Add GCS bucket to hold terraform state

Author: yiannistri

cmd/clusters-service/app/server.go

@@ -438,7 +438,7 @@ func RunInProcessGateway(ctx context.Context, addr string, setters ...Option) er
 		// Secure `/v1` and `/gitops/api` API routes
 		grpcHttpHandler = auth.WithAPIAuth(grpcHttpHandler, srv)
 		gitopsBrokerHandler = auth.WithAPIAuth(gitopsBrokerHandler, srv)
-		staticAssets = auth.WithAPIAuth(staticAssets, srv)
+		staticAssets = auth.WithWebAuth(staticAssets, srv)
 	}
 
 	commonMiddleware := func(mux http.Handler) http.Handler {

terraform/README.md

@@ -0,0 +1,26 @@
+### Services
+
+#### Production
+- https://gitlab.git.dev.weave.works running on cluster `gitlab-01` on GKE, backed by [repo](https://github.com/wkp-example-org/gitlab-01)
+
+
+
+### How to run Terraform locally
+
+1. Authenticate with GCP using `gcloud`.
+
+```sh
+gcloud auth application-default login
+```
+
+2. Switch to the working directory of your choice and run Terraform.
+```sh
+cd ./environments/dev
+terraform init 
+terraform plan
+```
+
+3. View output variables (optional).
+```sh
+terraform output
+```

terraform/environments/dev/.terraform.lock.hcl

@@ -0,0 +1,27 @@
+module "demo_02" {
+  source = "../../modules/gke-cluster"
+
+  cluster_name = "demo-02"
+  region = "europe-north1"
+  location = "europe-north1-a"
+  machine_type = "n1-standard-2"
+}
+
+output "demo_02_endpoint" {
+  value = module.demo_02.endpoint
+}
+ 
+output "demo_02_client_certificate" {
+  value = module.demo_02.client_certificate
+  sensitive = true
+}
+
+output "demo_02_client_key" {
+  value = module.demo_02.client_key
+  sensitive = true
+}
+
+output "demo_02_cluster_ca_certificate" {
+  value = module.demo_02.cluster_ca_certificate
+  sensitive = true
+}

terraform/environments/dev/demo-02.tf

@@ -0,0 +1,27 @@
+module "dex_01" {
+  source = "../../modules/gke-cluster"
+
+  cluster_name = "dex-01"
+  region = "europe-north1"
+  location = "europe-north1-a"
+  machine_type = "n1-standard-2"
+}
+
+output "dex_01_endpoint" {
+  value = module.dex_01.endpoint
+}
+ 
+output "dex_01_client_certificate" {
+  value = module.dex_01.client_certificate
+  sensitive = true
+}
+
+output "dex_01_client_key" {
+  value = module.dex_01.client_key
+  sensitive = true
+}
+
+output "dex_01_cluster_ca_certificate" {
+  value = module.dex_01.cluster_ca_certificate
+  sensitive = true
+}

terraform/environments/dev/dex-01.tf

@@ -0,0 +1,22 @@
+# Zone delegation has been setup manually 
+# in the Weave Cloud dev account
+locals {
+  zone_id =  "Z038735537FBV7QQ5O394"
+  zone_name ="wge.dev.weave.works"
+}
+
+resource "aws_route53_record" "demo_02_ingress" {
+  zone_id = local.zone_id
+  name    = "demo-02"
+  type    = "A"
+  ttl     = "300"
+  records = ["35.228.235.99"]
+}
+
+resource "aws_route53_record" "dex_01_ingress" {
+  zone_id = local.zone_id
+  name    = "dex-01"
+  type    = "A"
+  ttl     = "300"
+  records = ["35.228.83.196"]
+}

terraform/environments/dev/dns.tf

@@ -0,0 +1,2 @@
+project = "wks-tests"
+region  = "europe-west1"

terraform/environments/dev/terraform.tfvars

@@ -0,0 +1,32 @@
+terraform {
+  backend "gcs" {
+    bucket  = "weave-gitops-enterprise-terraform-state"
+    prefix  = "dev"
+  }
+
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "~> 4.10.0"
+    }
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4.0.0"
+    }
+  }
+
+  required_version = ">= 1.1.5"
+}
+
+variable "project" {
+  description = "GCP project id"
+}
+
+variable "region" {
+  description = "GCP project region"
+}
+
+provider "google" {
+  project = var.project
+  region = var.region
+}

terraform/environments/dev/versions.tf

@@ -0,0 +1,27 @@
+module "gitlab_01" {
+  source = "../../modules/gke-cluster"
+
+  cluster_name = "gitlab-01"
+  region = var.region
+  location = "europe-west1-b"
+  machine_type = "n2-standard-4"
+}
+
+output "gitlab_01_endpoint" {
+  value = module.gitlab_01.endpoint
+}
+ 
+output "gitlab_01_client_certificate" {
+  value = module.gitlab_01.client_certificate
+  sensitive = true
+}
+
+output "gitlab_01_client_key" {
+  value = module.gitlab_01.client_key
+  sensitive = true
+}
+
+output "gitlab_01_cluster_ca_certificate" {
+  value = module.gitlab_01.cluster_ca_certificate
+  sensitive = true
+}