198 lines
5.1 KiB
YAML
198 lines
5.1 KiB
YAML
name: Workflow Call Apply GCP Cloud Resources
|
|
|
|
env:
|
|
STATE: "create"
|
|
|
|
on:
|
|
workflow_call:
|
|
secrets:
|
|
SSH_PUBLIC_KEY:
|
|
required: true
|
|
GCP_CREDENTIALS_JSON:
|
|
required: true
|
|
jobs:
|
|
gcs:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Pre Setup
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y python3-pip jq
|
|
python -m pip install --upgrade pip jinja2
|
|
|
|
- name: Set up Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.6.4
|
|
|
|
- name: Authenticate with Google Cloud
|
|
uses: google-github-actions/auth@v1
|
|
with:
|
|
credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
|
|
|
|
- name: Set up Google Cloud SDK
|
|
uses: 'google-github-actions/setup-gcloud@v1'
|
|
with:
|
|
version: '>= 363.0.0'
|
|
|
|
- name: Check Bucket Existence and Set Environment Variable
|
|
run: |
|
|
BUCKET_NAME="iac_gcp_terraform_state"
|
|
BUCKET_EXISTS=$(gsutil ls -b gs://${BUCKET_NAME} &> /dev/null && echo "true" || echo "false")
|
|
echo "BUCKET_EXISTS=${BUCKET_EXISTS}" >> $GITHUB_ENV
|
|
shell: bash
|
|
|
|
- name: Terraform Init And Apply
|
|
run: |
|
|
if [ "$BUCKET_EXISTS" = "true" ]; then
|
|
echo "Bucket ${BUCKET_NAME} exists."
|
|
else
|
|
echo "Bucket ${BUCKET_NAME} does not exist."
|
|
bash run_terraform.sh
|
|
fi
|
|
working-directory: iac_modules/terraform/gcp/gcs/
|
|
network:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- gcs
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Pre Setup
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y python3-pip jq
|
|
python -m pip install --upgrade pip jinja2
|
|
|
|
- name: Set up Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.6.4
|
|
|
|
- name: Authenticate with Google Cloud
|
|
uses: google-github-actions/auth@v1
|
|
with:
|
|
credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
|
|
|
|
- name: Terraform Init And Apply
|
|
run: |
|
|
bash run_terraform.sh
|
|
working-directory: iac_modules/terraform/gcp/network/
|
|
vhost:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- gcs
|
|
- network
|
|
- key_pair
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Pre Setup
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y python3-pip jq
|
|
python -m pip install --upgrade pip jinja2
|
|
|
|
- name: Set up Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.6.4
|
|
|
|
- name: Authenticate with Google Cloud
|
|
uses: google-github-actions/auth@v1
|
|
with:
|
|
credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
|
|
|
|
- name: Fetch SSH Keys
|
|
run: echo "${{ secrets.SSH_PUBLIC_KEY }}" > ssh_keys.pub
|
|
working-directory: iac_modules/terraform/gcp/vhost/
|
|
|
|
- name: Terraform Init And Apply
|
|
run: |
|
|
python3 scripts/init.py && bash scripts/run_terraform.sh
|
|
working-directory: iac_modules/terraform/gcp/vhost/
|
|
|
|
key_pair:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- gcs
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Pre Setup
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y python3-pip jq
|
|
python -m pip install --upgrade pip jinja2
|
|
|
|
- name: Set up Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.6.4
|
|
|
|
- name: Authenticate with Google Cloud
|
|
uses: google-github-actions/auth@v1
|
|
with:
|
|
credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
|
|
|
|
- name: Set up Google Cloud SDK
|
|
uses: 'google-github-actions/setup-gcloud@v1'
|
|
with:
|
|
version: '>= 363.0.0'
|
|
|
|
- name: Check if SSH Metadata exists
|
|
id: check_ssh_metadata
|
|
run: bash scripts/check_ssh_metadata.sh
|
|
working-directory: iac_modules/terraform/gcp/key_pair/
|
|
|
|
- name: Fetch SSH Keys
|
|
if: steps.check_ssh_metadata.outputs.ssh_metadata_exists == 'false'
|
|
run: echo "${{ secrets.SSH_PUBLIC_KEY }}" > ssh_keys.pub
|
|
working-directory: iac_modules/terraform/gcp/key_pair/
|
|
|
|
- name: Terraform Init And Apply
|
|
if: steps.check_ssh_metadata.outputs.ssh_metadata_exists == 'false'
|
|
run: |
|
|
python3 scripts/init.py && bash scripts/run_terraform.sh
|
|
working-directory: iac_modules/terraform/gcp/key_pair/
|
|
|
|
firewall:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- gcs
|
|
- network
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Pre Setup
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y python3-pip jq
|
|
python -m pip install --upgrade pip jinja2
|
|
|
|
- name: Set up Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.6.4
|
|
|
|
- name: Authenticate with Google Cloud
|
|
uses: google-github-actions/auth@v1
|
|
with:
|
|
credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }}
|
|
|
|
- name: Terraform Init And Apply
|
|
run: |
|
|
python3 scripts/init.py && bash scripts/run_terraform.sh
|
|
working-directory: iac_modules/terraform/gcp/firewall/
|