Spin up a developer ready Kubernetes cluster in DigitalOcean using Terraform. Protected by CloudFlare; monitored with Datadog.
- A Terraform Cloud API key
- DigitalOcean Personal Access Token
- DigitalOcean Spaces Access ID and Secret Key
- CloudFlare GLOBAL API key (not API token)
- Datadog API key
- Optional: Terraform installed locally Make sure to install > v0.12.29
-
Fork this repo
-
Store your Terraform Cloud API key as a secret called TF_API_TOKEN in the Github repo
-
Create a workspace in Terraform Cloud called k8s-prod-us-sfo and connect it to your forked repo
Variable | Description |
---|---|
do_token |
Your DigitalOcean access token |
do_cluster_name |
Name of the Kubernetes cluster |
do_space_name |
DigitalOcean Space Name |
do_access_id |
DigitalOcean Space Access Key |
do_secret_key |
DigitalOcean Space Secret |
dd_api_key |
Datadog API Key |
cloudflare_email |
Cloudflare Account Email |
cloudflare_api_key |
GLOBAL API key for Cloudflare (not token) |
cloudflare_zone_id |
ZoneID used to create DNS record |
mongo_root |
MongoDB Root Password |
mongo_user |
MongoDB User Account |
mongo_pw |
MongoDB User Password |
-
Trigger intial plan and apply to create the state In the workspace, on app.terraform.io, click 'queue plan' Wait for the plan to complete and click 'confirm' to run the initial apply
-
Set workspace type to Local In the workspace, on app.terraform.io, click 'settings' -> General Change the Execution Mode to Local. This will change the runs to complete automatically via the github action on future commits.
- Commit a code change to develop Branch
- Watch 'github actions' of repo on github.com to validate the 'Planning' phase
- Merge to master branch and watch 'github actions' to validate the 'Apply' phase completed succesfully
- Validate on Digital Ocean that cluster has been created
- Clone this repo and
cd
into it - Run
terraform init
to prepare Terraform - Run
terraform plan
to do a dry-run - run
terraform apply
to apply the plan - Validate on Digital Ocean that cluster has been created.
- Click on the 'actions' of the cluster in Digital Ocean to 'Download Kube Config'
- Alternatively: run
get-config.sh
from this repo
- Allow Terraform workspace to be defined via variable
- Rename do_Access_id to 'do_spaces_access_key'
- Rename do_secret_key to 'do_spaces_secret_key'
- Add 'troubleshooting section' to README