a1b25ae817dc00a9198ef98be0ddc3a577b5b72bc0f006afb997",
+    "zh:3e8b33f56cfe387277572a92037a1ca1cbe4e3aa6b5c19a8c2431193b07f7865",
+    "zh:7dd663d5619bd71676899b05b19d36f585189fdabc6b0b03c23579524a8fd9bf",
+    "zh:ae5329cb3e5bf0b86b02e823aac3ef3bd0d4b1618ff013cd0076dca0be8322e4",
+    "zh:ba6201695b55d51bedacdb017cb8d03d7a8ada51d0168ac44fef3fa791a85ab4",
+    "zh:c61285c8b1ba10f50cf94c9dcf98f2f3b720f14906a18be71b9b422279b5d806",
+    "zh:d522d388246f38b9f329c511ec579b516d212670b954f9dab64efb27e51862af",
+    "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
+    "zh:f92546e26b670da61437ae2cbd038427c9374ce5f7a78df52193397da90bd997",
+    "zh:f9ad1407e5c0d5e3474094491025bf100828e8c1a01acdf9591d7dd1eb59f961",
+  ]
+}

Jenkinsfile

@@ -0,0 +1,46 @@
+pipeline {
+    agent {
+        label 'terraform-slave'
+    }
+    // environment {
+    //     //KUBECONFIG = credentials('kubernetes-config')
+    // }
+    stages {
+        // stage('test') {
+        //     steps {
+        //         sh 'python --version'
+        //     }
+        // }
+        stage('TF Plan') {
+            // agent {
+            //     docker {
+            //         image 'hashicorp/terraform:latest'
+            //         // Run the container on the node specified at the
+            //         // top-level of the Pipeline, in the same workspace,
+            //         // rather than on a new node entirely:
+            //         args  '--entrypoint="" -u root -v /opt/jenkins/.aws:/root/.aws'
+
+            //     }
+            // }
+            steps {
+               container('terraform') {
+                 withCredentials([[
+                     $class: 'AmazonWebServicesCredentialsBinding',
+                     credentialsId: "f89b3f7d-23ec-42b9-9687-e4acf01d7507",
+                     accessKeyVariable: 'AWS_ACCESS_KEY_ID',
+                     secretKeyVariable: 'AWS_SECRET_ACCESS_KEY']]) {
+                        sh 'terraform version'
+                        sh 'terraform init'
+                        sh 'terraform apply' 
+                 }
+                 
+               }
+            }
+        }
+        // stage('Deploy Helm chart') {
+        //     steps {
+        //         sh "helm install ingress-nginx ./deploy/charts/ingress-nginx --namespace ingress-nginx --set controller.publishService.enabled=true --set controller.service.loadBalancerIP=${env.LB_IP}"
+        //     }
+        // }
+    }
+}

easytravel.tf

@@ -0,0 +1,17 @@
+resource "helm_release" "easytravel" {
+  name       = "easytravel"
+  repository = "https://gitea.nttdata-xlabs.com/api/packages/wiegee/helm"
+  chart      = "easytravel"
+  namespace  = "demo"
+  timeout    = 500
+
+  
+
+  depends_on = [
+    # helm_release.nginx-ingress,
+    # kubernetes_namespace.jenkins_namespace,
+    # kubectl_manifest.jenkins_volumes,
+    # kubectl_manifest.jenkins_sa,
+    # kubernetes_secret.oauth
+  ]
+}

terraform.tf

@@ -0,0 +1,52 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
+data "aws_eks_cluster" "xOps" {
+  name = "xOps"
+}
+
+terraform {
+
+  backend "s3" {
+    bucket = "terraform-xops-demos"
+    key = "demo"
+    region = "us-west-2"
+    dynamodb_table = "terraform-xops-lock-state"
+    encrypt = true
+  }
+
+  required_providers {
+     aws = {
+       source  = "hashicorp/aws"
+       version = "~> 5.7.0"
+     }
+
+ 
+    helm = {
+      version = "2.11.0"
+    }
+
+  }
+
+  required_version = "~> 1.3"
+}
+
+
+
+provider "aws" {
+  region     = "us-west-2"
+}
+
+
+
+provider "helm" {
+    kubernetes {
+        host                   = data.aws_eks_cluster.xOps.endpoint
+        cluster_ca_certificate = base64decode(data.aws_eks_cluster.xOps.certificate_authority[0].data)
+            exec {
+                api_version = "client.authentication.k8s.io/v1beta1"
+                args        = ["eks", "get-token", "--cluster-name", data.aws_eks_cluster.xOps.name]
+                command     = "aws"
+            }
+    }
+}