/terraform-helm-linkerd

Primary LanguageHCL

Example

provider "kubernetes" {
  config_path = "~/.kube/config"
}

provider "helm" {
  kubernetes {
    config_path = "~/.kube/config"
  }
}

module "service_mesh" {
  source = "../"

  ha_enabled  = true
  cni_enabled = true

  chart_timeout               = 2000
  ca_cert_expiration_hours    = 8760  # 1 year
  trust_anchor_validity_hours = 17520 # 2 years
  issuer_validity_hours       = 8760  # 1 year (must be shorter than the trusted anchor)

  # optional value for linkerd config (in this case, override the default 'clockSkewAllowance' of 20s (for example purposes))
  additional_yaml_config = yamlencode({ "identity" : { "issuer" : { "clockSkewAllowance" : "30s" } } })

  extensions = ["viz"]
}

Inputs

Name Description Type Default Required
additional_yaml_config used for additional customization of the linkerd helm chart values string "" no
atomic Whether the chart should be installed with the atomic flag bool true no
ca_cert_expiration_hours Number of hours added to installation time to calculate trust anchor certification expiration date number 8760 no
certificate_controlplane_duration Number of hours for controlplane certification expiration string "1440h0m0s" no
certificate_controlplane_renewbefore Number of hours before the control plane certification expiration to request for certificate renewal string "48h0m0s" no
certificate_webhook_duration Number of hours for webhook certification expiration string "1440h0m0s" no
certificate_webhook_renewbefore Number of hours before the webhook certification expiration to request for certificate renewal string "48h0m0s" no
chart_namespace Namespace to install linkerd. string "linkerd" no
chart_repository Helm chart repository string "https://helm.linkerd.io/stable" no
chart_timeout The number of seconds to wait for the linkerd chart to be deployed. the default is 900 (15 minutes) string "900" no
chart_version Helm chart version string "2.11.1" no
cni_enabled Whether to enable the cni plugin. bool true no
extensions Linkerd extensions to install. set(string) 
[
  "viz"
]
 no
ha_enabled Whether to enable high availability settings. bool true no
issuer_validity_hours Number of hours for which the issuer certification is valid (must be shorter than the trust anchor) number 8760 no
trust_anchor_validity_hours Number of hours for which the trust anchor certification is valid number 17520 no

Outputs

No outputs.

Quick start

1.Install Terraform.
2.Sign into your Azure Account

# Login with the Azure CLI/bash terminal/powershell by running
az login

# Verify access by running
az account show --output jsonc

# Confirm you are running required/pinned version of terraform
terraform version

Deploy the code

cd examples/sandbox
terraform init
terraform plan -out sandbox-01.tfplan
terraform apply sandbox-01.tfplan

Test the code

cd tests
go mod init 'tests'
go test -run TestSandboxExample -v -timeout 30m

Or Using Make

make test